Privacy Policy

Effective Date: January 1, 2026
Last Updated: September 22, 2026

1. Introduction

This Privacy Policy describes how Neutral & Natural Audio ("we," "us," or "our") collects, uses, and protects your personal information when you use this website or our software products.

The data controller is Jean-Pierre Baroni, sole trader trading as Neutral & Natural Audio, 21 Quai Jean Jaurès, 84800 L'Isle-sur-la-Sorgue, France, SIREN 752 775 015, reachable at support@neutralandnaturalaudio.com. Full publisher details are in the Legal Notice.

We are committed to protecting your privacy and ensuring transparency about our data practices. This policy explains what information we collect, why we collect it, and your rights regarding your personal data.

2. Data We Collect

We collect minimal personal information necessary to operate our licensing system and provide customer support:

2.1 Information You Provide

• Email Address: Collected when you purchase or register a license, used for license validation and customer communications.

2.2 Information Automatically Collected

• Machine Identifier: A unique hardware-based identifier generated from your computer's hardware configuration. This is used to enforce the 2-machine activation limit per license.
• IP Address: Temporarily collected during license validation requests for rate limiting and security purposes. IP addresses are not permanently stored in our database.
• Anonymous first-launch events: PHON 1.0.13 and later report at most five events per session: that the app started, whether the macOS permissions were granted, which kind of source was chosen, that an audio device opened, and that sound reached an output. Each carries the machine identifier described above, the macOS and app versions, and one line of detail such as sr=48000 buf=128. They carry no audio, no file name, no project name and no email address. They exist for one reason: without them, a trial that failed and a trial that was never opened are indistinguishable to us. You can refuse them at any time in the app, from the Settings menu, Send Anonymous Usage Events. The legal basis is our legitimate interest in knowing whether the software works for the people who install it.

2.3 Information We Do Not Collect

We do not collect:

• Audio content or project files
• Behavioural tracking or profiling inside the software: no session recording, no trail of what you click, nothing that follows how you work. The five events described in section 2.2 are the whole of what PHON reports, they can be refused in the app, and AudioBridge and NNA Virtual Audio report nothing at all
• Browsing history or behavior outside the Software
• Personal information beyond what is listed above

Website visits are counted only if you accept analytics on the cookie banner, as described in section 6.4.

2.4 Information You Choose to Send Us

• Contact form. The name, email address and message you send from the support page reach us through Formspree and are kept only as long as needed to answer you and to keep a record of the exchange, up to 3 years.
• Release news. If you tick the box on the download page, your email address is added to our release-news list at Brevo and used only to announce new versions. Every email carries an unsubscribe link, and unsubscribing deletes the address from the list.
• Server logs. Our web server keeps standard access logs (IP address, page, time, browser) for 30 days for security and troubleshooting, on the legal basis of our legitimate interest in keeping the site available.

3. How We Use Your Data

We use your personal information for the following purposes:

• License Validation: Verifying that your license is valid and has not been revoked.
• Activation Limit Enforcement: Ensuring that each license is activated on a maximum of 2 machines simultaneously, as specified in our license terms.
• Customer Support: Responding to your inquiries, troubleshooting technical issues, and providing assistance.
• Service Improvements: Improving our licensing system and customer experience based on support interactions.

We do not use your data for marketing purposes unless you have explicitly opted in to receive such communications.

4. Data Storage and Security

4.1 Storage Location

Your personal data is stored on secure servers provided by trusted infrastructure providers. We implement industry-standard security measures to protect your information from unauthorized access, disclosure, alteration, or destruction.

4.2 Data Retention

• Active Licenses: Your data is retained as long as your license remains active.
• Expired or Revoked Licenses: We may retain minimal information (email and license key) for a reasonable period to prevent fraud and maintain our business records.
• Anonymous Events: Kept for 24 months, then deleted. They are never joined to a name, an email address or an order.
• Deletion Requests: If you request deletion of your data (see Section 5), we will remove your information within 30 days, subject to legal retention requirements.

