Privacy Policy

Last updated: May 2026  •  Effective: May 2026

BnC Software LLC (“BnC Software,” “we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile applications, and all related services, including NNS Pro and My Community Cookbook (collectively, the “Services”). Please read this policy carefully. By accessing or using the Services, you consent to the practices described herein. If you do not agree with this Privacy Policy, please do not access or use our Services.

1. Information We Collect

We collect several categories of information in connection with the Services:

1.1 Account and Registration Data

• Full name and chosen display name
• Email address
• Password (stored exclusively in hashed, encrypted form — we never store or transmit plaintext passwords)
• Profile information you voluntarily provide (biography, primary instrument, organization name, account type)

1.2 User-Generated Content

• Songs, Nashville Numbering System (NNS) charts, musical annotations, session notes, and related content created within NNS Pro
• Recipes, cookbook content, fundraising campaign materials, and related content created within My Community Cookbook
• Tags, labels, comments, and metadata you attach to your content
• Content you explicitly designate for sharing through the optional Chart Sharing Program (see Section 6)

1.3 Usage and Analytics Data

• Pages, screens, and features you access, and the time and duration of each session
• Interactions with app features (e.g., charts created, campaigns published, settings changed)
• Crash reports, error logs, and diagnostic data
• Search queries entered within the Services

1.4 Device and Technical Data

• IP address (used for security, fraud prevention, and approximate geolocation)
• Device type, operating system, and browser version
• Unique device identifiers
• Referring URLs, exit pages, and clickstream data
• Time zone and language/locale settings

1.5 Communications Data

• Emails, support tickets, and other messages you send directly to us
• Survey responses and feedback you voluntarily submit

1.6 Financial and Transaction Data

Payment card data and financial account credentials for purchases (e.g., digital cookbook sales, subscription fees) are processed directly and exclusively by our third-party payment processor. We do not store full card numbers or banking credentials on our servers. We may retain transaction metadata (amount, date, product identifier, transaction status) for accounting, fraud prevention, and legal compliance purposes.

2. How We Collect Information

• Directly from you: when you register an account, create or upload content, make a purchase, or contact us for support
• Automatically: through cookies, web beacons, log files, and similar tracking technologies as you interact with our Services
• From third-party service providers: including Firebase (authentication and database), analytics providers, and payment processors, each subject to their own privacy policies

3. How We Use Your Information

• To create, verify, and manage your account
• To provide, operate, maintain, and improve the Services and their features
• To personalize your experience based on your account type and usage patterns
• To process transactions and deliver receipts, confirmations, and related communications
• To send administrative notices, product updates, security alerts, and support responses
• To facilitate the Chart Sharing Program when you opt in (see Section 6)
• To analyze usage trends and conduct internal research for product improvement
• To detect, investigate, and prevent fraudulent activity, abuse, and violations of our Terms of Service
• To comply with applicable laws, regulations, and legal processes
• To enforce our agreements and protect the rights, property, or safety of BnC Software, our users, and others

We do not sell, rent, or trade your personal information to third parties for their advertising or marketing purposes.

4. Legal Basis for Processing (EEA / UK / Switzerland)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, our legal bases for collecting and using personal data are:

• Contractual necessity: processing required to deliver the Services you have requested
• Legitimate interests: fraud prevention, security, analytics, and service improvement, where not overridden by your fundamental rights
• Consent: for optional features such as marketing communications and the Chart Sharing Program, which you may withdraw at any time
• Legal obligation: where we are required to process data to comply with applicable law

5. Information Sharing and Disclosure

We do not sell your personal data. We may share your information only in the following limited circumstances:

5.1 Service Providers

We engage trusted third-party vendors who perform functions on our behalf, including cloud hosting and database services (Firebase / Google Cloud), email delivery (EmailJS), payment processing, and analytics. These providers are contractually prohibited from using your data for purposes other than performing services for us and must maintain confidentiality and security standards consistent with this Policy.

5.2 Chart Sharing Program

If you opt into the Chart Sharing Program, your chosen display name and the specific charts you designate as shared will be visible to other users who have also opted into the program. No other personal information (including your email, legal name, or private charts) is shared with other users through this program. See Section 6 for full details.

5.3 Legal Requirements and Protection of Rights

We may disclose your information when required by law, subpoena, court order, or governmental authority, or when we reasonably believe in good faith that disclosure is necessary to: (a) comply with a legal obligation; (b) protect and defend the rights or property of BnC Software; (c) prevent or investigate potential wrongdoing in connection with the Services; (d) protect the personal safety of users or the public; or (e) protect against legal liability.

5.4 Business Transfers

If BnC Software LLC is involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, or sale of all or a portion of its assets, your information may be transferred as part of such a transaction. We will notify you via email and/or a prominent notice on our website of any change in ownership or use of your personal data before it is transferred and becomes subject to a different privacy policy.

5.5 With Your Consent

We may share your information for any other purpose with your prior explicit consent.

