Privacy Policy

1. Who we are

Ucentered Ltd
10 Watermark Way, Foxholes Business Park
Hertford, Herts, SG13 7TZ
United Kingdom

Email: Info@epickset.com
Ucentered Ltd is the data controller responsible for your personal data under the UK GDPR and the Data Protection Act 2018.

2. Information We Collect

We collect and process the following types of information:

a. Account Information

• Name or username
• Email address
• Authentication provider (Google, Apple, or email)
• Password (encrypted and never stored in plain text)

b. User-Generated Content

• Uploaded songs, audio files, lyrics, and chords
• Setlists, notes, and comments shared with other users
• Metadata such as tags, song titles, and timestamps

c. Usage Data

• App interactions (e.g., creating or editing setlists)
• Device type, operating system, and browser version
• IP address and approximate location (for security and analytics)

d. Cookies & Tracking

We use cookies and similar technologies to:

• Maintain user sessions
• Improve performance and analytics
• Remember user preferences

You can control or delete cookies through your browser settings.

3. How we use your information

We use your information to:

• Provide and maintain the EpickSet platform
• Enable collaboration and file sharing between users
• Personalise content (e.g., AI-generated setlists)
• Improve features and app performance
• Communicate updates, support messages, or important notices
• Ensure compliance with our Terms & Conditions and legal obligations

4. Legal Basis for Processing

We process your personal data under the following legal bases:

• Contractual necessity – to deliver the services you request.
• Legitimate interests – to improve, secure, and personalise the app.
• Legal obligations – to comply with applicable laws and regulations.
• Consent – where required for cookies, newsletters, or marketing.

5. AI Features and Data Processing

EpickSet includes AI-powered tools such as AI Setlist Generation.
When using these features:

• Your prompt text may be processed by third-party AI models (e.g., OpenAI or Hugging Face) through secure, anonymised requests
• No personally identifiable data is stored by these models.
• We use results solely to generate your requested output within the app.

6. How We Store and Protect Your Data

We take data protection seriously and use multiple security layers, including:

Encryption at rest and in transit (TLS 1.2+)

• Secure cloud infrastructure via Google Cloud Platform (GCP)
• Firebase Authentication and Firestore with strict access controls
• Regular audits and monitoring to detect potential vulnerabilities

Your data is stored in data centres located within the United Kingdom and European Economic Area (EEA) where possible.

7. Sharing and Disclosure

We do not sell your personal data.
We may share limited information with:

• Service providers (for hosting, notifications, analytics, payments, etc.):
• Google Firebase (hosting, authentication, database)
• Mailgun (email notifications)
• Stripe (payment processing for premium plans)
• Cloudflare (security and performance)
• AI model providers (OpenAI, Hugging Face) for AI-generated setlists
• Legal authorities if required by law or to protect rights and safety

All third-party services are GDPR-compliant and bound by data processing agreements.

8. Data Retention

We keep your personal data only for as long as necessary to:

• Provide the service,
• fulfil legal or accounting requirements, or
• Resolve disputes.

If you delete your account, we permanently remove your personal data and uploaded content within 30 days, unless retention is required by law.

9. Your Rights and Choices

Under the UK GDPR, you have the right to:

• Access your data
• Rectify inaccurate or incomplete information
• Erase your data ('right to be forgotten')
• Restrict or object to processing
• Port your data to another provider
• Withdraw consent for processing based on consent

To exercise any of these rights, email us at: privacy@epickset.com.

We will respond within 30 days of receiving your request.

10. International Transfers

Some data may be transferred to trusted partners outside the UK/EEA (e.g., Google LLC in the US) under GDPR-approved safeguards such as Standard Contractual Clauses (SCCs).

11. Indemnification of Liability

You agree to indemnify and hold harmless Ucentered Ltd and its affiliates from any claims, damages, or legal actions arising from:

• Your misuse of EpickSet;
• Violation of these Terms;
• Violation of these Terms;

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically. When changes are made, we will update the "Last Updated" date above and notify users when necessary. Continued use of EpickSet after changes are posted constitutes your acceptance of the updated Privacy Policy.

13. Contact

If you have any questions or concerns about this Privacy Policy, please contact us at:

Info@epickset.com