Privacy policy

This policy explains what DrumKit collects when you use our design tools, our website and the services around them, why we collect it, and the choices you have. It applies to the DrumKit editor, the DrumKit website, our community forum and any support channel you reach us through.

We only ask for information when we genuinely need it to provide a service to you, and we collect it by fair and lawful means, with your knowledge and consent. We also let you know why we are collecting it and how it will be used. Where this policy changes in a way that affects you, we will tell you before the change takes effect.

What information do we collect?

When you create a DrumKit account we collect your name, your email address and a password, or the identity your sign-in provider shares with us. If you join a paid plan, our payment processor collects your billing details; we keep only the last four digits of the card and the billing address you give us.

As you work, DrumKit stores the files, components, libraries and comments you create, together with the version history behind them, so that you and the people you share with can pick up where you left off. We also record how the editor is used: which features are opened, how long a session lasts, the browser and operating system in use and any errors the app reports. This usage data is tied to your account so we can investigate problems you raise, and it is aggregated before anyone outside the support team looks at it.

If you write to us, post in the community forum or take part in user research, we keep the messages, recordings and notes from those conversations. Our website uses server logs that record your IP address, the pages you visit and the site that referred you, which we keep for a short time to keep the service secure and to understand which parts of the site are useful.

How do we use your information?

We use what we collect to run DrumKit: to sign you in, to sync your files between devices and collaborators, to bill you for the plan you chose and to send you the receipts, security notices and service messages that come with an account.

Usage data helps us decide what to build next and where the editor is slow or confusing. We look at it in aggregate to prioritise work, and at the level of a single account only when you have asked us to look into a problem or when we need to protect the service from abuse. We may use your email address to tell you about new features, tips and events, and every one of those messages has an unsubscribe link; turning them off never affects the service messages your account depends on.

We do not sell your information, and we do not share it with advertisers. We share it with the providers who host our infrastructure, process payments, deliver email and help us answer support requests, each under a contract that limits them to acting on our instructions, and with authorities where the law requires it. If DrumKit is ever acquired, your information would transfer with the service and this policy would continue to apply.

Do we use cookies and other tracking technologies?

Yes, sparingly. A session cookie keeps you signed in and a preference cookie remembers choices such as your theme. We use one privacy-focused analytics tool that does not build a profile of you across other sites, and you can decline it from the cookie settings link in the footer at any time.

How long do we keep your information?

We keep your account and the files in it for as long as your account is open. Server logs are deleted after 30 days, support conversations after two years, and payment records for the seven years that tax law requires. When you delete your account, your files are removed from our live systems within 30 days and from backups within 90.

How do we keep your information safe?

Your data is encrypted in transit and at rest, access inside DrumKit is limited to the people whose work requires it, and every access is logged. We test the service regularly, run a responsible disclosure programme, and will tell you without undue delay if a breach ever affects your information.

What are your privacy rights?

You can see, correct, export and delete the information we hold about you from your account settings at any time, and you can ask us to do any of these for you. If you live in the European Economic Area, the United Kingdom or California, you also have the right to object to some processing, to restrict it, and to complain to your local data protection authority. We answer every request within 30 days and never charge for it.

How can you contact us about this policy?

If you have a question about this policy or about how DrumKit handles your information, our privacy team would rather hear from you early than late. Write to privacy@drumkit.com or to DrumKit Pty Ltd, Level 4, 120 Collins Street, Melbourne VIC 3000, Australia. To help us answer quickly, include the following: