Privacy Policy

1. Data we collect

At the point of purchase (amapp.io)

• Email address, used to deliver your license key and receipts, and to tie your key to your account.
• Payment information, handled entirely by Stripe. We do not see or store your card number, CVC, or billing address; we only receive a payment confirmation and subscription status from Stripe.
• License record: the generated license key, tier, expiry, issue date, and linked email, stored in our database (Supabase).

Inside the Software (local to your computer)

• License key and email that you enter are stored in REAPER’s extension state (ExtState) on your machine.
• Trial start timestamp is stored locally when the Software is first launched, so we can show a reminder after 30 days. This timestamp stays on your device and is not transmitted to us.
• Launch count is stored locally for internal UX triggers. It stays on your device and is not transmitted to us.

Error reports (only with your consent)

When the Software encounters an error, it shows a prompt asking whether you want to send a report. If you accept, the Software transmits a technical diagnostic to a Discord channel we operate. Each report contains:

• operating system and platform
• REAPER version
• ☱ AMAPP version
• timestamp
• error message and stack trace
• optional technical context about the failed operation

Error reports do not include your email address, license key, project contents, audio, or any other personal data. You can decline the prompt at any time, and declining does not affect Software functionality.

2. How we use your data

• To deliver license keys and receipts after purchase.
• To validate license keys when you check status on the website or when the Software verifies a key.
• To send service-related emails (e.g. renewal, expiry).
• To investigate and fix bugs when you voluntarily submit an error report.
• To comply with legal and tax obligations.

We do not sell your data, and we do not use it for advertising.

3. Legal bases (GDPR)

We process your personal data on the following legal bases under the EU General Data Protection Regulation:

• Contract performance (Art. 6(1)(b)) for processing your purchase, license delivery, and key validation.
• Legitimate interest (Art. 6(1)(f)) for billing records, fraud prevention, and securing our systems.
• Consent (Art. 6(1)(a)) for optional error reports. You can withdraw consent at any time by declining the prompt.
• Legal obligation (Art. 6(1)(c)) for tax and accounting retention.

4. Third parties (processors)

We use a small number of service providers to operate ☱ AMAPP. Each acts as a data processor on our behalf:

• Stripe for payment processing and subscription management.
• Supabase for database hosting of license records.
• Resend for transactional email delivery (license keys, receipts).
• Vercel for web hosting of amapp.io.
• Discord as the destination for opt-in error reports.

Some processors are based outside the European Economic Area. Where data is transferred internationally, we rely on Standard Contractual Clauses or other approved transfer mechanisms.

5. Retention

• License records are retained for the active life of the subscription plus a reasonable period afterwards for audit, support, and legal compliance (typically 7 years for financial records under Swedish law).
• Error reports live in our internal Discord channel. They are ephemeral operational data and are not archived to a separate datastore.
• Local data (trial timestamp, launch count, stored key) lives on your machine and is removed when you delete the REAPER extension state or uninstall ☱ AMAPP.

6. Your rights

Under the GDPR (and equivalent laws in other jurisdictions), you have the right to:

• request access to the personal data we hold about you;
• request correction of inaccurate data;
• request deletion of your data, subject to retention obligations;
• object to processing or request restriction;
• request portability of your data;
• withdraw your consent for error reporting at any time (by declining the prompt);
• lodge a complaint with a supervisory authority. In Sweden this is the Integritetsskyddsmyndigheten (IMY).

To exercise any of these rights, email us at support@mountwestmusic.com. We will respond within 30 days.

7. Security

We use TLS for all data in transit, scoped credentials for our processors, and keep card details entirely outside our systems (Stripe handles them). No system is ever perfectly secure, and we will notify affected users and the relevant authorities if a breach involves your personal data.

8. Children

☱ AMAPP is a professional audio tool and is not directed at children under 16. We do not knowingly collect personal data from children.

9. Changes to this policy

We may update this Privacy Policy from time to time. The effective date at the top of this page indicates the most recent revision. Material changes will be announced via the Software or by email.

10. Contact

Mount West Music AB
Sweden
Email: support@mountwestmusic.com