Privacy notice
Last updated 3 October 2026
This notice explains what we keep about you when you try or buy a SoundFigure plugin, contact us or visit this website, why we keep it, and what you can ask us to do with it.
Who we are
SoundFigure. Email: support@soundfigure.com. We're the controller of your personal data.
What we keep, and why
When you buy
Your name, email address, billing country and address, what you bought, the price and tax, and Stripe's reference for the payment. We use them to sell you the licence, send your key, handle refunds and keep the tax and accounting records the law requires. Stripe takes the payment; we never see your card details. The legal bases are our contract with you and our legal obligations (tax records).
Your licence and your computers
Your key (we keep a scrambled form, not the key itself), the email address it belongs to, and for each computer you activate: an identifier made from that computer (scrambled with a product-specific secret, so it can't be traced back to your hardware), the computer's name as your system shows it (so you can recognise it in your list), whether it's Windows or a Mac, and the dates. We use them to activate your key on up to three computers, to let you see and swap your computers, and to stop keys being shared. The legal bases are our contract with you and our legitimate interest in preventing misuse.
Trials
The email address you start a trial with, the scrambled computer identifier and the trial's dates, so each person and each computer gets one trial. The 6-digit codes we email you are kept scrambled and deleted within a day. If you tick "send me news" when you start a trial, we may email you about our plugins; you can unsubscribe from any of those emails. The legal bases are our legitimate interest in one trial each, and your consent for news.
Update checks
Once a day, while its window is open, a plugin asks our website whether there's a new version. That request carries nothing that identifies you. As with any connection, our hosting sees your IP address to answer it; we don't store it with your licence.
Keeping the licence server safe
To stop people guessing keys and codes, our licence server keeps a scrambled form of the IP address of each request for a short time (minutes to hours), then deletes it. This is in our legitimate interest in keeping your key and the service safe.
Emails with us
What you send us, and our replies, to help you. We keep a log of the emails our licence server sends (to whom, what kind, and when) for 90 days, so we can see if an email failed. The legal bases are our contract with you and our legitimate interest in giving support.
This website
This website uses no cookies, no analytics and no tracking. Our hosting provider processes your IP address to deliver pages and protect the site from abuse. The key finder on the KeyLens page reads the file you give it inside your browser: the file is never uploaded, and we never see it.
Who else handles it
These companies process data for us, only as we instruct:
- Stripe: payments and receipts.
- Cloudflare: this website, our licence server and its database.
- Namecheap: our email.
- Resend: a backup route for our emails if our own email is unavailable.
Some of them process data in the United States. Where data leaves the UK, it's protected by the UK's approved safeguards: an adequacy decision (such as the UK Extension to the EU-US Data Privacy Framework) or the UK's International Data Transfer Agreement or Addendum. We never sell your data, and we don't use it for advertising.
How long we keep it
- Sales and tax records: 10 years, as tax law requires (EU VAT records must be kept that long).
- Your licence and computers: for as long as your licence exists.
- Trials: 2 years after the trial ends.
- Emailed codes: deleted within a day.
- The licence server's email log: 90 days.
- Emails with us: 2 years after our last message.
- News emails: until you unsubscribe.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to send it to you or someone else in a usable form. Where we rely on your consent, you can withdraw it at any time. Some of these rights depend on the circumstances: for example, we must keep tax records, and deleting your licence data turns your key off. Email support@soundfigure.com and we'll reply within a month.
If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, 0303 123 1113. We'd appreciate the chance to put it right first.
Changes
We'll update this notice if what we do changes, and change the date at the top.