Privacy Policy

This Privacy Policy describes how Omnia Technologies LLC collects, uses, discloses, stores, and protects information in connection with Trove, including the VST3 plugin, local helper application, website, accounts, cloud sync services, downloads, project pages, support, billing, and related software and services.

By accessing or using Trove, you acknowledge this Privacy Policy. If you do not want information handled as described in this Privacy Policy, do not access or use Trove.

Omnia Technologies LLC is the controller of personal information processed under this Privacy Policy, except where a third-party service provider acts as an independent controller under its own terms and privacy policy.

Privacy requests and legal notices must be sent to cezar@trove.dance and [Mailing Address for Omnia Technologies LLC].

If you use Trove without cloud sync, Trove is intended to keep project file content on your device. Project file content is not uploaded to Trove unless you connect an account and use cloud sync, upload previews, publish or share a project, download or restore cloud content, or send files to Omnia Technologies LLC for support.

The local helper application may store local checkpoint data, project metadata, sync state, account connection state, and credentials on your device. On macOS, Trove stores account refresh credentials in Keychain. Trove does not store long-lived account tokens in Ableton project files.

Trove may collect and process account information, including user ID, username, display name, email address, phone number, avatar, profile bio, account privacy settings, created date, updated date, and authentication status.

Trove uses Clerk for authentication and account login. Clerk may process login credentials, authentication factors, session data, email addresses, phone numbers, social login data, device and browser data, and related security information under Clerk's own terms and privacy policy.

Trove may collect and process device information for connected plugin and helper installations, including device name, platform, helper version, authorization status, created date, authorized date, last seen date, revoked date, revoked reason, access token expiration, refresh token expiration, and related account connection state.

Trove stores hashed access and refresh token records on its backend where appropriate. Trove may rotate, revoke, expire, or delete device tokens to protect accounts, enforce sign-out, or respond to security issues.

Trove may collect and process project information, including project name, slug, description, visibility, download settings, audio upload settings, audio download settings, comment settings, image, genres, owner, collaborators, share links, storage usage, created date, updated date, and sync status.

Trove may collect and process project activity information, including project creation, remixing, audio upload, project download, audio download, stars, likes, collaborator changes, share link changes, description changes, visibility changes, project image changes, download setting changes, audio setting changes, genre changes, and snapshot comments.

Trove may collect and process checkpoint information, including checkpoint ID, author, username, branch or idea ID, parent checkpoint IDs, checkpoint notes, timestamps, source DAW, file counts, project document counts, native plugin counts, native plugin names, tempo, project key, Ableton set counts, summaries, semantic change details, object IDs, refs, and visibility timestamps.

Checkpoint summaries and change details may include information derived from project files, filenames, track names, clip names, plugin names, automation data, MIDI data, project settings, and other project metadata.

If you enable cloud sync or upload content, Trove may upload, store, process, transmit, and make available project files, Ableton files, audio files, MIDI files, samples, recordings, stems, presets, plugin data, sidecar files, images, notes, preview audio, comments, reactions, and related content.

Uploaded content may contain personal information, confidential information, copyrighted material, voice recordings, filenames, artist names, collaborator names, lyrics, samples, or other information chosen by you or your collaborators.

Trove uses Stripe for payment processing and billing. If you purchase a paid plan, Stripe may process payment method information, billing address, tax information, fraud signals, transaction data, invoice data, subscription data, and related billing records under Stripe's own terms and privacy policy.

Trove does not store full credit card numbers. Trove may store Stripe customer IDs, subscription IDs, plan status, invoice status, payment status, billing email, tax information, transaction metadata, cancellation status, and related billing records as needed for billing, accounting, support, fraud prevention, legal compliance, and service administration.

Trove may collect and process technical information, including IP address, browser type, device type, operating system, request URL, referring URL, timestamps, user agent, API route, response status, error messages, performance information, helper version, plugin version, release version, download status, and security logs.

Trove may use cookies, local storage, session storage, and similar technologies for authentication, session management, security, account operation, preference storage, and service functionality. Trove does not currently use third-party advertising cookies.

If you contact Omnia Technologies LLC for support, Trove may collect and process your name, email address, account information, project information, device information, logs, screenshots, diagnostic details, files you provide, and the content of your communications.

Do not send confidential project files, unreleased music, licensed samples, credentials, payment card numbers, or other sensitive information to support unless the information is necessary for the support request.

Trove uses information to provide, operate, maintain, secure, troubleshoot, support, improve, and enforce Trove. This includes account creation, authentication, device authorization, cloud sync, checkpoint storage, project restore, project download, collaborator access, share links, comments, audio previews, billing, customer support, abuse prevention, legal compliance, and service administration.

Trove may use aggregated or de-identified information for product analysis, reliability analysis, capacity planning, security review, financial reporting, and service improvement. Aggregated or de-identified information does not identify a specific person.

Where applicable law requires a legal basis for processing, Omnia Technologies LLC processes personal information to perform a contract with you, comply with legal obligations, protect vital interests, pursue legitimate interests, or with consent where required.

