Privacy Policy
Last updated: September 22, 2026
1. Who We Are
ELIOTONIC LLC, a Washington limited liability company ("ELIOTONIC," "we," "us," or "our"), operates eliotonic.com and develops the MIDISketch desktop application and audio plugin and the MIDIscout MIDI library app.
ELIOTONIC LLC is the controller responsible for deciding how the personal information described in this policy is used. Privacy questions and requests can be sent to support@eliotonic.com.
This policy applies to the ELIOTONIC website, ELIOTONIC accounts, purchases, license services, support communications, the forum, Otonic, MIDISketch, and MIDIscout.
2. Information We Collect
2.1 Account Information
If you create an ELIOTONIC account, we receive your email address and any basic profile information you provide through our authentication provider, Clerk. We use this information to authenticate you, manage your account, provide purchased products, recover licenses, and communicate with you about your account.
2.2 Purchases and Payments
Payments are processed by Stripe or, if you choose it at checkout, by PayPal. ELIOTONIC does not receive or store your full payment-card number or your PayPal login. The payment provider may give us information such as your email address, a transaction, order or checkout-session identifier, payment status, the amount paid, the purchased product, any referral or partner code you applied, and other information needed to fulfill the purchase and maintain required financial records.
2.3 License Activation and Recovery
When you activate MIDISketch, the plugin sends the following information to our license server:
- The email address entered during activation
- The license key entered during activation
- A hardware-derived machine identifier
- Activation and last-verification timestamps
We use this information to verify license ownership, enforce the applicable machine activation limit (2 machines), prevent license abuse, provide license recovery and support, and issue a locally verifiable license file.
Our hosting and security providers may also process standard request information, including IP address and request headers, for delivery, security, abuse prevention, and rate limiting. An IP address is not used as MIDISketch's machine identifier.
Activation requires an internet connection. After a valid paid license is activated, MIDISketch verifies the signed license locally and can continue operating offline. Optional usage telemetry is never used to determine whether a license is valid.
2.4 Automatic Version Check
When the MIDISketch interface opens, it may request current version information from our license server. MIDISketch does not include your license key, email address, machine identifier, MIDI data, or project information in this version request. As with any internet request, our hosting provider may temporarily process the requesting IP address and standard request metadata. The version check does not affect a valid paid license and silently fails when you are offline.
2.5 Optional MIDISketch Usage Telemetry
MIDISketch includes optional basic usage telemetry. It is disabled by default and does not begin unless you enable "Share Basic Usage Data" in MIDISketch Preferences.
When enabled, MIDISketch sends one usage heartbeat per running MIDISketch process after a short delay. The payload contains:
- A randomly generated, persistent installation identifier
- The installed MIDISketch version
- The operating-system family (Windows, macOS, or Linux)
- The DAW or host name reported to MIDISketch
The random installation identifier is separate from the hardware-derived license machine identifier and is not intentionally connected to your ELIOTONIC account, email address, or license key.
Usage telemetry does not contain: your name or email address, license key, machine identifier, MIDI notes or files, audio data, project names or contents, or information about which synths or presets you use.
We use this information to understand MIDISketch version adoption and prioritize DAW and platform compatibility work.
The legal basis for this optional processing is your consent. You can withdraw consent at any time by disabling "Share Basic Usage Data" in Preferences. Disabling stops future heartbeats and does not affect licensing, updates, or product functionality. To request access to or deletion of identifiable telemetry records, contact support@eliotonic.com.
2.6 Trial Downloads and Email Communications
We may request an email address to provide a trial download, fulfill a requested license or recovery email, or send essential product and account communications. Marketing and product-news emails are sent only where permitted by law and, where required, after separate consent. You can unsubscribe using the link in an email or by contacting support@eliotonic.com. Unsubscribing from marketing does not prevent necessary purchase receipts, license delivery, security notices, or responses to support requests.
When you start the trial inside MIDISketch, the email address you enter and the license machine identifier are sent to our license server so the trial can be started on that computer and so we can send the short series of trial emails described above. Links in our emails carry a per-recipient token; when you open one we record that a link was used, and we use that only to decide whether to send the later emails in the series and to see which of our own pages the link opened. Tracked links on our site record the time, country, device type and referring site of the click, not who clicked.
2.7 Website Analytics
We use Vercel Analytics to understand website traffic and performance. It is cookieless, loads on every page, sets no cookies, does not identify you, and does not follow you to other websites. Analytics information may include pages viewed, referring URLs, approximate location derived from IP address, browser and device information, interactions with website controls, and download events.
