Privacy Policy

1. Information We Collect

We collect the following types of information when you use our Services:

• Email and name — provided when you create an account, subscribe to our mailing list, or make a purchase.
• Usage data — standard web analytics including pages visited, session duration, browser type, and referring URLs.
• Machine fingerprint hashes — one-way hashed identifiers derived from your hardware configuration, used solely for software license activation and enforcement. We do not store raw hardware identifiers.
• Payment data — processed directly by Stripe. We receive only transaction confirmation details; full payment card numbers are never stored on our servers.

2. How We Use Your Information

• Authentication — to verify your identity and manage your account.
• Licensing — to activate and validate software licenses across your devices.
• Analytics — to understand how our products and website are used so we can improve them.
• Community features — to power preset sharing, leaderboards, and token rewards.
• Communications — to send transactional emails (receipts, license keys) and, with your consent, marketing updates.

3. Data We Share

We never sell your personal data. We share data only with the following service providers, each bound by data processing agreements:

• Stripe — payment processing. Stripe receives your payment details directly.
• Resend — transactional and marketing email delivery.
• Analytics providers — aggregated, anonymized usage data to help us improve the platform.
• Vercel — website hosting. Standard web server logs may be collected.

4. Data Retention

• Financial records — retained for 7 years as required by tax and accounting law.
• Account data — retained while your account is active. On account deletion, personal data is removed within 30 days except where retention is required by law.
• GDPR erasure requests — personal data is anonymized or deleted within 30 days. Financial records required by law are retained but stripped of personally identifiable details where possible.

5. Your Rights

Under the GDPR and similar privacy regulations, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate data.
• Erasure — request deletion of your data (“right to be forgotten”).
• Portability — request your data in a structured, machine-readable format. You can also export your data at any time via /account/data.
• Withdraw consent — at any time, for consent-based processing (e.g., marketing emails).

To exercise any of these rights, contact us at hello@nocturnaudio.com. We will respond within 30 days.

6. Cookies and Tracking

We use the following types of cookies:

• Session cookies — essential for authentication and keeping you logged in. These expire when you close your browser or after a set period.
• Analytics cookies — used to understand usage patterns and improve the platform. These are anonymized where possible.

We do not use third-party advertising or retargeting cookies.

7. Children's Privacy

Our Services are not directed to individuals under the age of 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected such data, please contact us at hello@nocturnaudio.com and we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. For material changes, we will notify you by email where required by law.

9. Contact

For any privacy-related questions, requests, or complaints, contact us at hello@nocturnaudio.com.

Nocturn Audio LLC