Privacy Policy

TonePrep ("we," "us," or "our") operates toneprep.com and the TonePrep web application. This policy explains what information we collect, how we use it, and your rights.

Public accounts and complimentary access

TonePrep is generally available for public signup. New accounts without a special access code start on the Free plan (or paid Pro if you subscribe). If we issued you a complimentary access code (for example a former private-beta invite code), you may enter it at signup. We may store a short-lived cookie after a valid code is checked, and we may record that your account was invite-authorized (for example a beta_invited flag and a complimentary Pro plan source). Accounts we previously designated during private beta may retain complimentary Pro until we notify you of a change. Questions: matt@mattmanworshiptones.com.

Information we collect

• Account information: email address, display name, and password (stored securely by our authentication provider). If you use Google sign-in, we receive basic profile details Google shares for authentication.
• Profile information: church name and preferred worship style (optional).
• Gear and setlist data: guitars, pedals, amps, modelers, optional pedal-chain order, optional stereo L/R pairing for amps/modelers, song titles, artists, BPM, guitar role (Lead / Rhythm / Both Parts), saved tone suggestions, optional saved pedalboard chain-order suggestions, and plan/usage data (Free vs Pro limits, monthly counters for setlists, AI generations, and Planning Center imports) you create in the app.
• Plan, usage, and billing: plan tier (Free or Pro), how Pro was granted (for example paid Stripe subscription, private-beta complimentary access, or manual adjustment), optional plan expiration, monthly usage counters, and related limits. If you pay for Pro via Stripe Checkout, we also store Stripe customer and subscription identifiers, price identifier, and subscription status so we can enforce limits and open the Stripe Customer Portal. Card numbers and full payment details are collected and stored by Stripe — we do not store your full card number on TonePrep servers. Stripe may also process your email and billing address for payment and tax purposes.
• Planning Center connection (optional): if you connect Planning Center Services, we store OAuth access and refresh tokens needed to import your service plans on your behalf, plus your Planning Center organization name. We request read access to Services plan data (for example service types, plans, song titles, artists, and tempos). We do not write to or change your Planning Center account. You can disconnect at any time from Profile.
• Technical data: essential session cookies required to keep you signed in; temporary OAuth cookies used during Planning Center authorization; and standard server logs (IP address, browser type, pages visited) collected by our hosting provider. We may also store a local preference in your browser (for example, that you dismissed the cookie notice).
• In-app support chat (optional): if you use Help & support, we process the messages you send and the AI replies. We store those conversations in our database so we can review quality and improve the assistant. Do not send passwords or full payment card numbers in chat.

How we use your information

• To create and manage your account.
• To save your gear profiles, setlists, and tone suggestions.
• To generate AI-powered tone recommendations based on your gear and setlist.
• To import songs from Planning Center Services when you choose to connect and import a plan.
• To improve reliability and security of the service.
• To process paid Pro subscriptions, grant and honor complimentary beta Pro access, enforce plan limits, and provide self-service billing management (upgrade, cancel, update payment method) via Stripe when you subscribe.
• To answer product how-to questions via the optional AI support chat and to review chat logs for quality improvement. Billing, refunds, account deletion, and complex issues should go to email support (matt@mattmanworshiptones.com).

AI processing

When you generate tones, we send your song titles, artist names, BPM (if available), guitar role, gear list, and optional style or church preferences to our AI provider (xAI / Grok) to produce suggestions. Separately, the optional pedalboard order advisor may send your saved gear list and short preference answers (e.g. lead vs rhythm, board goals) to the same AI provider to suggest signal-chain order only — not song tones. If you use Help & support chat, we send your chat messages (and short conversation history) to the same AI provider so it can answer product questions; we may also include your plan tier (Free or Pro) so limit answers stay accurate. We do not send your password or Planning Center OAuth tokens to the AI provider. AI-generated content is stored in your account if you choose to save it; support chat transcripts are stored as described above.

Third-party services

• Supabase — authentication and database hosting (including optional Planning Center token storage).
• Vercel — application hosting and related logs.
• xAI — AI tone generation.
• Google — optional sign-in (only if you choose Google login).
• Planning Center Online (Ministry Brands) — optional setlist import via OAuth when you connect your church account. Use of Planning Center is also subject to Planning Center's own terms and privacy policy.
• Stripe — payment processing and subscription billing when you purchase Pro. Stripe processes payment card data under its own privacy policy and security standards (PCI). See stripe.com/privacy.

Each provider processes data under their own privacy policies and our agreements with them.

Cookies and similar technologies

We use essential cookies only — authentication session cookies; a short-lived cookie after a valid beta invite code so signup can complete; and short-lived cookies needed for secure OAuth (for example Planning Center connect). Payment checkout is handled on Stripe's domain. We do not use advertising cookies or third-party tracking pixels. A cookie notice preference may be stored in your browser's local storage so we do not show the notice repeatedly.

Data retention and deletion

We keep your data while your account is active. You can delete your account at any time from your Profile page, which permanently removes your account and associated data, including gear, setlists, saved tones, support chat history, and any Planning Center connection tokens. Disconnecting Planning Center removes the stored connection without deleting the rest of your TonePrep account. Canceling a Pro subscription (via Profile → Manage subscription or Stripe Customer Portal) stops future charges; Stripe retains payment records as required for tax and accounting. You may also contact us at matt@mattmanworshiptones.com to request access, correction, or deletion of your data.

International processing

Our service providers may process data in the United States and other countries. If you access TonePrep from outside the United States, you understand that your information may be transferred to and processed in jurisdictions that may have different data protection laws than your own.

Children

TonePrep is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us data, contact us and we will delete it.

Security

We use HTTPS encryption, authenticated API routes, row-level database security for user data, security-definer database functions for sensitive operations (including Planning Center tokens and billing plan updates), protection of plan and Stripe identifier fields from client-side spoofing, signed Stripe webhooks, OAuth with PKCE for Planning Center, and industry-standard hosting practices (including security headers such as Content-Security-Policy and HSTS). Card payments are processed by Stripe. No method of transmission over the internet is 100% secure, but we work to protect your information.

Your rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal data, and to object to or restrict certain processing. California residents may have additional rights under the CCPA/CPRA, including the right to know what personal information we collect and to request deletion. We do not sell personal information. Contact us to exercise these rights. If you are in the European Economic Area or United Kingdom, you may also have rights under GDPR or UK GDPR; contact us and we will respond as required by applicable law.

Changes

We may update this policy from time to time. We will post the revised date at the top of this page. Continued use of TonePrep after changes means you accept the updated policy.

Contact

Questions about this policy? Email matt@mattmanworshiptones.com.