PRIVACY POLICY

1. Introduction

Neon DSP Oy ("we", "us", or "our"), a company registered in Finland, operates the neondsp.com website and provides audio plugin software products. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or purchase our products.

We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Full name
• Company name (optional)
• Phone number (optional)
• Billing address

2.2 Payment Information

When you make a purchase, payment processing is handled by Stripe. We do not store your credit card details on our servers. Stripe may collect payment card information, billing address, and other information necessary to process your payment. Please refer to Stripe's Privacy Policy for more information.

2.3 License and Activation Data

To activate and manage your software licenses, we collect:

• License keys associated with your purchases
• Machine fingerprint (a unique identifier for your computer)
• Machine name (e.g., "John's MacBook Pro")
• Activation timestamps

This data is necessary to enforce license terms and prevent unauthorized use of our software.

2.4 Support Requests

When you submit a support ticket, we collect your name, email address, the content of your message, and any attachments you provide.

2.5 Automatically Collected Information

When you visit our website, we may automatically collect certain information, including:

• IP address
• Browser type and version
• Device type
• Pages visited and time spent
• Referring website

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Process transactions and send purchase confirmations
• Deliver and activate software licenses
• Provide customer support
• Send transactional emails (order confirmations, license information, password resets)
• Send marketing communications and newsletters (only if you have subscribed; you can unsubscribe at any time)
• Analyze website usage to improve our services
• Prevent fraud and enforce our terms of service
• Comply with legal obligations

4. Legal Basis for Processing (GDPR)

Under the GDPR, we process your personal data based on the following legal grounds:

• Contract: Processing necessary to fulfill our contract with you (e.g., delivering purchased products, managing your account)
• Legitimate Interests: Processing necessary for our legitimate business interests (e.g., fraud prevention, improving our services)
• Consent: Processing based on your consent (e.g., marketing emails)
• Legal Obligation: Processing necessary to comply with legal requirements

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Keep you signed in to your account
• Remember your preferences
• Analyze website traffic and usage patterns
• Measure advertising effectiveness

Types of Cookies We Use

• Essential Cookies: Required for the website to function properly (e.g., authentication)
• Analytics Cookies: Help us understand how visitors interact with our website (e.g., Google Analytics)
• Marketing Cookies: Used to deliver relevant advertisements (e.g., Meta Pixel)

You can control cookies through your browser settings. Note that disabling certain cookies may affect website functionality.

6. Third-Party Services

We use the following third-party services that may collect and process your data:

• Stripe: Payment processing
• Supabase: Database and authentication services
• Google reCAPTCHA: Spam and abuse protection
• Google Analytics / Tag Manager: Website analytics
• Meta (Facebook) Pixel: Advertising measurement

These services have their own privacy policies governing how they handle your data.

7. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

• Service Providers: Third-party companies that help us operate our business (payment processors, hosting providers)
• Legal Requirements: When required by law, court order, or governmental authority
• Business Transfers: In connection with a merger, acquisition, or sale of assets

8. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

9. Data Retention

We retain your personal data as follows:

• Account Data: Retained while your account is active and deleted upon request
• Order and License Data: Retained indefinitely to provide ongoing license validation and support, and for legal and accounting purposes
• Support Tickets: Retained for a reasonable period to provide customer service
• Marketing Data: Retained until you unsubscribe or request deletion

10. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data (subject to legal retention requirements)
• Restriction: Request that we limit how we use your data
• Portability: Request your data in a portable format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, please contact us at support@neondsp.com.

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, secure server infrastructure, and access controls. However, no method of transmission over the Internet is 100% secure.

12. Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi) or another supervisory authority in the EU.