Privacy Policy

SessionMap ("we," "us," or "our") provides a browser-based signal-flow visualization tool for audio professionals. This Privacy Policy explains how we handle information when you use sessionmap.io and related services (the "Service").

Our core product is designed around a zero-trust, local-first architecture. We do not require you to upload session files to use the canvas application.

PDF blueprints and exported artifacts are generated locally on your device. Closing your browser tab clears in-memory session data unless you explicitly save a file to your local disk.

This architecture is intentionally NDA-compliant: your client sessions, artist names, and proprietary routing configurations remain on your machine.

Because session files stay local, our data collection is limited to standard web infrastructure:

Server Logs

When you visit our marketing site or load static assets, our hosting provider may record standard server logs including IP address, browser user-agent, referring URL, request timestamps, and HTTP status codes. These logs are used for security monitoring, abuse prevention, and service reliability. Logs are retained for a limited period consistent with our hosting provider's policies.

Analytics

In production, we may use privacy-focused analytics (such as Vercel Analytics) to understand aggregate page views and performance metrics. Analytics data is anonymized and does not include session file contents, track names, or any DAW routing data. You can manage analytics preferences on our Cookie Preferences page.

Account & Billing Data (if applicable)

If you subscribe to a paid tier, payment processing is handled by our payment provider. We receive billing status and subscription metadata — not your full payment card number. We do not link billing records to imported session content because that content never reaches our servers.

Support Communications

If you email us, we retain your message and email address solely to respond to your inquiry and maintain a record of support requests.

We use essential cookies required for basic site functionality. Optional analytics cookies may be enabled in production environments. See Cookie Preferences to review or update your choices.

Depending on your jurisdiction, you may have the following rights regarding personal data we process:

• Access — Request a copy of personal data we hold about you.
• Rectification — Ask us to correct inaccurate personal data.
• Erasure — Request deletion of personal data we control, subject to legal retention obligations.
• Restriction — Ask us to limit processing in certain circumstances.
• Portability — Receive personal data in a structured, machine-readable format where applicable.
• Objection — Object to processing based on legitimate interests, including direct marketing.
• Opt-out of sale/sharing (CCPA) — SessionMap does not sell personal information. We do not share session file data because it is never collected.

To exercise these rights, contact us at support@sessionmap.io. We will respond within the timeframe required by applicable law (typically 30–45 days).

EU/EEA residents may lodge a complaint with their local data protection authority. California residents may contact the California Attorney General's office for CCPA-related concerns.

Server logs and analytics metadata may be processed in the United States or other countries where our infrastructure providers operate. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses for cross-border transfers of limited personal data.

The Service is not directed to individuals under 16. We do not knowingly collect personal information from children. Contact us if you believe a child has provided personal data and we will delete it.

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date. Continued use of the Service after changes constitutes acceptance of the revised policy.

For privacy-related questions or requests, email support@sessionmap.io.