Policies
Privacy policy
Who we are
[[Legal business name]] (“NF Audios”, “we”) runs this store and is responsible for the personal information described here. Mailing address: [[Mailing address]].
The person in charge of protecting personal information is [[Name or title of the person in charge of personal information]], reachable at [[Privacy contact email]].
The person in charge of protecting personal information is [[Name or title of the person in charge of personal information]], reachable at [[Privacy contact email]].
What we collect, and why
• Account and order details — name, email, phone if you add it, what you bought and paid, and your billing country. To sell and deliver the software, keep tax records and help you.
• Licence keys and activations — when you activate a product, the app sends a device identifier, the computer name it shows you, the operating system and app version. We keep the identifier only in a scrambled form (a keyed hash) that cannot be turned back into the original, plus the computer name, system, version and dates. To limit each licence to the number of computers you paid for and to let you sign computers out.
• App sign-in — if you sign an app in with your account, we keep a scrambled copy of the sign-in token, the app’s name and when it was last used.
• Downloads — which product and version you downloaded and when. To show “update available” and to stop abuse.
• Support — your messages in the help chat and on our forms.
• Network addresses — we never store your IP address as it is: only a scrambled, shortened form, used to stop brute-force attacks and download abuse.
• Release news — only if you tick the box. Every newsletter has an unsubscribe link, and you can switch it off in your account.
Card numbers go straight to the payment provider; we never see or store them.
• Licence keys and activations — when you activate a product, the app sends a device identifier, the computer name it shows you, the operating system and app version. We keep the identifier only in a scrambled form (a keyed hash) that cannot be turned back into the original, plus the computer name, system, version and dates. To limit each licence to the number of computers you paid for and to let you sign computers out.
• App sign-in — if you sign an app in with your account, we keep a scrambled copy of the sign-in token, the app’s name and when it was last used.
• Downloads — which product and version you downloaded and when. To show “update available” and to stop abuse.
• Support — your messages in the help chat and on our forms.
• Network addresses — we never store your IP address as it is: only a scrambled, shortened form, used to stop brute-force attacks and download abuse.
• Release news — only if you tick the box. Every newsletter has an unsubscribe link, and you can switch it off in your account.
Card numbers go straight to the payment provider; we never see or store them.
Legal bases (for visitors in the EU and UK)
Contract (delivering and licensing what you buy), legal obligation (tax and accounting records), legitimate interests (security, fraud prevention, improving the store) and consent (release news — withdraw it any time).
Cookies and browser storage
We use one session cookie to keep you signed in and protect forms, and a help-chat cookie if you open the chat. Your browser also remembers, on this device only, your saved products, recently viewed items, the player position and which of our offers you have already seen or closed (so we do not show them again). None of it is sent to anyone else. We use no advertising or cross-site tracking cookies. Our own visitor statistics use no cookies. We also use Google Analytics, which sets its own cookies (_ga) and tells Google which of our pages you visit, with your IP address shortened. In the EU, EEA, UK and Switzerland we ask first: Google Analytics loads only if you click “Accept” in the cookie banner, and never if you decline or do nothing. Elsewhere it runs unless you turn it off. You can change your mind at any time with “Cookie settings” at the bottom of every page. When your browser sends Global Privacy Control or “Do Not Track” we neither count your visit nor remember offers past the current tab.
Who we share it with
We do not sell or rent personal information, and we do not share it for cross-context advertising. These service providers process it for us, under contract, only to provide their service:
• Your bank, for Interac e-Transfer payments (Canada)
• Your bank, for Zelle payments (United States)
• [[Web host and where its servers are]] — runs this website and stores the data described here.
• [[Email delivery provider]] — sends receipts, licence keys and replies.
Some of them store data outside your province or country, including in the United States, where it may be accessible to authorities under local law. Where EU or UK data is transferred, we rely on the provider’s standard contractual clauses or an adequacy decision.
• Your bank, for Interac e-Transfer payments (Canada)
• Your bank, for Zelle payments (United States)
• [[Web host and where its servers are]] — runs this website and stores the data described here.
• [[Email delivery provider]] — sends receipts, licence keys and replies.
Some of them store data outside your province or country, including in the United States, where it may be accessible to authorities under local law. Where EU or UK data is transferred, we rely on the provider’s standard contractual clauses or an adequacy decision.
How long we keep it
• Orders and invoices: six years after the end of the tax year (Canadian tax law).
• Licence keys: as long as the licence exists, then with the order records.
• Activation and download logs: 12 months.
• Closed help-chat conversations: 24 months.
• App sign-ins: ended after 180 days without use, or when you sign out.
• Your account: until you close it.
• Proof that you agreed to release news: while you are subscribed and for three years after you unsubscribe.
• Licence keys: as long as the licence exists, then with the order records.
• Activation and download logs: 12 months.
• Closed help-chat conversations: 24 months.
• App sign-ins: ended after 180 days without use, or when you sign out.
• Your account: until you close it.
• Proof that you agreed to release news: while you are subscribed and for three years after you unsubscribe.
Your rights
You can see, correct, download or delete your information, withdraw consent, and object to or limit some uses. Most of it is self-service in My account → Profile (https://nfaudios.com/my-account/profile) (Download my data, Close my account). Otherwise write to [[Privacy contact email]]. We answer within 30 days and may ask you to confirm it is you. California residents have the same rights, and we will not treat you differently for using them.
If you are not satisfied, you can complain to the Office of the Privacy Commissioner of Canada, the Commission d’accès à l’information du Québec, or your local data protection authority.
If you are not satisfied, you can complain to the Office of the Privacy Commissioner of Canada, the Commission d’accès à l’information du Québec, or your local data protection authority.
Security
Encrypted connections only, passwords stored with a slow one-way hash, optional two-step sign-in, signed licence tokens, rate limits, and access to customer data limited to the people who need it. If a breach creates a real risk of significant harm, we will notify you and the regulator as the law requires.
Children
The store is not directed to children under 16, and we do not knowingly collect their information.
Changes
We will post any change here with a new date, and email account holders about important ones.