Privacy Policy
Last updated 29 July 2026
The short version. Prompt2Score has no accounts and no login. It does not store your scores, and it never sees your ChatGPT conversation — only the music ChatGPT sends it to engrave. Nothing is kept after your request is answered.
Who we are
Prompt2Score is a ChatGPT app operated by Granite Labs. It turns requests in plain language into engraved musical scores. It is an independent product built on OpenAI’s platforms and is not affiliated with, or endorsed by, OpenAI.
Contact: support@granitelabs.dev
What we receive
When you ask ChatGPT for music, ChatGPT calls Prompt2Score with the musical content it has composed, plus a small amount of technical context. Specifically:
| What | Why |
|---|---|
| The musical score to engrave (notes, instruments, tempo, lyrics if any) | To validate and engrave it, which is the whole service |
| An anonymised identifier supplied by ChatGPT | To apply fair-use limits, so one heavy user cannot exhaust the service for everyone. It is generated by ChatGPT, tells us nothing about who you are, and we store it only as a one-way hash |
| Your language preference | To answer in French or English |
| Your network address | Rate limiting, to keep the service available. Not stored beyond the rate-limit window |
What we do not receive, and do not keep
- Your ChatGPT conversation. We receive only the arguments of the tool call ChatGPT makes. We cannot see the rest of the discussion.
- Your name, email address, or any account details. There is no account.
- Payment details. The app is free and takes no payment.
- Your scores, after the fact. A score is held in memory only long enough to answer follow-up requests in the same conversation, and is lost when the service restarts. There is no database of scores and nothing is written to disk except the rendered image, which is cached by its content and cannot be traced back to you.
- Advertising or analytics trackers. There are none, on this site or in the app.
Legal basis
Granite Labs is operated from Thailand and is subject to the Thai Personal Data Protection Act. Where the GDPR applies to you as a user in Europe, our processing rests on legitimate interest: delivering the score you asked for, and keeping the service available and free from abuse. Under either regime the answer is the same, because there is very little to process: no account, no stored scores, and no profile of you anywhere.
We process no special categories of data and take no automated decisions about you.
How long we keep things
| What | How long |
|---|---|
| The score you asked for | In memory only, for the conversation. Lost on restart |
| Rendered images (cached by content) | Until the cache is cleared. They contain no identifier |
| Fair-use counters | The current calendar month |
| Technical logs | 30 days. They never contain the content of a score |
That last point is enforced in code rather than by policy: the logger has a list of fields it always redacts, and score content is on it.
Who else is involved
- OpenAI — operates ChatGPT, where the app runs
- Hostinger — runs the virtual server, in Germany (European Union)
We do not sell data, and we share none of it for advertising.
Your rights
You have the right of access, rectification, erasure, restriction, portability and objection. In practice there is very little to exercise them against: with no account and no stored scores, we hold nothing that identifies you. If you believe we do, write to support@granitelabs.dev and we will answer within 30 days. You may also complain to your national data protection authority.
Children
Prompt2Score is not directed at children under 13, and we knowingly collect nothing from them. Access is governed by ChatGPT’s own terms.
Changes
If this policy changes materially, the date above changes and, where the change affects how data is handled, we will say so on this page before it takes effect.