The short version
- We collect what we need to run your account and the lessons: your name, email, quiz answers, learning progress, and payment records. We never see or store your full card number.
- We use cookies for login, for remembering your choices, and, only with your consent, for analytics and advertising measurement. You choose in the cookie banner and can change your mind any time.
- We do not sell your personal information, and we do not share it with anyone except the services that help us run the site.
- Questions you ask the AI guitar assistant are sent to an AI provider to generate the answer. Please keep personal details out of them.
- You can see, correct, download, or delete your data at any time. Deleting your account removes your data after a 30-day grace period.
This summary is here to help you read the page. The full wording below is what applies.
1. Who is responsible for your data
Rock Guitar Power is a trading name of Medurik Corporation, which is the “controller” of your personal information for the public website at rockguitarpower.com, the members site at lessons.rockguitarpower.com, our emails, and the AI guitar assistant. For anything about privacy, email support@rockguitarpower.com. We are a small business and do not have a separate data-protection officer; privacy requests go to the owner directly.
2. What we collect
Things you give us
- Account details: your name, email address, and password (stored only as a one-way hash).
- Skill quiz answers: your playing level, goals, and interests, which we use to pick your free course and the lessons we suggest.
- Purchase and membership details: what you bought, when, for how much, your membership status, and the last four digits and card brand that Stripe or PayPal report back to us. Your full card number and security code go straight to Stripe or PayPal and never touch our servers.
- Messages: anything you send through the contact form, by email, or in a support request.
- AI questions: the questions you type into the AI guitar assistant and the answers it gives.
- Email preferences: what you have subscribed to or unsubscribed from.
Things collected automatically
- Learning activity: which lessons you open, finish, and mark complete, so your dashboard shows your progress and we can suggest what to do next.
- Device and usage data: browser type, device type, screen size, pages visited, time on page, the page you came from, and the links you clicked, including any campaign tags (such as UTM parameters) in the link that brought you here.
- IP address: used briefly for security, to prevent abuse, and to work out your rough region. For the public AI assistant we store only a one-way hashed version of your IP address, to count the free questions used each day; the real address is not stored.
- Email engagement: whether our emails were delivered, opened, clicked, bounced, or marked as spam, reported to us by our email provider.
- Cookies and similar technologies: see section 5.
We do not ask for, and please do not send us, sensitive information such as health details, government ID numbers, or payment details by email.
3. How we use it
- To run the service: create and secure your account, give you access to the courses you are entitled to, track your progress, process payments and refunds, and send receipts and account notices (trial and renewal reminders, cancellation confirmations, password resets).
- To personalise: choose your free course from your quiz answers, suggest lessons, and tailor the tips we email you to your level.
- To answer you: reply to support messages and AI assistant questions.
- To tell you about lessons and offers, only where you have signed up for them, and always with an unsubscribe link.
- To understand and improve the site: see which pages, lessons, and emails are helpful, fix problems, and test improvements.
- To measure advertising, where you have consented to advertising cookies, so we know whether an ad brought you here (section 5).
- To keep things safe and legal: prevent fraud, abuse, and account sharing, enforce our Terms of Service, keep tax and accounting records, and respond to lawful requests.
4. Our legal grounds (for visitors in the UK, EU, and similar places)
- Performing our contract with you: account, lessons, payments, receipts, support.
- Your consent: analytics and advertising cookies, marketing emails, and the free course from the quiz. You can withdraw consent at any time.
- Our legitimate interests: keeping the site secure, preventing fraud, understanding how the site is used, and sending account-related emails. We balance these against your rights.
- Legal obligations: tax, accounting, and responding to lawful requests.
7. The AI guitar assistant and your privacy
- Your question, together with matching passages from our lesson transcripts and blog posts, is sent to OpenAI to generate the answer. We do not send your name or email with it.
- On the public website the assistant allows 10 free questions per visitor per day, counted with a one-way hash of your IP address. Members are identified by their login instead and are not limited.
- We keep questions and answers so we can improve the assistant, spot abuse, and review the quality of its answers. Please do not include personal, financial, or health information in your questions.
