PRIVACY POLICY Last Updated: 2026-01-27
The controller responsible for processing your personal information is: Your Company Name Your Street Address City, Postal Code Country Email: [email protected]
We collect and process the following user records: - Email address (for account registration and authentication) - Password (secure salted hashing via bcrypt) - Payment information (processed securely through Stripe; no credit card numbers stored on our servers) - IP address, browser type and device telemetry - Audio files (temporary processing storage, automatically deleted after 20 minutes)
We process your information based on: - Article 6(1)(b) GDPR (contract performance) - Article 6(1)(f) GDPR (legitimate interests) - Article 6(1)(a) GDPR (consent)
- Providing the audio mastering service - Processing payments and subscriptions - Customer support and technical assistance - Service reliability and platform performance - Security, abuse prevention and chargeback or fraud defense
We only share necessary records with: - Stripe (payment processing, PCI-DSS compliant) - AWS SES (transactional email delivery) - Cloud hosting providers We do not sell your personal details to third parties.
- Audio files: automatically deleted after 20 minutes - Account records: retained as long as your account is active - Payment history: 7 years (legal and tax retention requirement per statutory EU regulations) - Webhook events: 7 days for audit purposes, then automatically purged - Deleted accounts: personal information removed within 30 days - Payment history: anonymized upon account deletion (email replaced with anonymous identifier) while maintaining financial records for statutory accounting requirements - Dispute, anti-fraud and chargeback evidence: retained as needed for legitimate interests, legal defense and financial compliance
You have the right to: - Access (Article 15 GDPR) - Request a copy of your records - Rectification (Article 16 GDPR) - Correct inaccurate information - Erasure (Article 17 GDPR) - Request account deletion with identity anonymization - Restriction of processing (Article 18 GDPR) - Portability of records (Article 20 GDPR) - Export your account information - Object (Article 21 GDPR) - Object to processing based on legitimate interests - Lodge a complaint with a supervisory authority When you delete your account: - Your email address and personal profile are removed immediately - Payment history is anonymized (email replaced with 'deleted-user-[ID]@anonymized.local') - Payment records are retained for 7 years as required by financial law but cannot be linked back to you Contact for exercising your rights: [email protected]
We use: - Essential cookies (authentication and CSRF protection) - Functional cookies (user preferences) You can manage cookies in your browser settings.
We implement technical and organizational measures to protect your information: - TLS/HTTPS encryption - Encryption of sensitive credentials - Access controls and role separation - Regular security updates
You have the right to lodge a complaint with a regulatory supervisory authority. List of authorities: https://edpb.europa.eu/about-edpb/board/members_en