Legitimate interests include providing Trove, securing accounts, preventing fraud and abuse, maintaining service reliability, enforcing legal terms, responding to support requests, improving service operation, and protecting Omnia Technologies LLC, users, collaborators, and the public.

Trove uses service providers to operate the service. Current or planned providers include Clerk for authentication, Convex for backend services, database, and storage, Cloudflare R2 for object storage and downloads, Vercel for website hosting, and Stripe for payment processing and billing.

Service providers may process personal information only as needed to provide services to Trove, comply with law, protect their services, or perform obligations under their agreements with Omnia Technologies LLC.

Omnia Technologies LLC may disclose information to service providers, payment processors, hosting providers, storage providers, authentication providers, support providers, professional advisers, law enforcement, regulators, courts, transaction counterparties, affiliates, and other parties where disclosure is necessary to operate Trove, comply with law, enforce terms, protect rights, prevent abuse, or complete a business transaction.

Omnia Technologies LLC does not sell personal information. Omnia Technologies LLC does not share personal information for cross-context behavioral advertising. Trove does not currently use third-party advertising networks, third-party behavioral analytics services, or third-party error-reporting services in the reviewed codebase.

If you make a project public, enable downloads, upload audio previews, invite collaborators, create share links, add comments, add reactions, like projects, star projects, or otherwise interact with public or shared areas of Trove, the information and content you provide may be visible to other users or the public.

People with access to a project may be able to view, copy, download, modify, comment on, or redistribute content depending on the permissions, visibility, and download settings selected by you or other authorized project members.

Private projects are intended to be visible only to authorized users and people with valid access links, subject to the settings and features available at the time. Public projects may be visible to anyone.

Public project pages, public profile information, public project metadata, public audio previews, public comments, and enabled downloads may be indexed, copied, saved, downloaded, or redistributed by others. Omnia Technologies LLC cannot control information after it is accessed by another person.

Omnia Technologies LLC uses reasonable technical and organizational measures designed to protect information against unauthorized access, loss, misuse, alteration, and disclosure. These measures may include access controls, credential hashing, token expiration, token revocation, signed upload URLs, signed download URLs, encrypted transport, service-provider controls, and OS credential storage for local refresh credentials.

No method of transmission, processing, or storage is fully secure. Omnia Technologies LLC does not guarantee that information will be secure, available, preserved, or recoverable in all circumstances.

Omnia Technologies LLC retains information for as long as reasonably necessary to provide Trove, maintain accounts, store cloud projects, process payments, provide support, comply with law, resolve disputes, enforce agreements, prevent abuse, maintain security, and operate backups.

Deleted information may remain for a limited period in backups, logs, archives, caches, billing records, security records, or legal records. Local files stored on your device are controlled by you and may remain after you stop using Trove or delete cloud data.

You may choose not to create an account. If you do not create an account, cloud sync, cloud restore, collaborator features, paid plans, and account-based features may be unavailable.

You may choose whether to sync a project to the cloud, publish a project, enable downloads, upload audio previews, invite collaborators, create share links, revoke device access, sign out, change profile privacy, or delete content where Trove provides those controls.

Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, objection, withdrawal of consent, or appeal of decisions relating to your personal information.

To make a privacy request, contact cezar@trove.dance. Omnia Technologies LLC may need to verify your identity before responding. Omnia Technologies LLC may deny or limit a request where permitted by law, including where information must be retained for security, legal, billing, fraud prevention, dispute resolution, or service operation purposes.

California residents may have the right to know what personal information is collected, used, disclosed, sold, or shared; the right to access personal information; the right to delete personal information; the right to correct inaccurate personal information; the right to opt out of sale or sharing; the right to limit use and disclosure of sensitive personal information where applicable; and the right not to be discriminated against for exercising privacy rights.

Omnia Technologies LLC does not sell personal information and does not share personal information for cross-context behavioral advertising. Privacy requests may be submitted to cezar@trove.dance. Authorized agents may submit requests where permitted by law and must provide proof of authorization.

Trove is operated from the United States. Information may be processed in the United States and in other locations where Omnia Technologies LLC or its service providers operate.

If you access Trove from outside the United States, you understand that your information may be transferred to, stored in, and processed in jurisdictions that may have data protection laws different from those in your location.

Trove is not directed to children under 13 and is not intended for users under 18. Omnia Technologies LLC does not knowingly collect personal information from children under 13.

If Omnia Technologies LLC learns that it collected personal information from a child under 13 without legally valid consent, it will delete the information as required by law.

Omnia Technologies LLC may update this Privacy Policy from time to time. Material changes will be posted on this page or sent by notice where required by law.

Continued use of Trove after the effective date of an updated Privacy Policy means the updated Privacy Policy applies to your use of Trove.

Privacy requests and legal notices must be sent to cezar@trove.dance and [Mailing Address for Omnia Technologies LLC]. Support requests should be sent to cezar@trove.dance.