6. Chart Sharing Program — Privacy Details

NNS Pro includes an optional, opt-in Chart Sharing Program that allows users to share their NNS charts with other participating users in exchange for access to the shared community library. The following privacy considerations apply:

• Participation is entirely voluntary. NNS Pro is fully usable without opting into chart sharing.
• When you opt in, your chosen display name and only the charts you explicitly designate as “shared” become visible to other opted-in users. Your email address, legal name, private charts, and all other personal data remain private.
• You may withdraw from the program and remove shared charts at any time through your account settings. Removal takes effect promptly; however, content that has already been viewed, cached, or stored locally by other users prior to your removal request cannot be retroactively deleted from those users' devices.
• BnC Software does not endorse, verify, or guarantee the accuracy, originality, or quality of user-shared charts.
• Shared charts may be reviewed and removed if reported as infringing third-party intellectual property rights, harmful, or in violation of our Terms of Service.
• Participants must be at least 16 years of age to use the Chart Sharing Program.

7. Cookies and Tracking Technologies

We use cookies and similar technologies (web beacons, pixels, local storage) to operate and improve our Services:

• Session cookies: maintain your authenticated session while you are logged in
• Preference cookies: remember your settings and display preferences between sessions
• Analytics cookies: help us understand aggregate usage patterns and improve the Services
• Security cookies: detect and prevent fraudulent activity and unauthorized access

You may control or delete cookies through your browser settings. Disabling certain cookies may impair the functionality of the Services. We do not track users across unaffiliated third-party websites for advertising purposes.

8. Data Retention

We retain your personal data for as long as your account remains active or as necessary to provide the Services. Upon account deletion, we will delete or anonymize your personal data within 30 days, except where retention is required to: (a) comply with applicable legal obligations; (b) resolve disputes; (c) enforce our agreements; or (d) detect and prevent fraud. Financial transaction records are retained for a minimum of seven (7) years as required by applicable law. Aggregated, de-identified analytics data may be retained indefinitely as it no longer constitutes personal data.

9. Your Privacy Rights and Choices

9.1 General Rights (All Users)

Subject to applicable law, you have the right to:

• Access: request a copy of the personal data we hold about you
• Correction: request correction of inaccurate or incomplete personal data
• Deletion: request deletion of your personal data (“right to be forgotten”), subject to legal retention requirements
• Portability: receive your personal data in a structured, machine-readable format
• Restriction: request that we limit the processing of your personal data in certain circumstances
• Objection: object to our processing of your personal data based on legitimate interests
• Withdraw Consent: where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us at support@bnc-software.com. We will respond within 30 days. We may need to verify your identity before fulfilling certain requests.

9.2 California Residents (CCPA / CPRA)

California residents have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to:

• Know what categories of personal information we collect, use, disclose, and share
• Delete personal information we have collected from you
• Correct inaccurate personal information
• Opt out of the “sale” or “sharing” of personal information (we do not sell personal information or share it for cross-context behavioral advertising)
• Non-discrimination for exercising your CCPA / CPRA rights (we will not deny services, charge different prices, or provide a different quality of service based on your exercise of these rights)
• Limit the use and disclosure of sensitive personal information

To submit a verifiable consumer request, email support@bnc-software.com with the subject line “CCPA Request.” You may designate an authorized agent to make requests on your behalf.

10. Children's Privacy

Our Services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe we have inadvertently collected information from a child under 13, please contact us immediately at support@bnc-software.com. Upon verification, we will promptly delete such information. The Chart Sharing Program is restricted to users who are at least 16 years of age.

11. Data Security

We implement industry-standard technical and organizational measures to protect your personal data, including:

• Transport Layer Security (TLS / HTTPS) encryption for all data transmitted between your device and our servers
• Encryption of sensitive data at rest within our database infrastructure
• Firebase Security Rules enforcing per-user data access controls so that users can only access their own data
• Password hashing using industry-standard cryptographic algorithms
• Regular security reviews and access control audits
• Principle of least privilege: employee and contractor access to personal data is limited strictly to what is necessary to perform their functions

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to employ commercially reasonable security measures, we cannot guarantee absolute security. You use our Services at your own risk.

12. Third-Party Services

Our Services integrate with third-party platforms whose privacy practices govern the data they receive:

• Firebase / Google Cloud — authentication, database, and file storage. Governed by Google's Privacy Policy and applicable data processing terms.
• EmailJS — contact form email delivery. Governed by the EmailJS Privacy Policy.
• Payment Processor — financial transactions are processed by a PCI-DSS compliant third-party processor under its own privacy and security policies.

Our website and applications may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites and encourage you to review their policies independently before submitting any personal information.

13. International Data Transfers

BnC Software LLC is based in the United States. If you access our Services from outside the United States, your information may be transferred to, stored in, and processed in the United States and other countries where our service providers operate. Data protection laws in these jurisdictions may differ from those in your home country. By using our Services, you acknowledge and consent to such transfers. Where required by applicable law (including the GDPR), we rely on recognized legal transfer mechanisms such as Standard Contractual Clauses.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the “Last Updated” date at the top of this page and, where appropriate, notify you by email or through a prominent notice within the Services at least 14 days prior to the change taking effect. Your continued use of the Services after the effective date of any changes constitutes your acceptance of the updated Policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our personal data practices, please contact us:

We will acknowledge your inquiry within 5 business days and respond substantively within 30 days.