Privacy Policy

1. Introduction

At Esanaa, we are committed to protecting the privacy and security of your choir and member data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our choir management platform. We understand that choir organizations handle sensitive member information, and we take our responsibility to protect that data seriously.

By using Esanaa, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

We collect several types of information to provide and improve our choir management services:

2.1 Account Information

• Email address
• Name and display name
• Role in choir (Director, Section Leader, Member, etc.)
• Profile picture (if provided)

2.2 Member Data

• Contact information (name, email, phone number)
• Voice parts (Soprano, Alto, Tenor, Bass)
• Attendance records for rehearsals and events
• Member status and participation history

2.3 Choir Content

• Song library (titles, lyrics, sheet music)
• Practice audio tracks and recordings
• Album information and organization
• Other content uploaded by choir members and directors

2.4 Event Data

• Rehearsal schedules and dates
• Performance dates and locations
• RSVP responses and attendance confirmations
• Event notes and descriptions

2.5 Communication Data

• Announcements sent through the platform
• Group messages and communications
• Notifications and alerts

2.6 Usage Data

• How you interact with the Service
• Features you use and pages you visit
• Device information and browser type
• IP address and general location data

2.7 Authentication Data

• OAuth provider information (Google, GitHub) when you sign in using third-party authentication
• Authentication tokens and session data

3. How We Use Information

We use the information we collect to:

• Provide choir management services: To enable member management, attendance tracking, event scheduling, and communication features
• Manage member directories: To maintain accurate member contact information, voice parts, and participation records
• Facilitate attendance tracking: To record and monitor attendance for rehearsals and events
• Enable event scheduling: To create shared calendars, send reminders, and manage RSVPs
• Support communication: To deliver announcements and enable group messaging within your choir organization
• Improve the platform: To analyze usage patterns and enhance user experience
• Send service-related notifications: To inform you about important updates, security alerts, and account activity
• Ensure security: To detect and prevent fraud, abuse, and unauthorized access
• Comply with legal obligations: To meet applicable laws, regulations, and legal processes

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

• Within your choir organization: Member data and content are visible to authorized members of your choir based on roles and permissions
• Service providers: We may share information with third-party service providers who perform services on our behalf (e.g., hosting, analytics, email delivery)
• Legal requirements: We may disclose information if required by law or in response to valid legal requests
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred
• With your consent: We may share information with your explicit consent

5. Data Security

We implement appropriate technical and organizational security measures to protect your choir and member data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Secure data storage and backup procedures
• Employee training on data protection

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy. When you delete your account, we will delete or anonymize your personal information, except where we are required to retain it for legal, regulatory, or legitimate business purposes. Choir data may be retained for a reasonable period to allow for account recovery or data export.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Export: Request a copy of your data in a portable format
• Objection: Object to certain processing of your information
• Restriction: Request restriction of processing in certain circumstances

To exercise these rights, please contact us using the contact information provided below. We will respond to your request within a reasonable timeframe.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Service and store certain information. Cookies are files with a small amount of data that may include an anonymous unique identifier. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

9. Third-Party Services

Esanaa integrates with third-party authentication providers (Google, GitHub) to enable OAuth sign-in. When you use these services:

• You are subject to the privacy policies of these third-party providers
• We receive basic profile information (name, email) necessary for account creation
• We do not have access to your passwords or full account details from these providers

Our Service may also contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

10. Children's Privacy

Esanaa is designed for use by choir organizations, which may include members of various ages. If you are a parent or guardian and believe your child has provided us with personal information, please contact us. We do not knowingly collect personal information from children under the age of 13 without parental consent. If we become aware that we have collected personal information from a child under 13 without verification of parental consent, we will take steps to delete that information.

11. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. By using Esanaa, you consent to the transfer of your information to our facilities and those third parties with whom we share it as described in this Privacy Policy.

12. Changes to Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We may also notify you via email or through a notice on our Service. You are advised to review this Privacy Policy periodically for any changes. Your continued use of Esanaa after such changes constitutes your acceptance of the updated Privacy Policy.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us through the contact information provided on our website or within the Esanaa application. We are committed to addressing your privacy concerns and will respond to your inquiries in a timely manner.