Personal Data Processing Policy — Russian Legal Profile

Revision PD-RU-007. English translation of the Russian legal profile.

1. Operator

The personal-data operator is sole proprietor Andrey Viktorovich Shabaev-Markin (ИП Андрей Викторович Шабаев-Маркин), INN 027815065929, OGRNIP 314774605600902. Personal-data enquiries: privacy@tapein.ru.

2. Scope

This Policy applies to the common Tape In legal framework and to the products active under this revision: Tape In Setlist, Tape In Studio and Metronome, as well as the unified Tape In account where used. A new service is added to this Policy before launch where it introduces a new purpose, data category, recipient, processing geography or another material processing characteristic.

3. Categories of data subjects

Tape In may process data of registered users; users of services that work without registration to the extent technical data actually arises; persons contacting support or making legal/privacy enquiries; and persons whose information a User places in User Content where a lawful basis exists. Registration for account-based products is intended for persons aged 18 or older.

4. Purposes and data

4.1. Registration, authentication and account servicing

Purpose: account creation and servicing, login, session management, email verification, access recovery and account security.

Data: email; internal user/workspace identifiers; account status; registration, login and verification timestamps; password hash; session, CSRF, verification and password-reset token identifiers/hashes; account settings and account-linked data required to provide the service.

Basis: entering into and performing a contract where applicable, compliance with legal obligations and other grounds provided by law. Where consent is required for a specific activity, it is requested separately.

4.2. Tape In Setlist

Purpose: creating, storing, editing, synchronizing, previewing, exporting/printing and providing setlists and related musical/organizational content.

Data: setlists, song titles, structure/order, notes and other User-entered information; data required for PDF generation, printing and selected sharing functions. Users must have a lawful basis if they enter third-party information.

4.3. Tape In Studio

Purpose: creating, storing, editing, synchronizing, recovering and providing audio projects and related materials.

Data: internal user/workspace identifiers; project, track, source and file names; project structure, clips, takes, arrangement, parameters and revision history; User audio recordings and technical audio metadata; Audio Notes and other User-entered information. Server data and private User audio materials are processed in Tape In’s Russian production environment; local working/recovery state may be stored on the User’s device through browser mechanisms.

4.4. Metronome

Purpose: providing a browser metronome and retaining local User settings. A Tape In account is not required for standalone Metronome use.

Core functions include tempo, start/stop, Tap Tempo, meter/beat unit, rhythm and practice modes, sound and volume. Sound and volume preferences may be stored locally in browser storage. Standalone Metronome use does not by itself create separate cloud storage for User musical content.

4.5. Tape In first-party analytics

Purpose: measuring service use, quality and product stability without third-party advertising analytics SDKs or cross-site advertising profiling.

Data may include page path, event type, referrer source, UTM parameters, browser language, viewport size, coarse device/operating-system/browser classes, a random session identifier and a daily pseudonymous visitor identifier. IP address and User-Agent are used transiently by the server to derive coarse characteristics and the daily pseudonymous identifier; raw IP and full User-Agent are not stored in the analytics database. Analytics does not receive email, the internal account identifier, setlist/project contents or audio files. Browser Do Not Track and Global Privacy Control signals are respected.

4.6. Transactional messages

Email and minimal technical data required for email verification, password reset, security and other transactional service messages.

4.7. Support and enquiries

Email, enquiry content and information voluntarily provided by the requester.

4.8. Marketing

Email and minimal consent/unsubscribe data only under separate prior consent. Refusal does not block the core service or transactional messages.

5. Processing operations

Depending on purpose: collection, recording, organization, accumulation, storage, updating, retrieval, use, transfer/provision/access to the extent required for service interaction, restriction, deletion and destruction.

6. Processing location and localization

The primary server infrastructure and databases for the current Russian scope are located in the Russian Federation with Selectel JSC (АО «Селектел»). Confirmed cloud-server location: 36 Berzarina Street, Building 3, Moscow 123060, Russian Federation. Russian localization requirements apply to data of Russian citizens.

7. Cross-border transfers

For the products within this revision — Tape In Setlist, Tape In Studio and Metronome — no external foreign recipient of User data is used. A function requiring a foreign recipient or different processing geography is enabled only after separate legal review and an update of applicable documents before launch.

8. Browser and device storage

Tape In Setlist may use first-party browser mechanisms for authentication, security, cache and limited offline operation. Tape In Studio may use a local database and other browser mechanisms for working state, recovery and preferences. Metronome may store sound and volume preferences in browser local storage. Clearing browser storage may remove local data but is not by itself a request to delete server-side data.

9. Retention and deletion

Data is kept no longer than necessary for the purpose, contract or law. An email-verification token is kept for up to 8 hours; a password-reset token for up to 1 hour.

Tape In Studio provides a 30-day User recovery window for deleted projects and Audio Notes. While Studio is free, Studio product data may be deleted after 365 consecutive calendar days without confirmed authenticated activity in Studio itself; activity in other Tape In services does not reset this period, and the unified Tape In account remains active.

Detailed Tape In first-party analytics events are retained for up to 90 days. Aggregated statistical metrics not intended to identify an individual User may be retained longer.

Technical/operational logs are kept within the actually configured rotation and capacity limits. Backups have a separate lifecycle and may expire at a different time from active-data deletion; data deleted under a product lifecycle is not treated as an ordinary per-User restore path from backup.

10. Data-subject rights

Data subjects may request information about processing and, where provided by law, correction, restriction, cessation, deletion/destruction and withdrawal of consent where processing is based on consent. Requests: privacy@tapein.ru.

11. Security

Organizational and technical measures include access control, identification/authentication, credential protection, CSRF/Origin controls, user/workspace isolation, HTTPS/TLS, backup/recovery, security logging and production change control.

12. Incidents

For personal-data incidents, the Operator follows applicable legal requirements and internal incident-response procedures, including regulator notifications where and when required by law.

13. Policy changes and new services

The current Policy is freely published on the site and available where personal data is collected. A material change in purposes, data categories, recipients, geography or processing methods, or a new service introducing such changes, requires prior legal review and an update of the Policy. Previous revisions are archived.