Privacy Policy

Last Updated: August 26, 2025

1. Introduction

Christopher Connelly, operating Ableton Cookbook ("ableton.recipes", "we," "us," "our"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal information in compliance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

Contact Information: Christopher Connelly
10 Albion Street
Sackville, New Brunswick, Canada E4L 1G6
Email: [privacy email]
Phone: [contact number]

2. Personal Information We Collect

2.1 Information You Provide Directly

Account Registration: Name, email address, username, password
Profile Information: Display name, profile picture, bio (optional)
Content Uploads: Ableton Live rack files (.adg), descriptions, comments
Communications: Messages sent through our platform, support inquiries

2.2 Information Collected Automatically

Technical Data: IP address, browser type, operating system, device information
Usage Analytics: Pages visited, time spent, interaction patterns, feature usage
Cookies and Tracking: Session data, preferences, authentication tokens
File Metadata: Technical analysis of uploaded .adg files for compatibility and organization

2.3 Information from Third Parties

Social Login: If you use third-party authentication (Google, Facebook), we receive basic profile information in accordance with your settings on those platforms

3. Legal Basis for Processing (PIPEDA Compliance)

We collect and process personal information based on:

Consent: You provide explicit consent for specific purposes
Contract Performance: Processing necessary to provide our services
Legitimate Interests: Improving our platform, security, and user experience
Legal Compliance: Meeting Canadian legal and regulatory requirements

4. How We Use Your Personal Information

4.1 Primary Purposes

Service Provision: Account management, content hosting, community features
Security: Authentication, fraud prevention, platform security
Communication: Service updates, support responses, community notifications
Improvement: Analytics to enhance user experience and platform functionality

4.2 Secondary Purposes (with consent)

Marketing: Newsletter updates about new features (opt-in only)
Research: Aggregated analytics for educational content development
Community Building: Highlighting user contributions (with permission)

5. Information Sharing and Disclosure

5.1 We Do Not Sell Personal Information

We do not sell, trade, or rent your personal information to third parties.

5.2 Limited Sharing Circumstances

We may share personal information only when:

User Consent: You explicitly authorize sharing
Service Providers: Trusted partners providing technical services (hosting, analytics)
Legal Requirements: Court orders, legal processes, or regulatory compliance
Safety Protection: Preventing harm to individuals or property
Business Transfer: In case of merger, acquisition, or asset sale (with notice)

5.3 International Transfers

Some service providers may be located outside Canada. We ensure appropriate safeguards and privacy protections are in place for international data transfers.

6. Data Retention

6.1 Account Data

Active Accounts: Retained while your account is active
Inactive Accounts: Deleted after 3 years of inactivity (with notice)
Backup Systems: May retain data for additional 30 days in backup systems

6.2 Content and Uploads

User Content: Retained as long as publicly shared or account is active
Analytics Data: Aggregated data retained for 2 years
System Logs: Security and technical logs retained for 1 year

7. Your Privacy Rights Under PIPEDA

7.1 Access Rights

You have the right to:

Request access to personal information we hold about you
Receive information about how your data is used
Obtain copies of your personal information in a readable format

7.2 Correction Rights

Request correction of inaccurate or incomplete information
Update your profile and account information directly
Request deletion of outdated information

7.3 Withdrawal of Consent

Withdraw consent for optional data processing
Opt out of marketing communications
Delete your account and associated data

7.4 Data Portability

Request export of your uploaded content and profile data
Receive data in commonly used, machine-readable formats

8. Provincial Privacy Law Considerations

8.1 Quebec Residents (Law 25)

Quebec residents have additional rights under Quebec's privacy legislation, including enhanced consent requirements and data localization considerations.

8.2 Alberta and British Columbia (PIPA)

Residents of Alberta and British Columbia are protected under their respective Personal Information Protection Acts, which provide similar rights to PIPEDA.

9. Security Measures

9.1 Technical Safeguards

Encryption: Data encrypted in transit and at rest
Access Controls: Limited employee access on need-to-know basis
Authentication: Secure login systems with password requirements
Monitoring: Regular security audits and vulnerability assessments

9.2 Administrative Safeguards

Staff Training: Privacy and security training for all personnel
Incident Response: Procedures for data breach notification and response
Vendor Management: Privacy requirements in third-party contracts

10. Cookies and Tracking Technologies

10.1 Types of Cookies Used

Essential Cookies: Required for basic site functionality
Performance Cookies: Analytics to improve user experience
Functional Cookies: Remember your preferences and settings

10.2 Cookie Consent

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may limit platform functionality.

11. Children's Privacy

11.1 Age Requirements

Our platform is not intended for children under 13. We do not knowingly collect personal information from children under 13.

11.2 Parental Rights

If we become aware that we have collected information from a child under 13, we will delete that information. Parents can contact us to request deletion of their child's information.

12. Privacy Breach Notification

12.1 Breach Response

In the event of a privacy breach that poses real risk of significant harm, we will:

Notify affected individuals without unreasonable delay
Report to the Privacy Commissioner of Canada as required
Take steps to mitigate harm and prevent future breaches

13. Third-Party Services

13.1 External Links

Our platform may contain links to third-party websites. We are not responsible for the privacy practices of these external sites.

13.2 Integrated Services

We use trusted third-party services (hosting, analytics, email) that have their own privacy policies and security measures.

14. Privacy Policy Updates

14.1 Change Notification

We may update this Privacy Policy to reflect changes in our practices or legal requirements. Material changes will be communicated through:

Email notification to registered users
Prominent notice on our platform
Updated "Last Modified" date

14.2 Continued Use

Continued use of our platform after policy changes constitutes acceptance of the updated policy.

15. Contact Us About Privacy

15.1 Privacy Inquiries

For questions about this Privacy Policy or to exercise your privacy rights, contact us at:

Privacy Officer:
Christopher Connelly
10 Albion Street
Sackville, New Brunswick, Canada E4L 1G6
Email: [privacy email]
Phone: [contact number]

15.2 Privacy Commissioner

If you are not satisfied with our response to your privacy concerns, you may contact:

Office of the Privacy Commissioner of Canada
30 Victoria Street
Gatineau, Quebec K1A 1H3
Phone: 1-800-282-1376
Website: www.priv.gc.ca

16. Accessibility

This Privacy Policy is available in accessible formats upon request. We are committed to ensuring our privacy practices are accessible to all users.

Important Notice: This Privacy Policy is designed to comply with PIPEDA and applicable provincial privacy legislation. Privacy laws may vary by jurisdiction, and you should consult with qualified privacy professionals for specific privacy questions or concerns.