Privacy Policy

This policy explains what personal information Right Track Collective LLC (“Right Track Collective”, “we”, “us”) collects, how we use it, and the choices you have. It covers our desktop app, Otomaki, and our websites, righttrackcollective.com and otomaki.com (together, the “Services”).

The short version: your music library stays on your computer. We collect what we need to run your account and to answer the requests you make, we do not sell personal information, and we do not use it for advertising.

What stays on your computer

Otomaki works on your music library locally. Your audio files, your library database, the analysis Otomaki performs (such as tempo, key and waveforms), and the data it reads from and writes to the DJ software you use (such as cues, loops, beat grids and playlists) are stored on your computer. They are not uploaded to us, except in the specific cases described below.

Information we collect

Your account

To use Otomaki you sign in with your email address. We send a one-time code to that address to confirm it. We store your email address, an account identifier, your plan status, a name for each device you sign in from, and records of your sign-in sessions.

Technical information

When the app or a browser contacts our servers, we receive the IP address and basic request information (such as the time, the address requested and the browser or app version). We use IP addresses to limit abuse, for example by capping how many sign-in codes one network can request, and our hosting provider keeps request logs for operating and securing the Services.

What you choose to send us

If you send a feedback report from the app or email us, we receive what you include. Feedback reports are described under “GitHub” below.

What we do not collect

Our websites do not use cookies, analytics or tracking scripts. Otomaki does not include advertising or third-party analytics.

Services Otomaki uses on your behalf

Two features of Otomaki send data to third-party services. Each one is used only when you use the feature.

AcoustID (track identification)

Otomaki can identify a track from its audio using AcoustID, a music-recognition service. This feature is off until you turn it on in Settings.

When you identify a track, Otomaki computes an audio fingerprint on your computer, a compact summary of the sound that cannot be played back as audio. It sends the fingerprint and the track’s duration to our server, which forwards them to AcoustID with our application key and returns the matching recording information (drawn largely from MusicBrainz). The audio file itself never leaves your computer, and we do not send AcoustID your email address or account details. Because the request passes through our server, AcoustID sees our server’s address rather than yours. AcoustID’s handling of the data it receives is governed by its own privacy policy.

GitHub (feedback reports)

When you send a feedback report from inside Otomaki, our server files it as an issue in a private repository on GitHub, operated by GitHub, Inc., which we use to track and fix problems. Only our team can see that repository.

A report contains:

• the subject and message you write, and your name if you give one;
• your account’s email address, account identifier, plan status and device name;
• the app version, operating system, processor architecture and runtime version;
• if you leave “include logs” selected, the most recent part of Otomaki’s diagnostic logs. Logs can contain file names and folder paths from your music library, track titles and error messages. You can preview the logs before sending or turn them off.

GitHub stores reports on our behalf under its own privacy statement.

Other lookups

When you look up where a track can be found or shared, Otomaki may search public music catalogs (such as Deezer and Apple’s iTunes Search) directly from your computer with the track’s title, artist or ISRC. These searches carry no account information.

Service providers

We rely on a small number of providers to run the Services:

• Google Cloud hosts our servers and stores account records.
• Resend delivers sign-in code emails.
• Google Workspace handles email sent to our addresses.
• Cloudflare provides DNS for our domains.
• AcoustID and GitHub, as described above.

These providers process information only to provide their service to us. We may also disclose information if the law requires it, to protect the rights, safety or property of our users or others, or as part of a merger, acquisition or sale of assets, in which case this policy continues to apply to it.

How we use information

• to create and secure your account and keep you signed in;
• to determine which features your plan includes;
• to perform the lookups you request;
• to investigate and fix the problems you report;
• to prevent abuse and keep the Services running;
• to contact you about your account or respond to your messages.

We do not sell or rent personal information, and we do not share it for targeted advertising.

How long we keep it

We keep account information while your account exists. Sign-in sessions expire after 30 days without use and after 90 days at most. Sign-in codes expire after 10 minutes. Feedback reports are kept while they are useful for fixing problems. When you ask us to delete your account, we delete your account information and the feedback reports linked to it, except where we must keep something to meet a legal obligation.

Your choices and rights

You can ask us to access, correct, export or delete your personal information by emailing contact@righttrackcollective.com. Depending on where you live, you may have further rights under laws such as the GDPR or the California Consumer Privacy Act, including the right to object to or restrict processing and to complain to a data protection authority. We will not treat you differently for exercising them.

You can use Otomaki without AcoustID by leaving identification turned off, and you can send feedback without logs.

Where the GDPR applies, we process your information to provide the Services you asked for (contract), to keep them secure and working (legitimate interests), or with your consent, which you can withdraw at any time.

Security

Connections to our servers are encrypted. Sign-in uses one-time codes rather than passwords, and Otomaki stores your sign-in token in your operating system’s secure credential store. No system is perfectly secure, but we limit what we collect so there is less to protect.

International transfers

We are based in the United States, and our providers may process information in the United States and other countries. Where required, we rely on appropriate safeguards for those transfers.

Children

The Services are not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it.

Changes to this policy

We will post any changes on this page and update the effective date. If a change materially affects how we use your information, we will tell you in the app or by email before it takes effect.