Privacy notice

1. Who we are and how to reach us

Guitar Jamz Inc. is responsible for your personal information (the "controller" under EU and UK law). Our address is 2033 San Elijo Ave Suite #254, Cardiff, CA 92007, USA. Email support@guitarjamz.com or call +1 866-914-1811. Write "Privacy" in the subject line so your message reaches the right person quickly.

2. What we collect

What we keep depends on how you use the service. We collect only what we need for the purposes in “How we use it”.

If you tell us your hands are sore after a session, we use that only to make your next sessions gentler and to show a safety tip. It is never used for offers or marketing and never shared. Apart from that, we do not ask for health details, government IDs or precise location, and you should not put them in notes, questions or messages. We use sensitive information only as the law permits. We do not use passwords: you sign in with an emailed link or code, or with a sign-in provider.

3. If you visit without an account

Our public pages count visits, video plays and sign-up steps without knowing who you are: counts are tied to a code that changes every day, not to you.

Google Analytics. Our website, members site and app use Google Analytics to count visits, pages viewed and steps such as starting a sign-up or a checkout, so we can see which pages work. Google receives the page address (with sign-in codes, tokens and personal details removed, and never from sign-in pages), your browser and device type, the website that sent you and your approximate location from your IP address, which Google does not store. We send no names, email addresses or member IDs, and Google Signals and ad personalization are off. In the EEA, the UK and Switzerland, Google Analytics sets no cookies and receives only cookieless signals, from which it can estimate totals without recognizing you. Elsewhere it sets its own cookies (see “Cookies”). You can block them in your browser or use Google's opt-out browser add-on (tools.google.com/dlpage/gaoptout).

If you answer the short questions on a campaign page, we set one cookie holding a random number, so you are not asked again on another page. Your answers stay on our server and become part of your plan if you sign up. If you do not, they are deleted 60 days after your last answer.

If you follow a link that lets you try lessons before making an account, we set one cookie holding a random number on the members site. With it, and with a code made from your connection that changes every day, we count how many free lessons you have played, so we know when to ask you to make a free account. Whether a link offers you lessons to try first can depend on a number worked out from your connection each time you visit, which we do not store. We also note which page or link sent you (such as a campaign tag or the referring site) and, if you make an account, that you did, to learn which ways of trying lessons work best. We do not record who you are until you sign up. If you then make an account, the lesson videos you played count toward the full videos your free account includes, and stay open to you. These records are deleted 180 days after your last visit; the daily connection counts after 7 days.

If you use the "Ask Jamz" box on our home page, we send your question to our AI provider to write the answer and pick lessons, and Cloudflare Turnstile checks that you are a person. We keep counters, tied to codes that change and to the same random-number cookie, to limit how many questions each visitor and the whole site can ask.

We also keep a record of each question for 180 days, so our team can see what people ask and improve Jamz and our lessons: the question (with any email address or phone number removed), what Jamz did with it, the lessons he suggested, the page and headline you saw, the website or link that brought you to us (its address without any search terms, and campaign tags such as utm_source), and your country. We count how many visits and questions came from the same random-number cookie. In the EU, the UK, Switzerland, Canada, Australia and Brazil, or when we cannot tell your country, we count your questions only within one browser session, so your visits are not linked. If you are signed in to GuitarJamz in the same browser, the record is linked to your account. We do not keep your IP address. Only our marketing and analytics staff can see these records.

4. How we use it, and our legal bases

We use personal information for the purposes below. If you are in the EU, UK or Switzerland, the right-hand column gives the legal basis we rely on.

Where we rely on legitimate interests, we have weighed them against your rights and kept the processing to what is needed. Ask us for details of that balance.

5. Personalization and profiling

To suggest what to practice next and when to email you, we use your answers, the lessons you watch and finish, your practice days and how sessions felt. From these we estimate your interests, how active you are, whether you might be about to stop, and the hour you usually practice. For customers of our earlier store, we also group past purchases to decide which offers to show. Some members get a personal offer, such as a discount or a bonus, chosen automatically from past purchases, country, activity and how similar offers did; its wording may be written automatically by a computer model, and each such offer says it was personalized.

None of this makes a decision with legal or similarly significant effects about you. It changes which lesson, plan, email or offer you see. We sometimes compare two versions of an email or page by showing each to part of our members, assigned at random.

You can object at any time, wherever you live: in Settings → Privacy & data, switch on "Object to personalization", or reply to any email. We then stop using these estimates: you get the general plan, emails at a standard hour and no personal offers.

