Privacy Policy

Effective Date: November 3, 2026

This Privacy Policy explains how DENTREMONT GUITARS, of 3451 HWY 3, Lower Argyle, Nova Scotia, Canada, B0W 1W0 ("we", "us", "our" or the "Operator"), collects, uses, stores, discloses and protects personal information when you access or use The Luthiers App.

This Privacy Policy applies to the website at luthiersapp.com and any associated iOS or Android applications made available by us (collectively, the "App").

We are committed to handling personal information responsibly and in accordance with applicable privacy legislation, including the federal Personal Information Protection and Electronic Documents Act (PIPEDA), and other applicable privacy laws. Please read this Privacy Policy carefully to understand our information practices and your privacy rights.

1. The Information We Collect

The information we collect depends on how you use the App.

1.1 Use Without an Account

Most calculators and tools can be used without creating an account.

When you use the App without an account, the calculators operate on your device. Information entered into the calculators is not transmitted to us when you merely use those calculators.

The App may store certain preferences and information locally on your device, including:

• Your preferred measurement units (inches or millimetres);
• The last calculator you used;
• Recent unit conversions; and
• Instruments and related information you choose to save locally.

This information remains in your browser's or device's local storage and is not ordinarily accessible to us.

Clearing your browser data or uninstalling the App may remove locally stored information. We cannot recover information that exists only on your device and has not been synchronized to your account.

1.2 Website Analytics

We use Cloudflare Web Analytics on the website to understand general website usage and improve the website. Cloudflare Web Analytics is configured without analytics cookies and does not track users across unrelated websites.

The analytics reports provide aggregated information, such as:

• Number of visits to particular pages;
• General geographic information, such as the country from which visits originate; and
• General website usage statistics.

We do not use Cloudflare analytics to identify individual visitors or create individual advertising profiles.

Cloudflare may process technical information associated with website requests as necessary to provide its services. Further information is available through Cloudflare's privacy documentation.

1.3 Account Information

If you create an account, we collect and store the following information:

• Email address: Your email address is used to:
  • Create and identify your account;
  • Send passwordless sign-in links;
  • Communicate account and security information;
  • Send subscription confirmations, renewal information and notices; and
  • Respond to support requests.

We do not require or store a password for your account.

• Sign-in and security records: Our authentication provider may maintain records such as:
  • Sign-in dates and times;
  • IP addresses;
  • Browser or device information; and
  • Other technical information required for account authentication, security and fraud prevention.
• Subscription information: We maintain information necessary to administer your subscription, including:
  • Your subscription plan;
  • Whether your subscription is active, cancelled or expired;
  • Subscription start and end dates;
  • Renewal information; and
  • Reference identifiers supplied by Stripe for your customer account and subscription.

We do not receive or store your complete payment card number.

1.4 Pro Subscription Information

If you subscribe to Pro, you may choose to synchronize saved instruments between your devices.

To provide this functionality, we store the following information on our servers:

• Instrument names;
• Instrument specifications;
• Calculator settings and saved calculations;
• Information associated with each saved instrument;
• Job tracker information, including job status, client names, due dates and notes; and
• Other information you choose to enter into the App's Pro features.

This information is stored to provide the App's functionality, synchronize your instruments, maintain your account and allow you to retrieve your information from different devices. We do not use your saved instruments or job tracker information for advertising or unrelated commercial purposes.

1.5 Information About Your Clients and Other Individuals

The App allows you to enter information about your own clients or other individuals in connection with your instrument-building and repair work. For example, you may enter a client's name, job description, due date or notes.

You are responsible for ensuring that you have the necessary authority and any legally required consent to provide this information to the App and have it stored and processed for the purposes described in this Privacy Policy. You should avoid entering sensitive personal information or confidential information that is not reasonably necessary for your use of the App.

We process this information only as reasonably necessary to provide the App's functionality, maintain your account, protect the service and comply with applicable legal obligations. We do not use information about your clients for advertising or independent marketing purposes.

1.6 Payment Information

Pro subscriptions are processed through Stripe. When you purchase a subscription, Stripe collects your payment card or other payment information and billing details directly from you. We do not see or store your complete payment card number or other full payment credentials. We receive limited information from Stripe necessary to administer your subscription, including:

• Stripe customer reference numbers;
• Subscription reference numbers;
• Subscription plan and status;
• Payment and subscription dates; and
• Other billing information necessary to administer your account.

Stripe processes payment information under its own privacy policy, available at:

https://stripe.com/privacy. Stripe may retain payment and transaction records in accordance with its own legal, financial, security and recordkeeping obligations.

