1. Who is responsible for your data
Literal Sounds Labs is an independent audio-software project operated by Michel Figueiredo. For the personal data described in this policy, Literal Sounds Labs acts as the data controller.
Privacy contact: support@literalsoundslabs.com
Postal address: Rua Adriano José da Silva, N.º 20, 2770-004 Lisbon, Portugal.
2. Information we collect
Depending on how you use the website and products, we may collect:
- Download-access information: the email address entered to unlock download buttons;
- Contact information: your name, email address, subject, product selection and message when you use the contact form or email us;
- Purchase and licence information: purchase reference, product, licence key, activation status and information supplied by Payhip or needed to provide the licence;
- Technical and activation information: product identifier, device identifier, activation count, trial timestamps, validation events, software version and limited diagnostic data used by the licensing service;
- Basic service logs: technical request data that hosting, storage, form and security providers may process, such as IP address, browser type, timestamps and requested URL.
3. How we use personal information
We use personal information to:
- unlock and deliver plugin downloads;
- process purchases and provide licence access;
- operate trials, activations and fraud-prevention limits;
- reply to questions and provide technical support;
- send product news where you have agreed to receive it;
- maintain website security, diagnose faults and prevent abuse;
- comply with tax, accounting, consumer-protection and other legal obligations.
4. Legal bases for processing
Where the GDPR or similar law applies, we rely on one or more of the following grounds:
- Contract: to provide purchased licences, downloads, activation and support;
- Consent: for optional product news and certain form submissions;
- Legitimate interests: to secure the website, prevent licence abuse, improve services and respond to genuine enquiries;
- Legal obligation: for required transaction, tax, accounting and compliance records.
You may withdraw consent for future marketing at any time. Withdrawal does not affect processing already carried out lawfully.
5. Download unlock and browser storage
When you submit the download-unlock form, the email address is sent to a Google Forms endpoint. The website also stores a small value in your browser’s localStorage so it remembers that downloads have been unlocked. This value does not itself contain your email address.
You can clear this local storage through your browser settings. Clearing it may cause the site to ask for your email again.
6. Contact form
The contact form is delivered through FormSubmit. The information you enter is forwarded to the private support inbox used by Literal Sounds Labs. Please do not include passwords, full payment-card details, licence keys belonging to another person, health information or other unnecessary sensitive data.
7. Purchases and payment services
Purchases are processed through Payhip and its payment providers. Those services process payment, billing and transaction information under their own privacy notices. Literal Sounds Labs does not directly store complete payment-card numbers or card security codes.
We may receive the information needed to identify the purchase, issue or validate a licence, provide support and maintain legally required records.
8. Hosting, downloads and licensing infrastructure
The website and product services may use third-party infrastructure, including GitHub Pages for website publishing, Cloudflare for domain, security, storage, downloads, Workers and database functions, Google Forms for download-access submissions, FormSubmit for contact-form delivery, and Payhip/payment providers for sales.
These providers may process limited technical information as necessary to deliver their services, secure requests and comply with law. Their processing is also governed by their respective terms and privacy notices.
9. International data transfers
Some service providers may process information outside Portugal or the European Economic Area. Where required, transfers are protected through adequacy decisions, contractual safeguards or another lawful transfer mechanism used by the relevant provider.
10. How long information is kept
We keep personal information only as long as reasonably necessary for the purpose for which it was collected:
- support messages are retained while the enquiry is active and for a reasonable follow-up period;
- purchase, licence, accounting and fraud-prevention records may be kept for the duration required by law or needed to manage the licence;
- marketing contact information is kept until you unsubscribe, withdraw consent or the list is retired;
- technical logs and validation events are kept only as long as reasonably needed for security, reliability and dispute handling.
11. Sharing personal information
We do not sell personal information. Information may be shared with service providers described above, professional advisers where necessary, public authorities where legally required, or a successor if the project or relevant assets are transferred.
Service providers receive only the information reasonably necessary for their role.
12. Your privacy rights
Depending on the law that applies to you, you may have rights to access, correct, delete, restrict or object to processing of your personal information, request data portability, and withdraw consent.
To exercise a right, email support@literalsoundslabs.com. We may need to verify your identity. You also have the right to complain to the Portuguese data-protection authority, the Comissão Nacional de Proteção de Dados (CNPD), or another competent supervisory authority.
13. Security
Reasonable technical and organisational measures are used to protect personal information. However, no internet transmission, email system or online storage service can be guaranteed completely secure. Keep your licence information private and contact us promptly if you suspect misuse.
14. Children
The website and professional audio products are not directed specifically to children. We do not knowingly seek personal information from children who cannot legally consent to the relevant processing. A parent or guardian may contact us to request deletion where appropriate.
15. Cookies and analytics
The current website does not intentionally use advertising cookies or behavioural advertising. Essential browser storage is used for download-unlock status as described above. Third-party services may set or read technical identifiers when their pages or systems are used, subject to their own policies.
16. Changes to this policy
We may update this policy when the website, products, service providers or legal requirements change. The latest version will be published here with its effective date.