Privacy Policy
The short version: your audio never leaves your computer — we never receive, store, or hear it. We collect the minimum account information needed to run a subscription service, we don't sell it, and Stripe handles your payment details so we never see your card number.
1. Audio — processed locally, never collected
All audio analysis and mastering runs in your browser on your own device. Your audio files, stems, and recordings are not uploaded to, transmitted to, stored on, or accessible by our servers. This is an architectural property of the Service, not only a policy choice.
2. Information we collect
- Account data you provide: first and last name, email address, phone number, and a password (stored only as a salted cryptographic hash — we cannot read it).
- Subscription data: your plan, subscription status, and Stripe customer reference. Payment card details go directly to Stripe, our payment processor, and never touch our servers. Stripe's handling is governed by its own privacy policy.
- Technical data: standard server logs (IP address, request time, user agent) kept for security and debugging, and a session cookie that keeps you logged in.
- Consent records: the time you accepted the Terms of Service and this Policy.
3. What we use it for
Operating your account and subscription; verifying your email; providing support; securing the Service (rate limiting, abuse prevention); and meeting legal obligations (tax, accounting). We do not use your data for advertising, and we do not sell or rent personal information to anyone.
4. Cookies
We use one first-party session cookie (httpOnly, secure) to keep you signed in. No advertising or third-party analytics cookies.
5. Sharing
We share data only with: Stripe (payments), our hosting provider (infrastructure on which account data resides), and authorities where the law requires it. No other third parties.
6. Retention and deletion
Account data is kept while your account exists. Close your account (or write to us) and we delete your personal data, except records we must keep for legal, tax, or fraud-prevention purposes. Server logs rotate on a short schedule.
7. Your rights
You may request a copy of your personal data, correction of inaccurate data, or deletion, by writing to support@lookymaster.com. If you are in a jurisdiction with specific privacy rights (e.g., EEA/UK GDPR, California CCPA), we honor the rights those laws grant, including access, portability, correction, deletion, and non-discrimination. We do not sell personal information as defined by the CCPA.
8. Security
Passwords are stored as salted scrypt hashes; sessions use httpOnly secure cookies; all traffic is encrypted with TLS; payment data is handled solely by Stripe. No system is perfectly secure; if a breach affecting your data occurs, we will notify you as the law requires.
9. Children
The Service is for users 18 and older. We do not knowingly collect data from children.
10. Changes
Material changes to this Policy will be posted here with a new effective date. Continued use after changes constitutes acceptance.