Loading your music…
BETABETALoading your music…
BETAEffective: 7 September 2026
This policy explains how Video2Guitar processes personal data when you use its website, installed web app and related services.
Submitting a lesson correction is voluntary. We may compare the original generated value, corrected value and relevant lesson context to evaluate and improve prompts, validators, algorithms, benchmarks, quality metrics and product operation. A correction does not publish your private lesson or make it available to other users.
Video2Guitar currently uses Google Gemini to generate a structured practice guide. The submitted public YouTube URL is supplied to Gemini as a video source. Gemini may process lesson speech, imagery, audible music and visible text, together with our analysis instructions, requested language, source-time limit where applicable and the YouTube video identifier.
We do not intentionally include your name, email address, account identifier or payment data in the Gemini analysis request. The generated lesson data and technical usage information, such as model, token counts, duration, latency and error category, are returned to and stored by Video2Guitar.
The application repository does not configure or establish Gemini's provider-side retention or model-training treatment. Those matters depend on the provider account, contract and settings in force. Video2Guitar therefore does not promise that submitted data is never retained or used by the provider for service operation or improvement.
Embedded source videos are delivered by YouTube and are also subject to Google/YouTube's privacy practices. Video2Guitar does not download or permanently cache the source video itself.
Authorised Video2Guitar personnel may access private analyses and correction records only where reasonably necessary for support, security and fraud investigation, debugging, rights complaints and product-quality evaluation. This operational access does not make a lesson public.
Authentication is implemented with Better Auth software and Video2Guitar's configured database; the repository does not show a separate Better Auth hosted data recipient.
No GA4, Google Tag Manager or third-party advertising analytics integration is present in the current application code.
Some providers are international organisations and may process data outside the Netherlands or European Economic Area depending on the service location and account configuration. The repository does not establish the exact processing locations or transfer mechanism for every production provider account. Information about the applicable provider arrangement can be requested at hello@video2guitar.com.
Video2Guitar uses authentication cookies and equivalent browser storage needed to keep you signed in, maintain security, remember interface preferences and support the installed web-app experience. Session storage is used to avoid counting the same first-party page event repeatedly within one browser session.
Product analytics are sent to Video2Guitar's own endpoint and contain an allowed event name plus limited non-sensitive properties. The analytics endpoint uses an IP-derived rate-limit key to prevent abuse, but the application does not add the IP address to the stored product-event record. No third-party analytics or advertising cookies were found in the current implementation, so no separate analytics-consent flow is currently implemented.
The temporary PWA installability diagnostic stores status in the current page's JavaScript window object and browser console. It is not submitted to or stored by the Video2Guitar server.
Authentication sessions may contain an IP address and user agent. Application logs record timestamps, operational event names and limited diagnostics. AI diagnostics may include a video identifier, model and prompt versions, duration and token usage, latency, success state and a restricted provider-error summary. Sensitive log keys such as passwords, secrets, tokens, authorisation values and cookies are filtered by the application logger.
Railway and other infrastructure providers may additionally produce standard delivery and security logs under their service configuration. Video2Guitar uses reasonable technical and organisational safeguards, although no online service can guarantee absolute security.
Account, private lesson, My Songs and practice data are retained while needed to provide an active account and are removed or anonymised according to the implemented account-deletion flow. User-deleted private lessons are removed according to the implemented deletion flow, subject to technical or legal records that must legitimately remain.
Correction and quality data may be retained for product-quality evaluation. After account deletion, the user relationship is detached or anonymised as supported by the current deletion architecture. Video2Guitar's business retention policy is a maximum of 24 months for first-party product analytics, 12 months under normal circumstances for application, security and technical logs, and 24 months after closure for support correspondence. Relevant records may be kept longer where reasonably necessary for an active security incident, fraud investigation, unresolved dispute, legal claim or legal obligation. These maximum periods are not yet enforced by automated cleanup jobs in every system.
Transaction and accounting records are retained for the applicable statutory Dutch tax and accounting period. Provider-side records are subject to provider retention policies and applicable agreements.
When you confirm account deletion, the implemented flow deletes your private analyses, My Songs records, practice progress, pending analysis requests, authentication accounts, sessions, verification records and subscriptions. It removes your direct reference from AI usage, feedback and report records.
Deletion does not erase every record immediately. The user row is anonymised rather than physically deleted so that referentially protected credit and quality records can remain consistent. Corrections are detached from the source analysis but their proposed quality data may be retained with the anonymised user reference. Limited transaction, accounting, security, fraud-prevention and dispute records may be retained for as long as their purpose or an applicable legal obligation requires. Provider records are subject to the relevant provider's retention process.
Subject to applicable conditions, you may request access to your personal data, rectification, erasure, restriction of processing, objection to processing based on legitimate interests, and data portability for applicable data. Where processing relies on consent, you may withdraw that consent at any time.
You can remove individual private lessons and request account deletion through the available account controls. For other requests, contact hello@video2guitar.com. We may need to verify your identity before fulfilling a request.
You may also lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens.
Video2Guitar is not specifically directed at children. Users aged 18 or older may use the service independently. Users under 18 may use Video2Guitar only with the permission and supervision of a parent or legal guardian. Where applicable, a parent or legal guardian must enter into paid agreements on the minor's behalf. Video2Guitar does not currently perform age verification.
AI automatically generates lesson and practice content, and automated rules administer credits, rate limits and subscription access. These are product-operating functions. The current implementation does not make decisions producing legal or similarly significant effects about users solely through automated processing within the meaning of GDPR Article 22.
Video2Guitar may preserve and review relevant account, source, lesson, transaction and technical information when reasonably necessary to investigate fraud, security incidents, misuse or a credible intellectual-property or other rights complaint, comply with law, or establish or defend a legal claim. Access remains limited to the purpose of that investigation.
We may update this policy when the product, providers or legal requirements change. The effective date above will be updated. Material changes will be communicated through an appropriate service notice where reasonably necessary.
Privacy questions and requests can be sent to hello@video2guitar.com.
The controller responsible for Video2Guitar is:
Video2Guitar