2. Why We Collect and Use Information

We collect, use and retain personal information only for purposes reasonably connected with operating and improving the App and our business. These purposes include:

• Providing the App: To operate calculators, account features, saved instruments, cloud synchronization, the job tracker and other functionality.
• Account administration: To create and maintain accounts, authenticate users, send sign-in links and provide account support.
• Subscription administration: To process and administer Pro subscriptions, verify subscription status, manage renewals, cancellations and refunds, and communicate billing information.
• Security and fraud prevention: To protect the App, detect unauthorized access, investigate suspected misuse and maintain the integrity of our systems.
• Customer support: To respond to questions, troubleshoot problems and assist with account or subscription issues.
• Website analytics: To understand general website usage and improve the website.
• Legal compliance: To comply with applicable laws, respond to lawful requests and protect our legal rights.

We do not sell personal information. We do not use personal information to serve targeted advertising, and we do not permit third parties to use your saved instruments or job tracker information for their own advertising purposes. We do not use your User Content to train artificial intelligence models.

3. How We Store and Protect Information

We use third-party service providers to host, operate and maintain the App. Our current service providers include:

• Supabase: Supabase provides account authentication and database hosting for account information and synchronized instruments. Our Supabase database is hosted in Canada (Central). Website: https://supabase.com
• Netlify: Netlify provides website hosting and server functions used to support subscription administration and account deletion. Website: https://www.netlify.com
• Stripe: Stripe processes subscription payments and provides billing and subscription management services. Website: https://stripe.com
• Cloudflare: Cloudflare provides website analytics through Cloudflare Web Analytics. Website: https://www.cloudflare.com
• Resend: Our email delivery provider sends passwordless sign-in links and other account-related communications. Website: https://www.resend.com

We may change or replace service providers as our business and technical requirements evolve. If a change materially affects how personal information is collected, used, stored or disclosed, we will update this Privacy Policy and provide notice where required by law.

4. Disclosure to Third Parties and International Processing

We do not sell or rent personal information to third parties. We may disclose or make personal information available to our service providers where reasonably necessary to:

• Host and operate the App;
• Store and synchronize User Content;
• Authenticate accounts;
• Process payments and subscriptions;
• Send account-related emails;
• Maintain security and prevent fraud; or
• Provide technical support and maintain the App.

Our service providers are authorized to process information only as necessary to provide their services to us, subject to their applicable contractual and legal obligations. Some service providers may store or process information outside Canada, particularly in the United States. Where personal information is processed outside Canada, it may be subject to the laws of the jurisdiction in which it is stored or processed, including lawful access by governmental or regulatory authorities. We take reasonable steps to use service providers and arrangements appropriate to the nature of the information being handled.

We may also disclose personal information where reasonably necessary:

• To comply with a legal obligation, court order or lawful government request;
• To establish, exercise or defend legal claims;
• To investigate suspected fraud, unlawful activity or security incidents;
• To protect the rights, property or safety of the Operator, users or other individuals; or
• In connection with a sale, merger, restructuring or transfer of our business, subject to applicable privacy requirements.

We do not otherwise disclose personal information to third parties without appropriate authority or consent, unless permitted or required by law.

5. Retention of Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, subject to applicable legal, financial and recordkeeping requirements.

Our current retention practices are as follows:

• Account information: Account information and synchronized instruments are retained while your account remains active.
• Expired subscriptions: If your Pro subscription expires or is cancelled, your account and saved instruments are not automatically deleted. Your first three instruments remain editable and additional instruments become read-only, as described in our Terms of Service.
• Account deletion: You may request deletion of your account through Account & Pro > Delete My Account. When you delete your account:
  • Your subscription is cancelled;
  • Pro access ends immediately;
  • Your account and associated synchronized information are removed from our active database; and
  • We cease retaining that information in our active systems, except where retention is legally required or otherwise permitted.
• Payment records: Stripe may retain payment and transaction records for financial, tax, fraud prevention and other legal or operational purposes, even after your App account is deleted.
• Security and technical records: Certain authentication, security, transaction and technical records may be retained for reasonable periods as necessary to maintain security, investigate incidents, prevent fraud or comply with legal obligations.

Copies of deleted information may remain temporarily in system backups or other technical recovery systems for up to 7 days before being overwritten or otherwise removed through our ordinary backup processes.

Deletion of your App account does not necessarily result in immediate deletion of all information held independently by third-party service providers in accordance with their own legal and retention obligations.

6. Your Privacy Rights and Choices

Depending on your location and applicable privacy legislation, you may have the right to:

• Request access to personal information we hold about you;
• Request correction of inaccurate or incomplete personal information;
• Request deletion of personal information, subject to applicable legal exceptions;
• Withdraw consent to certain collection, use or disclosure practices, subject to legal and contractual restrictions;
• Ask questions about our privacy practices; and
• Make a complaint to the appropriate privacy regulator.

You may manage your saved instruments and account information through the App. You may also contact us to make a privacy request. We may need to verify your identity before responding to a request or providing access to personal information. We will respond to access and correction requests within 30 days, or within any longer period permitted by applicable law. If an extension is legally permitted and necessary, we will advise you of the extension and the reason for it. Certain information may not be deleted or disclosed where an applicable legal exception applies, including where retention is necessary to comply with legal obligations, protect security or establish or defend legal claims.

