Privacy Policy
Last updated: 2026-10-25
Seller and contact
Gordo Labs
gordo@tapemusicsuite.comScope and responsible party
Tape operates this website, licensing, delivery and support services. The seller/contact identified on this page is responsible for those activities. Your music files and main library database remain on your devices; that does not mean Tape receives no personal data. This notice distinguishes local processing from data received by our services.
Purchase, delivery and licences
We process contact and order details, payment-provider references, licence and installation identifiers, activation/validation history, device public keys and device names to supply purchases, recover access and administer licences. Payment processing and legally required accounting use Stripe and the applicable accounting service. Contract performance and legal obligations are the relevant bases as applicable; a general acceptance of this notice is not consent for unrelated uses.
Security and support
Licence integrity reports can contain installation/licence references, a reason and limited diagnostic detail. We use these to investigate abuse and false positives, based on a documented security interest where appropriate. Reports do not automatically revoke licences. Internal notifications contain only a report reference and reason. Messages you send to support are used to handle your request and associated contractual or legal obligations.
Optional diagnostics
Diagnostics sharing is off by default. When enabled, recent redacted log entries, app/platform information and installation/device/session references can be sent to Tape’s diagnostics service and private object storage for support. Music files and the full library database are not part of this upload. You can turn sharing off; this stops future optional uploads. Exported bundles stay under your control unless you send them. Review the information before sharing a bundle.
Metadata, remote connections and sharing
Optional enrichment sends queries such as artist/release details and, where enabled, audio fingerprints to configured metadata services including MusicBrainz, Discogs and AcoustID. Artwork comes from its stated provider and has separate rights. Remote routes and relays process technical connection metadata; sharing makes selected items available to the recipients/access scope you choose. Revoke shares you no longer need and remember recipients may retain downloaded copies.
Website analytics and cookies
Google Analytics and Tag Manager load only after optional analytics acceptance, never on private checkout, recovery, reset or invitation routes. Reject and withdraw at any time through COOKIES in the footer. Withdrawal removes first-party Google analytics cookies and stops future analytics. The preference and analytics cookies last up to one year as described in the Cookie Policy. Public measurement URLs exclude query strings and fragments. No general third-party analytics is introduced in the desktop or mobile app by this website choice.
Providers and international transfers
Hosting, licence records, email, private diagnostics storage and payments use service providers including Vercel, Supabase, Cloudflare/R2, Resend and Stripe; optional web analytics uses Google. Each provider’s role depends on the processing. Transfers or remote access outside the EEA require an applicable legal mechanism, such as adequacy or contractual safeguards. Contact us for the arrangements relevant to your data. A server region alone does not describe all access.
Retention and rights
Order, accounting and contractual evidence are retained for the contract and applicable legal/claims periods. Licence/device records are retained while needed to operate or resolve the licence. Support and security data are kept only as long as necessary for the case and justified security needs; optional diagnostics require the configured retention schedule. Request the criteria applicable to your record from the contact below. You may request access, correction, erasure, restriction or portability where applicable, object to relevant processing and withdraw optional consent. Legal retention exceptions may limit erasure. Use the privacy request form or email; we verify identity proportionately and explain exceptions. You may complain to the competent supervisory authority.
Local deletion, children and changes
Uninstalling the app may leave its data directory and does not erase order data held by Tape. Do not delete your music to exercise privacy rights. Remove app data deliberately using platform instructions, revoke device/sharing access, and request central-data erasure separately. The service is intended for people able to enter the applicable contract; do not submit a child’s data without a valid basis. Material changes are reflected in a new notice version and any consent required for a new purpose is requested separately.