The MIDISketch product page also sends us one anonymous beacon when you leave it: which sections of the page were on screen and for how long, how far you scrolled, whether your screen was phone or desktop sized, and the campaign link or referring site you arrived from. It sets no cookie, carries no identifier that outlives the page, and your IP address is not stored with it.
We also use the Meta Pixel to measure advertising performance. It reports page views, trial requests, checkout starts and completed purchases to Meta, which may use that information for advertising measurement and audiences. If you are in the European Union, the European Economic Area, the United Kingdom or Switzerland, it does not load unless you accept it through the consent banner. Elsewhere it loads when you arrive, a notice tells you so, and one click on that notice stops it; that choice is remembered on your device. If your browser sends a Global Privacy Control signal, the pixel does not load. You can change your choice at any time from the Cookie Preferences link in the site footer.
2.8 Support Communications
When you contact support, we collect the information you provide, such as your email address, message contents, diagnostic information, attachments, and relevant purchase or license details. Please do not send MIDI projects, audio, passwords, or other sensitive information unless it is necessary for your support request.
2.9 Information Stored Locally
MIDISketch stores settings, trial state, license files, preferences, and related application data locally on your computer. Your MIDI notes, audio, hosted-synth state, presets, and project contents remain on your computer unless you independently choose to share them with us for support. MIDISketch does not currently collect automatic crash reports or analytics about your musical content.
2.10 Otonic, the Documentation Assistant
Otonic answers questions about MIDISketch from our documentation. When you ask it something, we store the question, the answer, the documentation sections it showed you, which model answered, how long it took, and whether you marked the answer helpful. If you are signed in, this is stored against your ELIOTONIC account so you can see your past questions. If you are not, it is stored against a code derived from your IP address and the date. The address itself is not stored, and the code changes every day.
To write an answer, your question, up to two of your earlier questions and answers from the same conversation, and excerpts from our documentation are sent to the model provider named in section 4. Please do not include personal or sensitive information in a question. We read stored questions to find wrong answers and gaps in the documentation.
2.11 The Forum
Posting in the forum requires an ELIOTONIC account. Your display name and profile picture appear next to what you post, and posts and replies are public, except on the private questions board. A private question is visible only to you and to us until we answer it. We may then publish a useful question and its answer for everyone, with your name or without it, as you chose when you asked. We count views of each thread, at most once per viewer per day: for members this uses the account identifier, and for guests a code derived from the IP address and browser, with the address itself not stored. Reports you send us about a post are visible only to us.
2.12 MIDIscout Cloud Backups
MIDIscout keeps your MIDI library in your browser. If you choose to back it up from MIDIscout's settings, the backup is stored with your account and contains your library, including each file's name and folder path, its notes, tempo, key and tags, along with your filter presets and settings. Folder paths can include your computer's user name. A backup is made only when you ask for one, and you can restore or delete it from the same place.
3. Why We Use Information and Our Legal Bases
Depending on your location, we rely on the following grounds:
- Contract: To provide accounts, purchases, downloads, licenses, activation, recovery, the forum, MIDIscout cloud backups, and support you request.
- Legal obligation: To maintain records required for accounting, tax, fraud-prevention, and regulatory purposes.
- Consent: For optional MIDISketch usage telemetry, nonessential website analytics, and marketing where consent is required.
- Legitimate interests: To secure our systems, prevent abuse, maintain compatibility, provide version information, diagnose service problems, answer questions through Otonic and improve our documentation, and protect ELIOTONIC and its customers.
Where we rely on consent, you may withdraw it at any time.
4. How We Share Information
We disclose information only as necessary to operate ELIOTONIC, fulfill purchases and licenses, provide support, comply with law, or protect our services. Our service providers include:
- Clerk · Account authentication and management. Privacy Policy
- Stripe · Payment processing. Privacy Policy
- PayPal · Payment processing when you pay with PayPal. Privacy Policy
- Supabase · Database and file storage, including license records, forum media and MIDIscout backups. Privacy Policy
- Google (Gemini API) · Writes Otonic's answers from the question and documentation excerpts described in section 2.10. Otonic may instead use another model provider of the same kind, such as OpenAI or Groq. Privacy Policy
- Vercel · Website and API hosting. Privacy Policy
- Resend · Transactional and requested email delivery.
- Upstash · API rate limiting and abuse prevention.
