Privacy Policy

1. Data controller

The Service is provided by Moor Score ("we", "us"), which is responsible for processing your personal information. For privacy matters, contact support@moorscore.cn.

We have not appointed a Data Protection Officer (DPO); given the scale of our processing, this requirement does not currently apply.

2. Information we collect

Account information: you sign in with a mainland China mobile number by SMS, so we receive your phone number. You may also add a contact email and customize your display name and avatar. We store only hashes of verification codes, never the codes themselves.

Your content: scores, MIDI files, project settings, preview audio and thumbnails you upload or create, and the files you export.

Transaction information: order number, product, amount, currency, payment and refund status, and your Credits balance and ledger. Card and other payment details are processed by our payment provider Waffo Pancake and never pass through or are stored on our servers.

Communications: emails you send us and the related support history.

Device and log information: sign-in sessions, IP address, device and browser type, operating system, error logs and security audit logs.

We do not collect precise location data.

3. How we use information and legal bases

To provide the Service (saving projects, generating visuals and exports, verifying sign-ins): performance of our contract with you.

Billing, Credits grants and deductions, refunds and disputes: performance of contract and our legal tax and accounting obligations.

Customer support: performance of contract.

Account security, fraud and abuse prevention: our legitimate interests.

Improving the product (based on error logs and aggregated statistics): our legitimate interests.

Complying with laws, court orders or authority requests: legal obligation.

Marketing messages: only with your explicit consent (we do not currently send any).

4. Cookies and local storage

We only use strictly necessary cookies or local storage to keep you signed in and remember your language and theme preferences. These cannot be switched off without breaking the Service.

We do not use third-party analytics, functional or advertising cookies, or cross-site advertising trackers. If we add any, we will update this policy first and ask for your consent where the law requires.

Anonymous usage statistics: to understand which pages are visited and how many people reach the purchase step, this website and the Service record page views and clicks on key interface elements such as the sign-up and purchase buttons, together with a random visitor ID kept in local storage, the page name and a coarse device type (desktop, mobile or tablet) and browser family. We do not use cookies for this, do not store IP addresses or full browser identifiers, and do not fingerprint devices. On the Service, events from a signed-in session are linked to your account; events on this website are never linked to an account. Raw events are deleted after 180 days and only daily totals are kept. Statistics are not collected when your browser sends a Global Privacy Control (GPC) signal, and you can switch them off under “Interface and region” in your account console.

5. Sharing

We do not sell your personal information.

Payment processor: purchases are processed by Waffo Pancake acting as Merchant of Record. As a PCI-DSS compliant processor it handles card data exclusively and processes payment data under its own privacy policy, sharing only order and refund status with us.

Infrastructure and communications providers: cloud storage, database hosting, SMS and email delivery providers, processing data on our instructions only as needed to operate the Service.

Legal reasons: we disclose necessary information when required by law, court order or a lawful request from an authority, or to protect our rights and the rights of others.

Business transfers: if the Service is merged or transferred, personal information may be transferred with it, and the recipient must continue to honor this policy.

6. Security

We protect data with TLS/HTTPS on every connection, store only hashes of verification codes and session credentials, keep your content in private storage that requires a valid session, and apply access controls and audit logging to administrative actions.

No internet transmission is completely secure. If a personal data breach is likely to affect you, we will notify you without undue delay after discovering it, and report it to the competent authority within 72 hours where the law requires.

7. Retention

Account information and content: kept while your account is active; after you delete your account we stop using it immediately and delete or anonymize it within 90 days.

Transaction records: kept for the period required by tax and accounting laws, then deleted.

Support correspondence: kept for 2 years after the issue is resolved.

Security and audit logs: kept for 12 months.

8. Your rights

Subject to applicable law, you have the right to access your personal information, correct it, delete it, restrict its processing, receive a portable copy, object to processing based on legitimate interests, withdraw consent at any time, and lodge a complaint with your local data protection authority.

You can edit your profile, delete projects or delete your account in your account center; for other requests, email support@moorscore.cn. We will respond within 30 calendar days.

9. Marketing communications

We do not currently send marketing emails or text messages. If we do in the future, we will only send them after you opt in, every message will include a way to unsubscribe, and you can also opt out in your account center or by emailing us.

Verification codes, billing, refund and security notices are necessary service messages and are not affected by marketing opt-outs.

10. International transfers

Our payment processor and some infrastructure providers may process data outside your country or region. We rely on safeguards recognized by applicable law, such as Standard Contractual Clauses, to keep it protected.

11. Children

The Service is not directed to children under 13 (or the higher minimum age set by the law where you live, such as 16 in parts of the EU), and we do not knowingly collect their personal information. Users aged 13 to 18 may use the Service only with the consent of a parent or guardian; see section 1 of the Terms of Service. If you believe a child has provided us information, contact us and we will delete it.

12. Third-party links

The Service may link to third-party websites or services, such as the checkout page. Their handling of your information is governed by their own privacy policies, not this one.

13. Changes to this policy

When we update this policy we update the version and effective date at the top of this page and keep earlier versions on file. We will notify you of material changes on this page or by email at least 15 days before they take effect.

This policy is available in several languages. If the versions differ, the English version prevails.

14. Contact

For privacy questions or to exercise your rights, email support@moorscore.cn with “Privacy” in the subject line.