Privacy policy
Last updated 31 October 2026. This is the plain-English version; it is also the only version.
Who we are
TuttiRoom (tuttiroom.com) is a rehearsal platform for orchestras, choirs and bands whose players are not in the same place. It is run from Australia by the operator named at the end of this page, and the Australian Privacy Act 1988 and its Australian Privacy Principles apply to how we handle your information. If you are in the UK or the EU, the GDPR and UK GDPR rights described below also apply to you.
What we collect, and why
| What | Why |
|---|---|
| Your email address, and the name your sign-in provider gives us | To sign you in and to find your ensembles again on another device. This is the only identifier we keep for your account. |
| The name, instruments and town you type in when you join an ensemble, and your time zone | So the people in your ensemble know who is playing what, and so rehearsal times show in your zone. Your ensemble's other members can see these. |
| Your audio recordings of rehearsal takes, and, when you turn your camera on, a picture or video from your webcam during a take | This is the product: your part is recorded while you play along, then aligned and mixed with everyone else's. Recordings are kept for your ensemble to review and are visible to its members. |
| Video and voice calls before and after takes (planned) | So the ensemble can talk the way it would in a hall. Calls are live and are not recorded unless the feature says so on screen at the time. |
| Chat messages, notes, signals such as "I have a question", and your presence in a room | To run the rehearsal. Chat is seen by the ensemble; it is not kept after the room closes except where it was saved as a note on a take. |
| Profile details you choose to publish on the people board: a description, instruments, region, a picture and audition takes | So ensembles can find you. Everything on the board is public by your choice; you can take it down at any time. |
| Sheet music, conducting tracks and other files an ensemble uploads | To rehearse from. The ensemble's managers are responsible for having the right to upload them. |
| Technical details: your IP address, browser type, the pages and API calls you make, and error reports | To keep the service running, to stop abuse (for example, rate limits on sign-in emails), and to understand what it costs to run. Kept in short-lived logs. |
| Billing details, when an ensemble pays for a plan | Handled by our payment provider; we see the plan, the ensemble and whether it is paid, never your card. |
Who else sees it
We do not sell your information and we do not use it for advertising. A small number of services process it for us, each for one job:
- Cloudflare runs the servers, stores files and recordings, and, when picture checking is on, uses a vision model to check that an uploaded picture is suitable before it is shown. Data is stored in Cloudflare's network, which may be outside Australia.
- WorkOS handles sign-in through Google, Microsoft, Apple or an emailed code. It sees your email address and name; it does not see your recordings or ensembles.
- Google Fonts serves the typefaces; Google receives your IP address when the fonts load.
- Stripe, when billing is on, takes payments for ensemble plans.
Within TuttiRoom, your ensemble's conductor and managers can see who has joined, what they recorded, and the technical notes on each take. Other members can see the roster and the mixed recordings.
How long we keep it
- Recordings and uploaded files stay until the ensemble's managers delete them, the ensemble is closed, or you delete your own takes.
- Your account stays until you delete it. Deleting it removes your sessions, your profile and your own takes; recordings you made as part of an ensemble's rehearsal stay with that ensemble, since they are part of a joint recording, unless you ask us to remove them.
- Sign-in codes and links expire within fifteen minutes; a signed-in session lasts thirty days.
- Technical logs are kept for a short period, typically days, and then discarded.
Children and youth ensembles
TuttiRoom may be used by school and youth ensembles. A person under 16 should only use it as part of an ensemble whose organiser has the consent of a parent or guardian. Organisers of youth ensembles are responsible for that consent and for turning cameras off where they are not appropriate. Pictures on the public people board can be reported by anyone and are taken down after three reports or when we review them.
Your choices and rights
- You can see and change what you have shared from the account page and the ensemble roster.
- You can delete your own takes, leave an ensemble, take your profile off the people board, and delete your account.
- You can ask us for a copy of the information we hold about you, or ask us to correct or delete it, by emailing the address below. We answer within thirty days.
- You can complain to us first, and then to the Office of the Australian Information Commissioner (oaic.gov.au) or, in the UK and EU, to your local data protection authority.
Security
Everything travels over HTTPS. Sign-in is by your existing Google, Microsoft or Apple account or by a one-time emailed code; we never store a password. Recordings and files are only served to members of the ensemble they belong to. We keep the service small on purpose, which keeps the amount of information we hold small too.
Changes
When this policy changes we update the date at the top and, for anything that matters, say so on the home page for a while. Keeping on using TuttiRoom after a change means you accept it.
Contact
TuttiRoom is operated by [operator legal name], ABN [number], Australia. Privacy questions: privacy@tuttiroom.com.