Privacy Policy

Who this policy covers

Everyone who interacts with harmonicvision.com and the Music Ace software: students using the lessons, teachers managing a school or studio license, parents managing a home subscription, and anyone browsing the site without an account.

What we collect

• Name and email address, for every account holder. Email uniquely identifies each user for sign-in, password resets, and adding students to a license. A user's name appears in their teacher's student lists and progress reports.
• Lesson progress, game scores, and product options. Recording progress and making it visible to the student and their teacher is a core function of the software.
• IP addresses, logged to ensure proper license use, such as preventing account sharing.
• Support correspondence, when you email us for help.
• Billing details for purchases made on the site: your name, email address, billing address and the last four digits of your card, held by our payment processor, Stripe. Full card numbers never reach our servers.

That's the whole list. No addresses, no demographic data, no behavioral profiles. We may analyze progress data internally in anonymized, aggregate form to improve the software's reliability and educational effectiveness.

Children and young people

Most students using our software are children. We comply with the Children's Online Privacy Protection Act (COPPA):

• We do not provide personal information to third parties.
• A student's data is visible only to that student and the teachers on their license, never to other students, other licenses, or anyone else.
• Students only receive email about access to the software: account setup, password resets, and technical support. Product announcements go to teachers and account owners who have opted in, never to students.
• There are no social-media features anywhere in the product or site, so there is no way for students to share personal information through it.

Cookies and local storage

• No third-party or advertising cookies.
• Signed-in users get a cookie that maintains their login session. Anonymous visitors get a single cookie recording that the cookie notice was shown.
• Lesson and game content is cached in your browser's local storage to shorten download times. No personal information is stored this way.
• If you choose Google Sign-In instead of email and password, Google sets its own cookies as part of its sign-in service; those are governed by Google's privacy policy, not ours.

How your data is protected

• Encrypted in transit (HTTPS/TLS) and at rest.
• Hosted on SOC 2-certified cloud infrastructure under Data Processing Agreements. Our cloud providers keep each customer's data private, including from their own retail businesses.
• Multi-factor authentication and least-privilege access controls for all administrative access.
• Everyone at Harmonic Vision with access to personal information completes annual training on FERPA, COPPA, and secure data handling.

Sharing

We do not sell personal information, use it for targeted advertising, or share it with anyone except the cloud service providers that run the software, and then only under agreements that hold them to the same standard. If we are ever legally required to disclose information, we will disclose the minimum required.

Card payments on the site are processed by Stripe, Inc. Stripe receives the details needed to take the payment and to send receipts, and handles them under its own privacy policy at stripe.com/privacy. We never see or store full card numbers.

Retention and deletion

We keep account data only while it's needed to provide the service, until the account is deleted or the subscription ends. When a school's contract ends, its records are removed from the database, and encrypted backups expire and are destroyed within 14 days. During an active license, teachers can export student-progress reports, and students can export their Doodle Pad compositions as MIDI files.

If something goes wrong

If a confirmed or suspected breach involves personal information, we notify affected schools without unreasonable delay, no later than 72 hours after discovery, and coordinate on communication to affected teachers, students, and families. Individual account holders are notified directly.

For schools and districts

Our full Data Privacy and Security Plan (NIST CSF-aligned, in the New York Ed Law §2-d format), NIST CSF alignment table, and signed student-data privacy agreements in your state's format are available on request. See Student data privacy at a glance.

Changes and contact

If this policy changes, we'll post the new version here with a new effective date; material changes will be announced to account owners by email. Questions: support@harmonicvision.com.