6.1 Canadian Users

For individuals in Canada, our handling of personal information is principally governed by PIPEDA and other applicable privacy legislation. You may contact the Office of the Privacy Commissioner of Canada if you have concerns about our privacy practices or believe your privacy rights have not been respected.

Website: https://www.priv.gc.ca

6.2 United States Users

If you reside in the United States, additional privacy rights may be available to you under the laws of your state of residence. Where applicable, these may include rights to:

• Know or access the personal information collected about you;
• Obtain a copy of certain personal information;
• Request correction of inaccurate personal information;
• Request deletion of personal information;
• Opt out of the sale or sharing of personal information;
• Opt out of certain targeted advertising or profiling activities; and
• Appeal certain decisions concerning privacy requests.

We do not sell personal information or share personal information for targeted advertising. Where a state privacy law applies to our business and your information, we will provide the rights and processes required by that law. You may submit a privacy request using the contact information in this Policy. We may request reasonable information to verify your identity and, where permitted, your authority to make a request on behalf of another individual. We will not unlawfully discriminate against you for exercising a privacy right.

7. Security

We take reasonable administrative, technical and organizational measures to protect personal information against unauthorized access, use, disclosure, alteration, loss or destruction. These measures include:

• Encrypted connections using HTTPS;
• Passwordless account authentication;
• Database access restrictions;
• Account-level access controls designed to ensure that users can access only their own account information and saved instruments; and
• Restricting access to administrative credentials and server-side keys.

Certain technical credentials required to access or administer the database are maintained on our servers and are not included in the publicly distributed App code. We regularly consider the security of our systems and take reasonable steps to address identified vulnerabilities; however, no electronic storage system, internet transmission or security measure can be guaranteed to be completely secure. We cannot guarantee that personal information will never be accessed, disclosed, lost or compromised. You are responsible for maintaining the security of your email account and devices and for protecting access to your sign-in links.

8. Privacy Breaches

If we become aware of a breach involving personal information, we will investigate and take reasonable steps to contain and address the incident. Where required by applicable law, we will notify affected individuals and report the breach to the relevant privacy regulator or authority. Under PIPEDA, certain breaches must be reported to the Office of the Privacy Commissioner of Canada and affected individuals where there is a real risk of significant harm. We will maintain records of privacy breaches in accordance with applicable legal requirements.

9. Cookies and Similar Technologies

Our website uses Cloudflare Web Analytics, which is configured without analytics cookies. The App may use local storage or similar device-based storage to retain user preferences and information entered into calculators. We do not use advertising cookies or tracking technologies for cross-site targeted advertising. If we introduce additional cookies or similar technologies in the future, we will update this Privacy Policy and provide any notices or consent mechanisms required by applicable law.

10. Children's Privacy

The App is designed for adult users and is not directed to children under the age of 13. We do not knowingly collect personal information directly from children under 13. If we become aware that we have collected personal information from a child in circumstances requiring parental consent or other legal safeguards, we will take appropriate steps to address the information in accordance with applicable law. If you believe that a child has provided personal information to us, please contact us at Privacy@LuthiersApp.com

11. Marketing Communications

We do not send promotional or marketing emails unless you have requested or consented to receive them, where consent is required by applicable law. We may send transactional and administrative communications necessary to operate your account and subscription, including:

• Sign-in links;
• Subscription confirmations;
• Payment and billing notices;
• Cancellation and renewal notices;
• Security notifications; and
• Important service announcements.

These communications are not promotional marketing messages.

If we introduce marketing communications, they will be subject to applicable consent, identification and unsubscribe requirements, including Canada's Anti-Spam Legislation where applicable.

12. Third-Party Websites and Services

The App or our website may contain links to third-party websites or services. We are not responsible for the privacy practices, security, content or policies of third-party websites or services that we do not operate. Your use of those services is subject to their own applicable terms and privacy policies. We encourage you to review the privacy policies of third-party providers before providing information directly to them.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, the App, our service providers, our information practices or applicable legal requirements. The revised Privacy Policy will be posted on our website with an updated Effective Date. If a change materially affects how we collect, use or disclose personal information already in our possession, we will provide notice and obtain any additional consent required by applicable law before implementing the change. Your continued use of the App after a revised Privacy Policy becomes effective will constitute consent of the revised terms unless affirmative consent is required by law.

14. Contact Information and Privacy Inquiries

The organization responsible for the personal information described in this Privacy Policy is:

DENTREMONT GUITARS
3451 HWY 3, Lower Argyle
Nova Scotia, Canada, B0W 1W0

General Support: Support@LuthiersApp.com

Privacy Inquiries and Requests: Privacy@LuthiersApp.com

If you have questions, concerns or requests concerning the collection, use, storage or disclosure of your personal information, please contact us using the information above. We will make reasonable efforts to address your concerns and respond to privacy requests in accordance with the applicable laws.