Privacy and copyright

Who runs Sanjola

Sanjola is designed and run by ęxaucæ. For a question about your data or about a song, write to us: the same team answers.

What we keep

Only what a choir needs to run:

• Your account: name, e-mail address, password (stored in an encrypted form nobody can read back), language, theme, and your photo if you add one. With “Continue with Google”, Google sends us only your name and e-mail address.
• Your choir: name, short name, church, parish, city, country, time zone, logo, banner, links to your social pages, and the plan you chose.
• Members: name, e-mail, phone, voices, instruments, responsibilities, role, dates joined and left, and date of birth if given (only the singer and the leaders see it, in the edit form). A leader can add a singer who has no account; they do so on that singer's behalf and need their agreement.
• Songs: title, composer, arranger, lyrics, key, tags, and attached files (recordings, scores, images).
• Services and events: dates, places, programmes, people assigned and attendance.
• Technical logs (IP address, page requested, time), to keep the service running and block abuse.

Who sees what

A choir is private. Only people who have joined it can open it, each according to their role.

All members

The repertoire and its files, the calendar, the programmes, the member list with voices, and the attendance history.

Each member

Sees their own e-mail and phone, and picks their own voices and instruments.

Owners and admins

Also see every member's e-mail and phone. They manage members, invitations and settings, and, depending on the plan, Excel import and export.

Director and secretary

Prepare programmes and repertoires, and take the roll.

Editing a song

The person who added it and the choir's admins.

Your personal library

Only you.

Visitors without an account

Nothing, unless the choir has opened its public page (see below).

The Sanjola team

Does not open your choir's content, except to fix a problem you report to us, to record a payment, or when the law requires it.

The public page

It stays closed until an admin opens it in the choir's settings, and they can close it again at any time.

Once open, it shows anyone: the choir's name and description, logo, banner and links; the song list with details and lyrics; services and events, with their programme and the people assigned; the member list with names, photos, voices, instruments and responsibilities.

It does not show files (recordings and scores), attendance, e-mail addresses or phone numbers.

Your files

Recordings, scores and images are stored with our cloud provider and pass through Sanjola to be shown. A recording is only downloaded when someone presses play.

Each file has a long link that cannot be guessed. But anyone who is given that link can open the file without an account: share it only inside the choir.

Songs, scores and copyright

What you add stays yours, or its authors'. Sanjola claims no rights over your songs, scores or recordings: we store them and show them only to the people you chose.

Sanjola does not check rights. Whoever adds a score, a recording or lyrics must be allowed to, for example:

• a work in the public domain;
• a work written or recorded by the choir;
• permission from the author or publisher;
• a licence held by your church, diocese or federation.

A score bought for the choir does not always come with the right to make digital copies. When in doubt, keep it on paper and note only its title and reference in Sanjola.

Lyrics appear on the public page when it is open. Leave there only lyrics you are allowed to publish.

Are you the author or publisher of a work uploaded without your consent? Write to us with the work and the choir: we remove it once checked and let the choir know.

What we do not do

• No advertising.
• No selling or renting of your data.
• No tracking: we count visits with a cookie-free audience-measurement tool that is not used to identify you.
• No promotional e-mails: we only write about your account (confirmation, password, invitation).

Our providers

A few services help us run Sanjola. Each receives only what it needs for its job:

• cloud providers, for the server, the database and the files;
• a cookie-free audience-measurement tool, to count visits;
• an e-mail delivery service, for confirmations, password resets and invitations;
• Google, only if you choose “Continue with Google”.

Payments happen outside the app (Mobile Money, cash or bank transfer). Sanjola records only the choir's plan and its renewal date.

Cookies

Sanjola uses only the cookies it needs: your sign-in, “Remember me”, your language and the last choir you opened. Your theme (light or dark) stays in your browser. No advertising cookies.

How long, and how to erase

We keep your data as long as your account or your choir exists.

• You can leave a choir at any time from your member page: your line leaves the list, together with your attendance.
• An admin can remove a member from the choir, with the same effect.
• The owner can delete the choir: its songs, files, repertoires, events and attendance are erased.
• If a paid plan is not renewed, nothing is erased: the choir goes back to the free plan.
• To delete your account, write to us from its e-mail address. We first tell you what goes with it, then we erase it.

Your rights

You correct your name, photo, language, voices and instruments yourself, in your profile and on your member page. For a copy of your data, or to have it corrected or erased, write to us.

Security

Sanjola only runs over an encrypted connection (HTTPS). Passwords are encrypted, repeated sign-in attempts are slowed down, and each choir sees only its own data. No service is 100% safe: if an incident affects your data, we will tell you.

Children

Some choirs include children. Leaders who add them need their parents' agreement and should fill in only what is useful. On the public page a child appears like any other member (name, photo, voices): keep that in mind before opening it.

Changes

When this page changes, the date at the top changes too.