6. Jamz, our AI guitar coach

Jamz is an AI. Its answers are written by a computer model, not by our teachers, and are labeled that way. It can be wrong; the lesson it links is the source to trust.

When you ask Jamz a question or ask for a plan, we send our AI provider, Microsoft Azure OpenAI Service in the United States, what it needs to answer: your question, the recent turns of the conversation, excerpts from relevant lessons, your learning preferences and a summary of your progress. Before sending, we remove email addresses, links and anything that looks like a password or key, we leave out your notes and account details, and we identify you only by a random code, never by name or email. Please do not type phone numbers, addresses or payment details into a question. We ask Microsoft not to store the conversation. Under Microsoft's terms, the content is not used to train Microsoft's or OpenAI's models; Microsoft may keep it for up to 30 days to detect abuse, and its authorized staff may review content flagged as abuse. We do not send your information to any other AI provider; if we change provider, we update this notice first.

To find the right lessons, the words of a search or a question may also be turned into numbers (an "embedding") by our AI provider.

We keep your conversations with Jamz in your account until you delete them. You can delete one conversation, or all of them at once, in Settings. Technical records of how an answer was built, and answers you choose to share with us as feedback, are kept for 90 days to fix mistakes. Our staff may read a conversation you share as feedback, or one our systems flag as possible misuse. We do not use your conversations to train AI models.

Jamz keeps a short card of what it knows about your playing (your level, goals and what you are working on). You can see, edit or hide it, or switch it off, in Settings.

Accounts of people who told us they are under 16 cannot use Jamz.

7. Video lessons and what you watch

Lessons play through Vimeo, which hosts the videos for us; its player is set not to track you. Some public pages show YouTube videos in its privacy-enhanced mode.

We keep a record of the lessons you watch to show your progress and pick your next lesson. We do not disclose which lessons you watch to advertisers, social networks or data brokers. Only the service providers who run the service for us can see it, under contract. If we ever wanted to share it with anyone else, we would ask your permission first, separately, and you could say no.

The tuner and the listening check ask before using your microphone and work on your device: audio is never recorded or sent to us.

8. Emails

Some emails are part of what you asked for: sign-in links and codes, receipts, renewal reminders, the lessons of a series you signed up for, answers and gifts, and practice reminders, which you can switch off.

Others are marketing: tips, new lessons and offers. Outside the United States, we send marketing only with your agreement: a box you ticked, or, if you joined our earlier store or email list, a record that you agreed then, which we ask you to renew after 24 months. Our sign-up boxes never start ticked. Each choice is recorded with the date and the exact wording you saw.

In the United States, creating a free account subscribes you to our emails. You can unsubscribe at any time with one click, from any of them or in your email preferences, and we record the date and how you joined.

Every marketing email has a one-click unsubscribe link. Replying "stop" pauses our emails at once, and we unsubscribe you from marketing within 10 business days. Our emails have no open-tracking pixels. Our own link tracking is off unless you switch it on in your email preferences; links that deliver what you asked for (an answer, a gift, a lesson) always record that action. We limit how often we write and do not send marketing at night in your time zone.

Email is delivered by Twilio SendGrid. Our sign-in and account emails pass through our own mail server, hosted by Microsoft Azure in the United States.

9. Support requests

When you write to support (by email, the contact form or Help in your account), we keep your email address, your name if you give it, your messages and attachments and our answers, and link them to your account when the address is yours. We use them to help you and to improve our help. See “How long we keep it” for how long.

10. Who receives your information

We share personal information only with the service providers that run the service for us, under contracts that limit them to our instructions, and in the cases listed after the table.

We may also share information: when the law requires it or to answer a valid legal request; to protect our rights, our members or the public, for example against fraud; with a buyer or successor if our business is sold or merged, under this notice; and with anyone else when you ask us to. Teachers see only totals, never who you are.

Our staff see member information only as their role needs it, for example to answer a support request. Their access is logged.

11. No sale, no targeted advertising

We do not sell personal information, and we do not share it for cross-context behavioral advertising, as California and other US state laws define those terms. We have not done so in the past 12 months. We do not knowingly sell or share the information of anyone under 16.

We honor Global Privacy Control and similar browser signals as a request to opt out of sale and sharing. Because we do neither, the signal changes nothing you would notice.

Free downloads and offers in exchange for your email. We sometimes give a free ebook, lesson series, jam tracks or an early-access place when you give us your email address. This can be a "financial incentive" under California law. You join by entering your email and, if you want marketing, ticking the box; you can leave at any time by unsubscribing, and you keep what you received. We estimate the value of your email address to us in good faith as about the cost of making and delivering the free item, because that is what we spend to offer it; ask us for the details of this estimate.

