Privacy Notice

1. Who is responsible for your data

Tommy Advice B.V., trading as PITTO (KVK 83907718), of Postjesweg 1, 1057 DT Amsterdam, The Netherlands, is the data controller for the information described in this notice.

2. What we store about you

On both plans, our licence service stores:

• your email address;
• your licence key and your plan;
• for each Mac you activate: its computer name, a hashed hardware identifier, when it was activated, and when it last checked in;
• if you ticked the product-news box when you signed up for Pitto Free: the date you gave that consent.

On Pitto Cloud, we also store:

• your Paddle customer ID;
• the status and billing period of your subscription;
• the ID of the workspace we host for you;
• your credit balance and history: credits bought, granted, used and refunded. Not the content that was analysed.

About that computer name. PITTO does not ask you for one. It sends your Mac’s own computer name, exactly as macOS reports it. For most people that is something like “Anna’s MacBook Pro”, which contains their real name. If you would rather it did not, rename your Mac in System Settings before you activate. The hardware identifier is hashed (SHA-256) on your Mac before it is sent; we never receive the raw one.

Abuse limits. Every activation and licence check logs the licence key and the time; that log is cleared after 24 hours. Free signup and key recovery store a scrambled (HMAC) form of the email address and the IP address for 48 hours. We store no IP addresses otherwise.

Payment details are collected and held by Paddle, the merchant of record for Pitto Cloud. We never see your card details.

3. What PITTO on your Mac sends, on both plans

• Licence checks. Activating a Mac sends your licence key, the hashed hardware identifier and the Mac’s computer name. PITTO then checks the licence at launch and every 24 hours while it runs, sending the key and the hashed identifier. Releasing a Mac sends the same two. A Pitto Free key stays valid for 14 days after its last successful check. If PITTO has been offline for longer, it asks you to reconnect, and you can still export your catalog from that screen.
• Update check. Once per launch, PITTO asks pitto.music whether there is a new version. The request carries the app version, the operating system (macOS) and the chip type. Nothing installs unless you choose to install it.
• Shared artist database. PITTO downloads a shared database of public artist details about 30 seconds after launch and every 6 hours. When you add an artist that has a Spotify ID, PITTO automatically sends that artist’s public details to it: name, Spotify ID and link, Instagram link, country, followers, popularity, picture link and genres. Nothing that identifies you, your songs or your contacts is sent. This is on by default, and you can switch it off under Settings → Shared Artists.
• Artist pictures load from Spotify’s image servers, with no account involved.
• YouTube titles. When a briefing shows a YouTube link without a title, PITTO automatically asks YouTube for the title, sending the video link.
• DISCO and Dropbox. Importing from a share link fetches that page and its audio.
• Your own Spotify account, only if you enter your own Spotify developer app ID and secret in Settings. PITTO uses it to look up artists, tracks and releases. Some lookups are automatic: the reference tracks when a briefing opens, and an artist’s top tracks when you select the artist. Signing in to Spotify loads Spotify’s player from Spotify.
• Your own Postal account, only if you enter your own Postal API key in Settings. Publishing a song sends its title, artist and writer credits, ISRC, lyrics and genre, and its audio. On Pitto Free, PITTO uploads the audio file straight from your Mac to Postal. On Pitto Cloud, Postal fetches it through a temporary link to your hosted copy. After that, saved edits to a published song’s details are sent automatically.

What is never sent. The app has no analytics, no usage tracking and no crash reports. The diagnostics file is saved only where you choose, and goes nowhere else.

4. Pitto Cloud: hosted catalog, audio and smart tools

Your catalog. Moving to Cloud copies your catalog (songs, splits, writers, artists, contacts, companies, briefings and leads, pitches and playlists) into a database hosted for your account with Turso, in Ireland (AWS eu-west-1). It syncs every few seconds, and both your Macs use it. Editing a Cloud catalog needs an internet connection; offline, PITTO shows the catalog read-only.