- Meta Platforms · Consent-based advertising measurement through the Meta Pixel. Privacy Policy
- Formspree · Delivery of messages sent through the support form. Privacy Policy
- Google Fonts · Web fonts on a few pages are served by Google, which means Google receives your IP address and the request for the font file. Most pages load fonts from our own server. Privacy Policy
- YouTube · Embedded videos on some pages. YouTube may set cookies once a video plays. Privacy Policy
We may also disclose information when required by law or legal process, to investigate fraud or security incidents, or as part of a merger, acquisition, or sale of business assets, subject to appropriate confidentiality protections.
ELIOTONIC does not sell personal information for money. If you accept advertising cookies, information collected by the Meta Pixel may be used for cross-context behavioral advertising as California law defines that term. In the European Union, the European Economic Area, the United Kingdom and Switzerland nothing is shared with Meta unless you accept; elsewhere the pixel runs until you opt out through the notice or the Cookie Preferences link in the site footer, which stops it from loading.
5. Cookies and Similar Technologies
We use essential cookies and local-storage technologies for authentication, security, account sessions, payment workflows, and remembering privacy choices. Vercel Analytics sets no cookies. The Meta Pixel sets advertising cookies and similar technologies to measure website traffic, interactions and advertising performance; section 2.7 describes when it loads and how to stop it.
You can accept or reject nonessential cookies through the website consent banner, and change that choice later through the Cookie Preferences link in the site footer. You may also restrict cookies through your browser, although blocking essential cookies may prevent account or checkout functionality.
The MIDISketch desktop application does not use browser cookies. Its optional usage-telemetry preference is stored locally in the application's settings.
6. Data Retention
- Account information: Until the account is deleted, followed by removal from active systems within 90 days unless a retention obligation applies.
- Purchase and financial records: Up to seven years, or longer if required by applicable tax or legal obligations.
- License and activation records: For the lifetime of the license and as long as reasonably necessary to provide perpetual license verification, recovery, and fraud prevention.
- Raw optional usage telemetry: No longer than 12 months.
- Aggregated telemetry: Statistics that can no longer reasonably identify an installation may be retained indefinitely.
- Website analytics: No longer than 14 months, unless a shorter period is configured.
- Marketing email information: Until you unsubscribe or request deletion. We may retain a minimal suppression record to prevent further marketing.
- Support communications: Normally up to three years after the support request is closed.
- Otonic questions and answers: Kept to improve answers and the documentation, and deleted on request. Questions asked without signing in are not linked to an account.
- Forum posts and replies: Until you ask us to remove them, or we remove them for breaking the forum rules.
- MIDIscout cloud backups: Until you delete them in MIDIscout or ask us to.
- Security and server logs: Normally no longer than 30 days, unless needed to investigate abuse, fraud, security incidents, or legal claims.
7. Data Security
We use administrative, technical, and organizational safeguards designed to protect personal information. These measures include HTTPS/TLS encryption in transit, access controls, restricted database credentials, cryptographically signed license files, rate limiting, and payment processing handled by Stripe. No transmission or storage system is completely secure, so we cannot guarantee absolute security.
8. Your Privacy Rights
Depending on where you live, you may have the right to:
- Request access to personal information we hold about you
- Request correction of inaccurate information
- Request deletion of information
- Request restriction of or object to certain processing
- Receive certain information in a portable format
- Withdraw consent at any time
- Opt out of marketing communications
These rights may be subject to exceptions. For example, we may retain information needed to comply with law, prevent fraud, resolve disputes, or maintain minimal license-ownership records.
To make a request, email support@eliotonic.com. We may need to verify your identity before fulfilling a request.
European Economic Area and United Kingdom users may lodge a complaint with their local data-protection authority. California residents may obtain additional information from the California Attorney General.
9. International Processing
ELIOTONIC and several of our service providers operate in the United States. Information may therefore be transferred to or processed in countries whose privacy laws differ from those where you live. Where required, we use recognized transfer mechanisms and contractual safeguards provided by our service providers, such as applicable Standard Contractual Clauses.
10. Children's Privacy
ELIOTONIC is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided personal information to us, contact support@eliotonic.com so we can investigate and delete it where appropriate.
11. Automated Decisions
License activation and validation use automated checks to determine whether a key is valid and within its activation limit. If you believe an activation was incorrectly refused, contact support@eliotonic.com for human review. We do not use personal information for automated profiling that produces legal or similarly significant effects unrelated to license administration.
12. Changes to This Policy
We may update this policy as MIDISketch, our website, or legal requirements change. We will post the updated policy here and revise the "Last updated" date. If a material change affects consent-based processing, we will provide additional notice or request new consent where required.
13. Contact
For privacy questions, access or deletion requests, consent withdrawal, or complaints, contact:
ELIOTONIC LLC
support@eliotonic.com