Privacy Policy

Who we are

Church Music Locker is a web product operated by Sonora Software, LLC, a Wyoming limited liability company. When these pages say “we,” “us,” or “our,” they mean Sonora Software, LLC. Church Music Locker is a brand name for that product, not a separate company.

This policy describes how we handle information when you visit www.churchmusiclocker.com, create an account, subscribe, or use the app. It does not apply to third-party sites we link to, including help documentation hosted alongside the app at /docs.

Information we collect

Account. We use Clerk to authenticate you. That typically includes your email address, name, and, if you join a church workspace, organization membership and role. Clerk may also process sign-in events and session data.

Billing. Subscriptions are processed by Stripe. We receive subscription status, plan type, and related customer identifiers. We do not store full payment card numbers on our servers.

Library and planning content. You (and members of a church workspace you belong to) may enter piece metadata, collections, services, performances, groups, templates, and uploaded sheet-music files (typically PDFs). That content is stored so we can provide the product.

Technical data. Our hosting provider (Vercel) and related infrastructure may log IP address, browser type, and request metadata needed to operate and secure the service.

How we use information

• Provide, maintain, and secure Church Music Locker
• Authenticate you and apply workspace permissions
• Process trials, subscriptions, and billing
• Extract bibliographic metadata from uploaded scores (see AI processing below)
• Send transactional email (for example, account or billing mail)
• Send optional product-updates email if you opt in at sign-up or in Settings
• Diagnose errors and improve reliability

AI processing of scores

When you import a score (PDF scan), we may send page images or extracted text to third-party AI providers through the Vercel AI Gateway (currently including OpenAI and Google models) to read title-page metadata, detect structure such as multi-movement works, transcribe lyrics, and generate embeddings used inside your workspace. The PDF is discarded after that processing finishes. Lyrics are always used to generate those search embeddings; we only keep the transcribed lyrics as plain text on the piece if you opt in at upload (for bulletin use, and only when the text is not copyrighted or you have the rights or permission to use it). We do not use your library content to train our own models. Those providers process data under their own terms and may retain it according to their policies.

Who can see workspace data

A personal workspace is visible to the account holder. A church (organization) workspace is visible to members of that organization, according to their roles. We do not sell your library to other churches or list it as a public catalog.

Service providers

We use companies that process data on our behalf, including:

• Clerk — authentication and organizations
• Stripe — payments and billing portal
• Supabase — database and file storage
• Resend — email delivery
• Vercel — hosting, Web Analytics, and AI Gateway for OCR/embeddings
• OpenAI (via that gateway) — model inference on imported scores

Cookies and similar technology

We and our providers use cookies and similar storage for sign-in sessions, security, and essential operation of the site (for example Clerk sessions). We use Vercel Web Analytics for aggregated page-view insights; it does not use advertising cookies. We do not run a separate advertising cookie program on the marketing pages described here.

Retention and deletion

We keep account and workspace data while your account or subscription is active and as needed for billing, security, and legal obligations. You can cancel a subscription through the Stripe billing portal in Settings. To request deletion of an account or workspace data, email privacy@churchmusiclocker.com. Some records (for example invoices) may be retained as required by law or our processors.

Children

Church Music Locker is intended for church music staff and adult account holders. It is not directed at children under 13, and we do not knowingly collect personal information from children.

Your choices

Depending on where you live, you may have rights to access, correct, or delete personal information, or to object to certain processing. Contact us at privacy@churchmusiclocker.com. We will respond as required by applicable law.

Product updates and news are optional. We only add you to that list if you opt in at sign-up or later in Settings. We do not sell your email or share the list with other companies for their marketing. Resend sends the messages we write. You can unsubscribe in Settings or via the link on those emails.

Location

Sonora Software, LLC is organized in Wyoming. We and our providers may process information in the United States and other countries where they operate.

Changes

We may update this policy. The effective date at the top will change when we do. Continued use of Church Music Locker after an update means you accept the revised policy.

Contact

Privacy questions: privacy@churchmusiclocker.com
Sonora Software, LLC
Wyoming, United States

The agreement that governs your use of Church Music Locker is in our Terms of Use.