Your audio. Audio is uploaded to Hetzner Object Storage in Nuremberg, Germany: every song you add, plus your existing audio library when you move to Cloud. It is reached through short-lived signed links issued by our licence service.

Smart tools. The smart tools run on our own server at Hetzner in Nuremberg, Germany, using our own accounts with the AI providers. You never need a key of your own, and your Mac never sends your data to an AI provider directly.

• Song analysis (1 credit per song). Our server reads the audio from storage, measures it with its own analyser (Essentia, on the same server), and sends the audio to Google (Gemini) for genre, mood and lyrics. By default it runs after each upload; you can change that under Settings → Audio analysis → “Analyze new songs automatically”. Moving to Cloud never analyses your existing library by itself.
• Briefing PDFs (1 credit per PDF). The PDF is turned into text on your Mac. That text, the sender’s name and email address, and the file name go to our server and on to OpenAI.
• Song matching (included). The briefing’s name, genres, tags, summary, gender and up to 1,500 characters of its direction, plus the list of lyric themes in your catalog, go to our server and on to Anthropic (Claude).

What our server keeps. Our server stores none of these inputs. It keeps only a fingerprint (hash) of each one, to recognise repeats, plus each job’s credit charge. Results are cleared after 24 hours; by then they are saved in your catalog.

What the AI providers keep. What Google, OpenAI and Anthropic keep, and whether they use it to train their models, is set by their own business terms, not by us: Google Gemini API terms, OpenAI API data controls and Anthropic commercial terms.

5. Who handles your data

• Paddle: Cloud payments, as merchant of record.
• Resend: licence emails.
• Vercel: this website and our licence service. Requests are handled in Dublin, Ireland, with standard request logs.
• Turso: licence records, the shared artist database, credit records and Cloud catalogs, in Ireland.
• Hetzner: Cloud audio and the smart-tools server, in Nuremberg, Germany.
• Google, OpenAI and Anthropic: the Cloud smart tools only.

We don’t sell your data.

The services you connect yourself (Spotify, Postal) and the public calls in section 3 (YouTube, DISCO, Dropbox, Spotify’s image servers) are not on this list. Those are your Mac talking to them directly, under their own terms.

Vercel, Resend, Google, OpenAI and Anthropic are US companies. Where they process your data outside the EU/EEA, we rely on each one’s data processing agreement, which uses the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

6. This website

We run no analytics and no tracking scripts, and we set no cookies. The font and images are served from this site itself.

Paddle’s payment script loads on the purchase page, and on the account page when a Cloud account can buy credits. That script is Paddle’s, not ours. It may set its own cookies and collect device information for fraud prevention, under Paddle’s privacy policy.

7. Product news

Signing up for Pitto Free shows an optional, unticked box for product news. Only if you tick it do we store the date of your consent. We send no product news today. You can ask us to stop at any time by writing to support@pitto.music.

8. Why we process this data

We use this data to issue and renew your licence, to activate PITTO on your Macs within your plan’s limit (one for Free, two for Cloud), to run Cloud hosting and the smart tools, to manage Cloud subscriptions, and to answer support requests. We use your email for product news only if you consented to it.

9. How long we keep data

• Activation and licence-check logs: 24 hours.
• Free signup and key recovery records: 48 hours.
• Smart-tool results on our server: 24 hours.
• When Pitto Cloud ends, your hosted catalog and audio are kept for 30 days, so you can download your audio, and are then deleted.
• Your account and licence (your email, your key and your Macs) are kept while your licence exists. Ask us and we delete them.

10. Your rights

You can ask us to access, correct or delete the data we hold about you, to give you a copy of it, or to stop processing it, by writing to support@pitto.music. If you are unhappy with how we have handled it, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, at autoriteitpersoonsgegevens.nl.

11. Contact

Questions about this notice can be sent to support@pitto.music.