The short version: we collect the minimum needed to sell and activate the plugin: your email, your purchase, and an anonymous machine identifier for license activation. No ads, no cookies on this site, only anonymous visit counts, and we never sell your data.
1. Who is responsible
The data controller is Situ Music Ltd, trading as Noir Plugins, registered in England & Wales (company number 16328131, registered office 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom). Contact: support@noirplugins.com.
2. What we collect and why
Account data. When you purchase, an account is created with your email address and a password you choose. We use this to deliver your license, let you activate the plugin, and contact you about your purchase (order confirmation, password reset, important product notices). Legal basis: performance of a contract.
Purchase data. Invention is sold through Stripe Managed Payments: Stripe's reseller service (Onelink on your receipt) is the seller and merchant of record, and it collects your payment and tax details as an independent controller under its own privacy policy. We never see or store your card details. We receive confirmation of the purchase, the email used, and billing country (for tax purposes). Legal basis: performance of a contract and legal obligation (tax and accounting records).
Activation data. When you sign in from the plugin, it sends a one-way hashed machine identifier to our license server so we can enforce the 2-machine activation limit. This identifier is derived from your device with a cryptographic hash. No raw hardware details, file names, audio, or project data ever leave your machine. Legal basis: performance of a contract and our legitimate interest in preventing license abuse.
Update check. The plugin periodically fetches a small static version file from our website to see whether an update is available. This is an ordinary HTTPS request; like any web request it exposes your IP address to the hosting provider's standard logs. No account or usage data is sent.
Support email. If you write to us, we keep the correspondence so we can help you and keep context for future requests. Legal basis: legitimate interest.
Mailing list. If you enter your address in the sign-up form on our home page, we store that address, the date you signed up and the exact wording you consented to, so that we can mail you when Invention goes on sale and when a release worth hearing ships. Legal basis: your consent. We store no name and build no profile; we do not track opens or clicks. To stop the rate of sign-ups being abused by scripts we briefly keep a salted, one-way hash of the submitting IP address (deleted after one hour); legal basis: our legitimate interest in keeping the form working. You can withdraw consent at any time using the unsubscribe link in any mail, or by writing to us. Withdrawing is as easy as signing up, and does not affect anything else.
This website sets no cookies and serves its fonts from our own server. To see which pages are visited we use Umami, a cookieless analytics service: it records the page, the referring site, your browser, device type and country, and nothing that identifies you. It does not use cookies, does not store your IP address and does not follow you across other sites. Legal basis: our legitimate interest in knowing how the site is used. Apart from that, nothing is sent anywhere until you deliberately submit the mailing-list form.
3. What we don't do
- We do not sell, rent or trade your personal data.
- We do not send marketing email unless you have explicitly opted in, and every such email includes an unsubscribe link.
- The plugin does not record, upload or analyse your audio, your projects or your playing. The capture buffer lives entirely on your machine.
4. Who we share data with
Stripe sells Invention to you as reseller and merchant of record and is an independent controller of the payment, tax and fraud data it collects at checkout (stripe.com/privacy). Apart from Stripe, we use a small number of service providers ("processors") to run the business:
- Supabase: account and license database, hosted in the London (UK) region (supabase.com/privacy).
- Google Workspace: business email (policies.google.com/privacy).
- Umami: cookieless website analytics, anonymous and aggregated (umami.is/privacy).
- Cloudflare: hosts this website and the plugin's update file, and sees the IP address of every request in its standard logs (cloudflare.com/privacypolicy).
- Resend: sends our mailing-list and service email, so it receives the addresses we mail (resend.com/legal/privacy-policy).
Each of these processors handles data only on our instructions. We do not share your data with anyone else unless required by law.
5. How long we keep it
Account and license data is kept for as long as your license is active, since it is what your activation depends on. Purchase records are kept for as long as UK tax law requires (currently 6 years). Support correspondence is kept for up to 2 years after the last message. Mailing-list addresses are kept until you unsubscribe, after which we keep a record of the unsubscribe itself so we do not mail you again by mistake. If you ask us to delete your account, we delete everything not subject to a legal retention duty. Note that deleting your account disables future activations of your license.
6. Your rights
Under UK GDPR (and EU GDPR where it applies) you have the right to access, correct, delete and receive a copy of your personal data, to object to or restrict processing, and to withdraw consent where processing is based on consent. To exercise any of these, email support@noirplugins.com. We respond within one month.
You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) or your local supervisory authority.
7. International transfers
Our license database is hosted in the UK. Stripe, Google, Cloudflare and Resend may process data outside the UK/EEA (Resend is based in the United States); where they do, transfers are protected by recognised safeguards such as the UK International Data Transfer Agreement or EU Standard Contractual Clauses.
8. Changes to this policy
We may update this policy from time to time; material changes will be posted on this page with an updated date. If a change significantly affects how we use your data, we will notify you by email.
Questions about your data? Write to support@noirplugins.com.