Privacy Policy

1. Information We Collect

We collect only the information needed to operate accounts, purchases, and product delivery, including:

• Account profile data (name, email address, password hash, login provider)
• Authentication/session data (session IDs, IP address, user agent, sign-in timestamps)
• Purchase and subscription records (email, order/subscription IDs, entitlement/license data)
• Billing details needed for invoices and fraud controls (such as billing name/address)
• Communications data (support emails, newsletter subscription status, unsubscribe status)

We also collect limited technical information to run and secure the service:

• Cookieless analytics events via Umami (page paths, referrer, browser/device metadata)
• Error/diagnostic reports via Firefly (Sentry-compatible), including stack traces and app context
• Download/license abuse-prevention logs such as truncated IP data and machine activation metadata

We do not run third-party ad networks, behavioral advertising profiles, or data-broker enrichment.

2. Legal Bases (GDPR/UK GDPR)

When applicable, we process personal data under one or more of these legal bases:

• Contract performance (account access, purchases, subscriptions, product delivery)
• Legitimate interests (security, fraud prevention, debugging, service reliability)
• Consent (for optional newsletter or marketing communications where required)
• Legal obligations (tax, accounting, consumer protection, and law-enforcement requests)

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process purchases, subscriptions, refunds, and account-related transactions
• Send technical notices, updates, and support messages
• Respond to support requests and account-security events
• Monitor product usage trends via cookieless analytics (Umami)
• Detect, prevent, and diagnose technical issues (Firefly/Sentry-compatible error tracking)
• Comply with legal obligations

We do not sell personal data or use personal data for third-party advertising resale.

4. Information Sharing

We do not sell personal information. We share data only with service providers needed to run the business. The current list of sub-processors is published at /processors. We may also disclose information:

• To comply with legal obligations or respond to lawful requests
• To protect the rights, property, and safety of Three Sevens Creative LLC, our users, or others
• In connection with a merger, sale, or acquisition of all or part of our business
• With your explicit consent or at your direction

Analytics and error tracking may be self-hosted or hosted by our vendors depending on deployment. We configure these services to minimize data collection.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain data only as long as needed for account operation, security, legal compliance, and legitimate business purposes. Retention periods vary by data category. Financial records may be retained longer to satisfy tax/accounting requirements. When data is no longer needed, we delete it or anonymize it.

7. Cookies and Tracking Technologies

We use essential authentication/session cookies to keep you signed in and secure account flows. We do not run ad-tech or cross-site tracking cookies.

• Umami analytics is configured as cookieless analytics
• Firefly/Sentry-compatible error tracking is configured for diagnostics, not advertising
• Optional third-party checkout providers may use their own cookies within their checkout flows

Because we do not store data on your device for analytics or marketing (no analytics cookies, no localStorage, no fingerprinting) and our session cookies are strictly necessary, we do not display a consent banner. If we ever introduce non-essential tracking, we will add consent controls where required.

8. Your Rights

Depending on your location, you may have certain rights regarding your personal information:

• Access and portability: Download a complete JSON copy of your account data from Settings → "Export Your Data"
• Deletion: Permanently delete your account from Settings → "Delete Account"
• Correction: Update your name and email from your account settings
• Opt-out: Unsubscribe from marketing emails using the link in any email
• Objection or other rights: Contact us at the address below

To exercise rights not available in-product, contact [email protected]

9. Third-Party Services

We use payment, email, and infrastructure vendors to operate the service. Those providers process data under their own terms and privacy notices. We do not receive full payment card data.

Our services may contain links to third-party websites. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing them with your information.

10. International Data Transfers

Your information may be processed in countries outside your own, including the United States. Where required, we use contractual and organizational safeguards for cross-border transfers.

11. California Privacy Rights

If you are a California resident, you may have rights to know, access, delete, and correct personal information we collect, subject to legal exceptions. We do not sell personal information.

12. Children's Privacy

Our services are not directed to children under 13, and we do not knowingly collect personal information from children under 13.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of our services after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy, please contact us at [email protected] or visit our contact page.

Lucky Audio is a brand of Three Sevens Creative LLC.