4.3 Security Measures

We employ the following security practices:

• Encrypted data transmission (HTTPS/TLS)
• Secure API authentication
• Regular security audits
• Limited access to personal data on a need-to-know basis

5. Your Rights Under GDPR

If you are located in the European Economic Area (EEA), United Kingdom, or other jurisdiction with data protection laws, you have the following rights:

5.1 Right to Access

You have the right to request a copy of the personal data we hold about you.

5.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data.

5.3 Right to Erasure ("Right to be Forgotten")

You have the right to request deletion of your personal data, subject to certain legal exceptions (e.g., if we need to retain records for tax or fraud prevention purposes).

5.4 Right to Data Portability

You have the right to request your personal data in a structured, commonly used, and machine-readable format.

5.5 Right to Object

You have the right to object to processing of your personal data in certain circumstances.

5.6 Right to Withdraw Consent

If we process your data based on consent, you may withdraw that consent at any time.

5.7 Exercising Your Rights

To exercise any of these rights, please contact us at:
Email: support@neutralandnaturalaudio.com

We will respond to your request within 30 days.

6. Third-Party Services

6.1 Payment Processing

We use Stripe to process payments. When you purchase a license, Stripe collects payment information (credit card details, billing address) according to their own privacy policy. We do not store or have access to your full payment card details.

Stripe Privacy Policy: https://stripe.com/privacy

6.2 No Data Selling

We do not sell, rent, or trade your personal information to third parties for marketing or any other purposes.

6.3 Service Providers

We use the following processors, each bound by a data processing agreement and acting only on our instructions:

• Hetzner Online GmbH (Germany) hosts this website and the licence server. Privacy policy
• Stripe Payments Europe, Ltd. (Ireland) processes payments, as described in 6.1.
• Brevo (Sendinblue SAS, France) sends the release-news emails you can opt into on the download page. Privacy policy
• Formspree, Inc. (United States) delivers the messages sent through the contact form on the support page. Privacy policy
• Google Ireland Ltd. provides the website analytics described in 6.4, and only after you accept them.

We do not share your data with anyone else, and we do not use it for automated decision-making or profiling.

6.4 Cookies and Analytics

This website. On your first visit a banner asks whether you accept analytics cookies. Nothing is loaded from Google until you choose:

• If you press Accept, we load Google Analytics 4 (property G-ZPD02XDC63, provided by Google Ireland Ltd.), which sets the _ga and _ga_* cookies for up to 13 months. We use it only to count visits and see which pages are read. IP addresses are truncated by Google before storage and we never receive your identity.
• If you press Refuse, no analytics script is loaded and no analytics cookie is written. Your choice is remembered in your browser's local storage under the key cookie_consent.
• The legal basis is your consent (Article 6(1)(a) GDPR). You may withdraw it at any time with the Cookie settings link in the footer of any page, or by clearing your browser's site data; the banner then appears again on your next visit.

We use no advertising cookies, no remarketing tag and no social media pixel on this site.

The licence portal and the software. The licence management portal uses no cookies or tracking technologies: session tokens are passed in the URL and kept in server memory for at most 15 minutes. The PHON, AudioBridge and NNA Virtual Audio applications contain no analytics or telemetry; they contact our licence server only to activate or verify a licence key.

7. International Data Transfers

Your personal data may be transferred to and processed in countries outside your country of residence, including countries that may not have the same data protection laws as your jurisdiction. When we transfer data internationally, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by relevant data protection authorities

In practice, hosting (Hetzner), payments (Stripe) and release-news emails (Brevo) stay inside the European Union. Two services may involve a transfer to the United States: Formspree, which delivers contact-form messages, and Google Analytics, which runs only if you accept it. Both are covered by the EU-US Data Privacy Framework and by Standard Contractual Clauses.

8. Children's Privacy

The Software is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information promptly.

9. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email (if we have your email address on file)
• Provide notice within the Software when feasible

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

10. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For GDPR-related inquiries, you may also contact your local data protection authority.

---