12. Cookies and similar storage

We use cookies and browser storage to run the service, remember your choices and, outside the EEA, the UK and Switzerland, for Google Analytics. We use no advertising cookies.

Cloudflare Turnstile, the Vimeo player and Shopify checkout may set their own cookies needed for security or to work. Public pages may show YouTube videos in its privacy-enhanced mode, which sets cookies only when you play one. Browsers' "Do Not Track" setting has no agreed meaning, so we do not respond to it, but we do not track you across other sites in any case.

13. How long we keep it

14. Downloading and deleting your data

In Settings → Privacy & data you can download a copy of your data at once, as a file.

You can also ask us to delete your account there. For your safety we ask you to have signed in within the last 10 minutes. You can cancel the request until we act on it; we complete it within 30 days, unless the law requires us to keep something, in which case we tell you what and why. We then delete your profile, plan, answers, progress, notes, journal, conversations, follow-up history, gifts, promotions, reviews and support conversations, erase your customer record at Shopify and delete your contact at SendGrid.

A few records stay, without your name or email, because the law requires them or to protect you and us: purchase and payment records, proof of consent, a coded record of your email address so we never email you again, and security logs.

If you have a subscription, we cancel it when we delete your account, so nothing renews afterwards. You can also cancel it yourself first, in Settings → Membership.

15. How we protect it

We encrypt information in transit, keep each member's data separate at the database level, limit staff access by role, require two-step sign-in for staff and offer it to members, and sign in without passwords. No system is perfectly secure. If a breach affects your information, we will tell you and the authorities as the law requires.

16. International transfers

We are based in the United States, and the service runs there. If you use it from elsewhere, your information is transferred to the United States, which may not have the same data protection laws as your country.

We collect your information directly in the United States, and our service providers process it there (Cloudflare also on its worldwide network) under contracts that require them to protect it. Ask us if you would like more detail about these protections.

17. Your rights

Depending on where you live, you can ask to:

• know what personal information we hold about you and get a copy, including in a portable format;
• correct it;
• delete it;
• opt out of sale, sharing, targeted advertising and profiling (we do none of the first three, and you can switch off personalization in Settings);
• restrict or object to our use of it, including for direct marketing at any time;
• withdraw consent at any time, without affecting what we did before;
• not be treated differently for using these rights. We will not deny you the service, charge you differently or give you a lower quality of service because you used them.

How to ask. Use Settings in your account, email support@guitarjamz.com or call +1 866-914-1811. We confirm who you are by asking you to sign in, or by writing to the email address on your account. Someone you authorize may ask for you, with your signed permission; we may still need to confirm your identity with you. We answer within 45 days (one month in the EU and UK), and tell you if we need more time.

Appeals. If we decline your request, you can appeal by replying to our answer with "Appeal" in the subject line. We will answer within 45 days. If you are not satisfied, you can contact your state attorney general.

California. California residents have the rights above under the California Consumer Privacy Act. The categories of information we collected in the past 12 months, their sources, purposes and recipients are in “What we collect”, “How we use it” and “Who receives your information”; we disclosed identifiers, account and purchase records, learning activity, device information and inferences to our service providers for business purposes, and sold or shared none. Under California's "Shine the Light" law, we do not share personal information with third parties for their own direct marketing.

Other US states. Residents of states with comprehensive privacy laws, including Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia, have the rights above as their law provides.

EU, UK and Switzerland. You also have the right to complain to your local data protection authority (in the UK, the Information Commissioner's Office). We would appreciate the chance to deal with your concern first: write to us and we will acknowledge it within 30 days.

18. Age limit

The service is for people aged 16 or older, and new members confirm their age (in the United States, by accepting the Terms when they sign up, which state the minimum age). If someone tells us they are younger, we close the account to use, and it receives no marketing, no personalization and no automated answers; a parent or the member can ask us to delete it completely. We do not knowingly collect information from children under 13. If you believe a child has given us information, write to us and we will delete it.

19. Changes to this notice

We will update this notice when what we do changes, and change the date at the top. If a change is significant, we will tell you by email or in the service before it applies.

Questions about this notice: support@guitarjamz.com, +1 866-914-1811, or Guitar Jamz Inc., 2033 San Elijo Ave Suite #254, Cardiff, CA 92007, USA. See also our Terms of Service.