Privacy Policy

What we store

When you buy a plugin

• The email address you paid with, your name if Paddle passes it on, and your country.
• The order: what you bought, when, the amounts, and Paddle's transaction reference.
• The activation code from your copy of the plugin and the licence issued to it, so the licence can be sent again and moved to another computer later. A record is kept of each move.

When you ask for a trial

• The email address you gave, which plugin and system you asked for, and when the download link we sent was used — so the link reaches a real person and we can count downloads.

Accounts

New accounts are not currently being opened. For an account that already exists we keep the email address, the name if one was given, and a cryptographic hash of the password — never the password itself.

In every case

• Server logs, including IP addresses, kept for security and troubleshooting.
• Messages you send through the contact form, so we can answer them.

Payments

We never see or store your card details. Payments are handled by Paddle, which acts as merchant of record and is a separate controller for the payment data it collects. We receive only what we need to deliver your purchase: that a payment succeeded, which product, and the email address the licence is delivered to.

Why we store it, and on what basis

• To deliver what you bought — issuing the licence, sending it again, moving it to another computer. Basis: performance of our contract with you.
• To keep accounts and tax records — the order details. Basis: our legal obligation to keep accounting records.
• To send trial downloads — a trial link that reaches a real person. Basis: our legitimate interest in offering trials without abuse, and your request.
• To keep the site secure — logs, failed sign-in tracking, request limits. Basis: our legitimate interest in preventing abuse.
• To answer you — contact form messages. Basis: our legitimate interest in responding.

We do not sell your data, and we do not use it for advertising or profiling. We do not use anything you upload to train anything.

How long we keep it

• Purchases and licences: for as long as the licence exists — it is perpetual, and the record is what lets us send it again or move it for you. Order details stay for as long as accounting and tax law requires.
• Trial requests: kept so we can see that a link was used by one person and answer questions about it. Ask us and we will delete yours.
• Accounts: until you ask us to close one.
• Server logs: a short rolling window, then overwritten.

Where it is processed

The site, the store and the licence records are hosted on servers in the European Union.

The plugins themselves process audio on your own computer; nothing from them reaches us.

Who else sees it

We do not sell or share your data.

Running the site needs a hosting provider for the servers, a network provider for traffic, an email provider to deliver our messages, and an analytics provider to count visits to the public pages (see Cookies below). Payments go through Paddle as merchant of record, which is why its name is on your receipt. Nothing goes to advertisers or data brokers.

We will disclose data where the law requires it, or to establish or defend a legal claim.

Cookies

We set one cookie of our own: a session cookie that keeps a signed-in account signed in. It is marked HttpOnly and Secure, so it cannot be read by scripts and is only sent over an encrypted connection. It expires when your session does, or when you sign out. If you never sign in, we set none.

Paddle's checkout sets its own cookies while it is open; those are Paddle's and are covered by its privacy policy. Product demo videos are hosted on YouTube and load only when you press play, through YouTube's privacy-enhanced player; from then on YouTube's privacy policy applies.

We count visits to our public pages (the home page, FAQ, contact, the legal pages, and the buy and licence pages) with PostHog's EU cloud. This uses no cookies and stores nothing on your device. Each page view sends PostHog the address of the page (without anything after the question mark except campaign tags such as utm_source), if you arrived by clicking an ad, the name of the ad platform (never the identifier it adds to the link), the site you came from, your browser's user-agent string, and a random number that exists only until you reload the page, with the browser, system and device type read from that string; PostHog works out your approximate location (country and city) from the connection. We also record steps on the way to a purchase, such as pressing Buy or requesting a trial, together with the campaign or ad platform that brought you to the site. Nothing is counted on signed-in pages, and nothing is counted if your browser sends Do Not Track or Global Privacy Control. We use no advertising cookies and no trackers beyond this.

Your rights

If you are in the European Union or the United Kingdom, you have the right to:

• See what we hold about you, and receive a copy.
• Have inaccurate data corrected.
• Have your data deleted.
• Receive your data in a portable format.
• Object to processing based on legitimate interest, and to restrict processing while an objection is considered.
• Withdraw consent where processing relies on it.

Write to support@neodubstudio.com and we will respond within one month.

If you believe we have handled your data wrongly, you may complain to the data protection authority in the country where you live.

Security

Connections to the site are encrypted. Passwords are stored as bcrypt hashes and are never recoverable, by us or anyone else. Repeated failed sign-in attempts are throttled. Access to the servers is by cryptographic key only; password login is disabled.

No system is perfectly secure. If we become aware of a breach that puts your rights at risk, we will tell you and the relevant authority as the law requires.

Children

The site is not intended for anyone under 16, and we do not knowingly hold their data.

Changes

If we change this policy materially we will say so on this page and, where we have your email address for a purchase, tell you before the change takes effect. See also the Terms of Service.