Privacy Policy

Effective: May 8, 2026

The short version

We collect the minimum we need to run the service: your email (to log you in), your username, your charts and collections, and limited payment records if you go Pro. That's it.

We don't sell your data. We don't run ads. We don't use tracking cookies. Your charts and collections are yours, private drafts and private charts stay private, and you can permanently delete your data by deleting your account.

We use Supabase to store your data and Dodo Payments to process payments. Neither sees more than they need to.

This summary is here to be helpful, but the full policy below is what actually governs how we handle your data. Please read it.

1. Information We Collect

We collect the minimum information necessary to provide the Service:

Account information: Your email address (used for authentication via Supabase Auth) and your chosen username.
Chart and collection content: The chord charts and collections you create, including collection names, descriptions, notes, chart memberships, sections, phrases, chords, key changes, text notes, symbols, ordering, and associated metadata.
Payment information: If you purchase Tonico Pro, payment is processed by Dodo Payments. We do not store your credit card number or full payment method details. We do retain limited payment audit records and certain customer or transaction details sent to us by Dodo Payments to record, verify, and support your purchase.
Usage data: Basic analytics such as page views, feature usage patterns, and error logs to help us improve the Service. We do not use third-party advertising trackers.

2. How We Use Your Information

We use your information to:

Authenticate your identity and maintain your account.
Store, display, and publish your chord charts and collections as you direct.
Process Pro purchases and maintain your Pro access status.
Send you essential service communications (e.g., password resets, critical updates).
Improve the Service, fix bugs, and develop new features.

We will never use your email address for marketing purposes without your explicit consent.

3. Information Sharing

We do not sell, rent, or trade your personal information. We share data only with the following service providers, strictly for operating the Service:

Supabase: Hosts our database and provides authentication services. Your account data and your chart and collection content are stored on Supabase's infrastructure.
Dodo Payments: Processes Pro payments. Dodo Payments receives your payment details directly. We retain limited payment audit records and certain customer or transaction details Dodo Payments sends us to record and verify the payment.
Netlify: Hosts our static website and serverless functions.

We may also disclose information if required by law, legal process, or to protect the rights and safety of Tonico, our users, or the public.

4. Cookies

Tonico uses only essential cookies required for the Service to function:

Authentication cookies: Secure, HttpOnly cookies that keep you signed in to the builder.
Preference cookies: Local storage entries for your theme, viewer settings (font sizes, column layout), and editor preferences.

We do not use advertising cookies, tracking pixels, or third-party analytics cookies. There is no cookie consent banner because we do not use non-essential cookies.

5. Data Retention

Your charts, collections, and account data are retained for as long as your account exists. Published charts remain accessible at their public URLs until you unpublish them, make them private (Pro), or delete your account. Published collections remain accessible at their public URLs until you unpublish or delete them, or delete your account.

Tonico does not currently support permanent deletion of an individual chart by itself. Chart-level controls are unpublish and visibility changes. Collections can be unpublished or deleted individually.

If you delete your account, access is blocked immediately and a background deletion job permanently removes your account content (including charts, drafts, collections, profile data, and published artifacts) within up to 24 hours.

For legal, accounting, and fraud-prevention reasons, limited payment audit records may be retained where required by law. These records are detached from your deleted account whenever possible.

6. Your Rights

You have the right to:

Access your personal data at any time through the builder interface.
Correct your information by editing your profile, charts, or collections.
Delete your account and associated account content, including charts and collections, permanently through account deletion (processed within up to 24 hours after request).
Export your charts: Any Tonico user (Free or Pro) may export all their published charts — public and private — from their Dashboard. The export is delivered as a ZIP file containing the individual chart HTML files (in a charts/ folder) and the shared viewer assets (assets/viewer.css and assets/viewer.js) required to render them. Charts can be opened offline in any web browser as long as the folder structure within the ZIP is preserved. Tonico is not responsible for rendering issues caused by user modifications to the exported files.

Restricted Use of Exported Technical Components

The viewer assets bundled in the export (viewer.css, viewer.js) and the HTML page structure generated by Tonico are proprietary technical components of Tonico. They are licensed to you solely for personal, offline use of your own charts.

You may not use, copy, reverse-engineer, adapt, or build upon these technical components — including the HTML structure, CSS, or JavaScript — to develop, operate, or distribute any product or service that competes with, replicates, or is reasonably likely to harm Tonico. Your user-generated content (including your chart and collection data, chords, lyrics, annotations, titles, descriptions, and notes) is entirely your own and is not subject to this restriction.

To exercise any of your rights or if you have questions, contact us at privacy@tonico.app.

7. Children's Privacy

Tonico is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, please contact us and we will promptly delete the account and associated data after verifying the request.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will update the "Effective" date at the top of this page. We encourage you to review this page periodically. Your continued use of the Service after changes constitutes your acceptance of the updated policy.

9. Contact

If you have questions or concerns about this Privacy Policy or our data practices, contact us at privacy@tonico.app.