Scorehand — Privacy notice

In force from 2026-10-23; chart tools parts updated 2026-11-03; Scorehand named as the operator 2026-11-05.

Who we are. Scorehand ("Scorehand", "we") runs this service. Contact: hi@aihud.net.

What we collect. The chart you upload; the title, composer, ensemble, style and hints you enter; your email address; your mobile number if you give one; your IP address; payment records from PayPal (order and capture IDs, amount, payer email — we never see your card or PayPal password); and the files we produce for you. For the chart tools: your email address (the free account and any paid plan are tied to it), the date you confirmed it, how many charts you used each month, your IP address and a browser ID cookie, and for Scorehand Charts the PayPal subscription ID, status and paid-through date.

Why. To read your chart and produce the arrangement; to email (and, if you gave a number, text) you when your plan, preview or arrangement is ready; to take payment and handle refunds; to stop abuse (one free preview per person — we compare normalised email addresses and phone numbers across orders); to run your chart tools account, count your monthly charts and enforce the limits per email, browser and connection; and to keep financial records.

Who processes it. Anthropic (the AI model that reads the chart and writes the arrangement — your chart and request are sent to it for processing); PayPal (payment); Twilio (email and text delivery); Amazon Web Services (hosting and storage); ipwho.is (approximate location of the IP address of visitors and orders — city, country and network — shown only to us for abuse review and traffic statistics); Google and Meta (ad measurement only, see Cookies below). We do not sell your data and do not use your uploads to advertise.

How long. Uploaded charts, working files and the files we produce for you: deleted 90 days after delivery (or after the job is abandoned); a nightly job removes expired files. Intermediate working files (audio stems, renders) are deleted as soon as your preview or arrangement is published. Visit logs and IP location lookups: 90 days. Chart tools (Chart Transposer, Sheet Music to MuseScore): the upload is deleted as soon as it has been read. An upload waiting for you to confirm your email is kept up to 24 hours, then deleted if the link was not clicked; an upload with an unpaid quote is also kept up to 24 hours. The result files are deleted 24 hours after they were made. Your email address, account and monthly chart counts have no automatic deletion date: ask us to delete them at hi@aihud.net. If you ask us to email you the files, we keep that email address (you can unsubscribe from any message). Printed free charts (free tool results and free arrangement previews) carry a short link and QR code in the footer; when someone opens it we count the visit at city level (city, region, country; not the IP address) and which chart it came from. Order, payment and free-preview records: kept as long as needed for accounting and abuse prevention (up to 7 years for payment records).

Your choices. You can ask us to delete your data or send you a copy of it: hi@aihud.net. Texts: reply STOP to stop messages. We send service messages about your orders and account; Scorehand tool emails can carry an occasional tip you can unsubscribe from.

Security. Uploads are processed in isolated containers with no network access; download links are private and expire. No system is perfectly secure; tell us at once if you think a link was exposed.

Chart tools cookies. mt_acct keeps you signed in (up to 1 year), mt_unlock holds a customer unlock (30 days) and aihud_tc is the browser ID used for limits (about 13 months). They are not used for advertising.

Cookies and ad measurement. Our pages load the Google tag (Google Ads) so we can tell which of our ads bring visitors and orders. It sets Google advertising cookies and, if you arrived from a Google ad, we keep the ad click ID (gclid / gbraid / wbraid) with your order for up to 90 days. When you reach a milestone (upload, email confirmed, plan, preview, payment) we tell Google Ads that a conversion happened, with the order value for payments, and a one-way hashed (SHA-256) copy of your email address so Google can match the conversion to an ad click ("enhanced conversions"). We never send Google your chart, files, name or the private link to your order. In the EEA, UK and Switzerland these cookies stay off until you click OK on the cookie notice; anywhere, you can click "No thanks" (or clear the music_consent cookie to choose again). Google's use of the data: policies.google.com/technologies/partner-sites.

Meta Pixel. Our pages also load the Meta Pixel so we can tell which of our Facebook and Instagram ads bring visitors and orders. It sets Meta advertising cookies and tells Meta when you view a page, upload a chart, see a plan, get a free preview or pay, with the order value for payments. For a preview or payment our server can also tell Meta directly, with the order value, your IP address and browser details, Meta's cookie and ad click IDs, and a one-way hashed (SHA-256) copy of your email address, so Meta can match it to an ad click. We never send Meta your chart, files, name, unhashed email or the private link to your order. The same choice applies: in Europe it stays off until you click OK, and anywhere "No thanks" turns it off. Meta's use of the data: www.facebook.com/privacy/policy.

Children. The service is not directed at children under 13.