8. Emails and your choices
- Account emails (receipts, trial and renewal reminders, cancellation confirmations, password resets, important notices) are part of the service and are sent to every member.
- Lessons, tips, and offers are sent only if you signed up for them, for example by taking the skill quiz or joining the newsletter. Every such email has an Unsubscribe link and an Email Preferences link, which let you stop one series or everything. Unsubscribe requests take effect right away.
- Our emails record whether they were opened and which links were clicked, so we can stop sending what you do not read. We use industry-standard email authentication (SPF, DKIM, DMARC) to protect you from fake emails pretending to be us.
9. How long we keep things
- Your account and learning progress: for as long as your account exists. If you delete your account, it is scheduled for deletion and permanently removed after a 30-day grace period (during which you can change your mind by emailing us).
- Payment and refund records: kept for 7 years after the transaction, because tax and accounting law requires it, even if you delete your account. They are kept separate from your learning data.
- Quiz answers and email history: for as long as you are a subscriber or member, and then removed with your account. If you unsubscribe, we keep your email address on a suppression list so that we do not accidentally email you again.
- Analytics data: retained by Google Analytics for up to 14 months and then aggregated.
- AI assistant questions: up to 24 months, then deleted or anonymised.
- Backups: deleted data drops out of our backups within 90 days.
10. Your rights and how to use them
Wherever you live, you can:
- See and update your name, email, and password in your account settings on the members site.
- Ask for a copy of the personal information we hold about you, in a portable format.
- Correct anything that is wrong.
- Delete your account yourself from account settings (Delete account), or ask us to. Deleting cancels any active membership immediately.
- Stop marketing emails with the unsubscribe link, or by emailing us.
- Change your cookie choices from the Cookie Preferences link in the footer.
- Object to or restrict processing based on our legitimate interests, and withdraw consent at any time (without affecting what was done before).
California and other US state residents
You have the right to know what personal information we collect, use, and share, to delete it, to correct it, and not to be treated differently for exercising these rights. We do not sell personal information and do not share it for cross-context behavioural advertising except through the advertising cookies you can decline in the cookie banner; declining them, or turning on Global Privacy Control in your browser, is how to opt out.
UK, EU and EEA residents
You have the rights listed above under the GDPR. If you think we have not handled your data properly, please tell us first; you also have the right to complain to your local data-protection authority.
To use any of these rights, email support@rockguitarpower.com from the address on your account (or tell us how we can confirm it is you). We respond within 30 days, usually much sooner, and we never charge for a reasonable request.
11. Children
The site is for people aged 13 and over. We do not knowingly collect personal information from children under 13. If you are under 18, please ask a parent or guardian before creating an account or taking the quiz; the parent or guardian must be the one who pays for a membership. If you believe a child under 13 has given us personal information, email support@rockguitarpower.com and we will delete it.
12. How we protect your information
- Everything travels over encrypted connections (HTTPS), and data is encrypted at rest by our hosting providers.
- Card payments are handled by Stripe and PayPal, which are certified to the PCI DSS security standard; card numbers never reach our servers.
- Passwords are stored only as one-way hashes. IP addresses used for the AI question limit are stored only as one-way hashes.
- Access to customer data is restricted to the owner and the systems that need it, protected by two-factor login, and recorded.
- Our databases use row-level security so that one member’s data is never visible to another.
No system is completely secure. If we ever discover a breach that affects your personal information, we will tell you and the relevant authorities as the law requires.
13. Where your data lives
Medurik Corporation is based in the United States, and our providers store data mainly in the United States. If you use the site from outside the US, your information is transferred there. For visitors from the UK, EU, and EEA we rely on our providers’ standard contractual clauses and, where available, the EU-US Data Privacy Framework, to protect your data to the standard required at home.
14. Changes to this policy
We may update this policy as the site changes. The “last updated” date at the top always shows the current version. If a change would materially affect how we use your personal information, we will email members before it takes effect.
This policy is effective October 3, 2026 and was last updated October 3, 2026. It replaces all earlier versions.
Questions?
Email support@rockguitarpower.com. Messages come straight to Mike and are normally answered within one business day. Rock Guitar Power is operated by Medurik Corporation.