LEGAL

Privacy Policy

Last updated: Pending publication

TL;DR: Everything you create with Cresono Studio Pro — audio, projects, voice samples, lyrics — stays on your computer. We only store the minimum account data needed to run your license (email, payment status, device fingerprint). We never upload or analyze your audio.

1. Who we are

This Privacy Policy applies to Cresono ("we", "us") and our product, Cresono Studio Pro. Questions may be directed to support@cresono.com.

2. What we collect

We collect the minimum data needed to operate your account and enforce your license:

Account data: email address, hashed password, display name, account creation date.
Billing data: payment status, plan type, subscription history. Full card details are handled by our payment processor (see Section 4) and are never stored on our servers.
License data: a one-way cryptographic fingerprint of the device you activate on, activation timestamps, and the serial number of your license token.
Support data: any email you send us, including attachments, for as long as needed to resolve your request.

3. What we do not collect

Your audio files, songs, voice recordings, or projects.
Your lyrics, text prompts, or generation history.
AI model inputs or outputs. All generation happens locally on your device.
Usage telemetry by default. Optional anonymized telemetry can be enabled in settings and disabled at any time.

4. Third-party processors

We use a small, carefully chosen set of service providers:

Supabase (EU region) — account database, authentication, license records.
FastSpring — payment processing and sales tax compliance. FastSpring is the merchant of record for all purchases and handles full cardholder data under PCI-DSS.
Cloudflare R2 — hosting of installer files and downloadable AI engines. Cloudflare logs standard access data (IP, user agent) for abuse prevention.
Email provider — transactional emails (signup confirmation, receipts, password reset).

Each processor is bound by a data processing agreement and processes data only for the purposes described above.

5. How we use your data

Create and authenticate your account.
Process payments and enforce your license terms.
Detect and prevent fraud, abuse, or license violations.
Send transactional emails (receipts, renewal reminders, service notices).
Respond to support requests.
With your explicit opt-in only: send product update newsletters. You can opt out at any time.

6. How long we keep it

Account and license data are retained while your account is active and for up to 24 months after account closure for tax, legal, and fraud-prevention reasons. Billing records are retained for 10 years as required by tax law. You can request deletion of non-legally-required data at any time (see Section 8).

7. Security

Passwords are hashed with industry-standard algorithms (bcrypt/Argon2). All connections use TLS 1.2+. License tokens are signed with Ed25519 offline keys so they cannot be forged. Device fingerprints are one-way hashes that cannot be reversed to identify your hardware.

8. Your rights

Depending on your jurisdiction, you have the right to access, correct, export, or delete your personal data. To exercise any of these rights, email support@cresono.com from the email address on your account. We respond within 30 days.

9. Cookies on this website

This website uses only essential cookies required for authentication and checkout. No advertising trackers, no third-party analytics by default.

10. Changes

We may update this policy from time to time. Material changes will be announced via email at least 14 days in advance.

11. Contact

Privacy questions: support@cresono.com. See also our Registration Agreement.