DRAFT v1 — 2026-06-11 — FOR ATTORNEY REVIEW. NOT YET IN FORCE. Drafted to match actual data flows in the shipped product (ui.8.25) and the planned purchase flow. If the product's behavior changes (e.g., crash reporting is added in a future version), this document must be revised BEFORE that version ships.
Last updated: [DATE] Controller: [LEGAL ENTITY NAME], [POSTAL ADDRESS] — [email protected]
Your audio never leaves your computer. Master Split performs all audio analysis and separation locally on your Mac. We never receive, store, or have access to your audio files, your stems, or any content derived from them. We do not use your audio to train AI models — we technically could not, because we never see it.
| Data | When | Why | Where it goes |
|---|---|---|---|
| Email address | Purchase or trial signup | Deliver your license key; support; receipts | Our license server (Cloudflare); our email provider; Stripe |
| Payment details (card etc.) | Purchase | Payment processing | Stripe only — we never see or store card numbers |
| License key, a random machine identifier (UUID), app version | App activation and periodic license checks (~hourly while running) | Validate your license; enforce the 2-machine limit; support | Our license server (Cloudflare Workers/KV) |
| IP address | Any connection to our server, website, or update feed | Inherent to internet traffic; abuse prevention (e.g., trial rate-limiting); transient server logs | Cloudflare (our host) |
| Update check requests | App launch / manual check | Deliver software updates | Cloudflare R2 (our update host) |
Notes:
License records (email, key, machine UUIDs, activation timestamps) are kept for as long as the license is active, plus a reasonable period for support, fraud prevention, and legal compliance [ATTORNEY: define, e.g., 7 years for transaction records]. Server logs at our infrastructure provider are transient. You may request deactivation of machine bindings at any time in-app.
Depending on your location (e.g., EU/UK GDPR, California CCPA/CPRA), you may have rights to access, correct, delete, or export your personal data, and to object to or restrict processing. Contact [email protected] and we will respond within the legally required period. You may also lodge a complaint with your local supervisory authority. We do not discriminate against you for exercising privacy rights.
[ATTORNEY: confirm whether GDPR Art. 27 EU representative and/or UK representative are required given direct sales to EU/UK customers, and whether a DPA with Cloudflare/Stripe/email provider needs referencing here.]
Master Split is not directed at children under 16 and we do not knowingly collect their data.
We will post changes here with an updated date; material changes will be noted in app release notes or by email for active customers.