Privacy policy

Who we are

JDX Security Limited (NZBN 9463901), Wellington, New Zealand, makes JDX Audio and runs this website. We are responsible for the personal information described here. Contact our privacy officer at privacy@jdxaudio.com.

What you give us

Account: name, email address, country, and optionally company and phone. Your password is stored only as a salted hash that cannot be reversed.
Checkout: the licence holder name and, if you enter one, the machine ID of the computer to activate.
Release notes by email: your email address, only after you confirm it.
Support: the emails you send us and anything you attach.

What we get from Paddle

Paddle.com takes the payment (see below). When you pay, Paddle sends us your name, email address, country, the amount, the currency and the transaction number, so we can issue your product key and keep tax records. Paddle never sends us your card or bank details.

What JDX Audio sends us

When you activate: the product key, the machine ID and the JDX Audio version.
Each time a licensed copy starts and is online: the machine ID, the version and the licence's serial number, so a licence withdrawn after a refund or chargeback can be recognised. If we cannot be reached, JDX Audio carries on.

The machine ID is a code worked out from the computer's hardware and Windows installation. It does not contain the hardware details, your name or your files. A trial copy sends nothing.

What we keep about your visit

The network address of each sign-in, sign-up and password reset attempt, for up to 24 hours, to stop password guessing.
Cloudflare, which runs this website, processes every visitor's network address to deliver pages and block attacks, and keeps short-lived security logs.

What we never collect

JDX Audio does not send us recordings, projects, samples, plugin lists or anything about your music. They stay on your computer. This website uses no analytics, no advertising trackers and no social media pixels. We do not use your information to train artificial intelligence, and no automated system makes decisions about you.

Why we use it

To create and secure your account, give you the download, issue and activate your licence, and move it to another computer: this is needed to perform our agreement with you.
To keep tax and accounting records: the law requires it.
To stop abuse, password guessing and licence misuse: our legitimate interest in keeping the service and the licences secure.
To answer support requests and send notices about your orders: needed for our agreement with you.
To send release notes, only if you ask for them: your consent, which you can withdraw at any time with the unsubscribe link in every email.

Who we share it with

We do not sell or rent personal information. We share it only with these services:

Paddle.com, our reseller and Merchant of Record. Paddle sells you the licence, takes the payment and handles tax, refunds and invoices. It collects payment details itself and is responsible for them under its own privacy notice at paddle.com/legal/privacy.
Cloudflare, Inc., which hosts this website, its database and the download, on our behalf.
Resend, which delivers our emails on our behalf.

We may also disclose information where the law requires it.

Information sent overseas

These services store and process information outside New Zealand, including in the United States and the European Union. Cloudflare and Resend act only on our instructions, under data processing agreements; for information from the EU or UK, those agreements include the European Commission's standard contractual clauses (and the UK addendum). New Zealand itself is recognised by the European Commission and the UK as giving adequate protection.

Cookies and storage

This website sets one cookie, __Host-jds_session, only when you sign in, to keep you signed in. It expires after 14 days or when you sign out. It is strictly necessary, so it does not need consent.
Cloudflare may set a short-lived security cookie (__cf_bm, 30 minutes) to tell people from bots. It is also strictly necessary.
Paddle sets its own cookies inside the checkout, under its own privacy notice.

We set no analytics, advertising or tracking cookies, so there is no cookie banner.

How long we keep it

Account details: until you delete the account.
Orders, product keys and the computers activated with them: for as long as the licence can be used, and order records for seven years, as New Zealand tax law requires. When an account is deleted, its orders are kept without a link to it.
Unfinished checkouts: 30 days.
Licence checks from the app: 400 days.
Release notes list: until you unsubscribe.
Support emails: two years after the last message.
Sign-in attempt records: 24 hours.

Security

Passwords are hashed, every page is served over HTTPS, sign-in attempts are rate limited, and licences are signed so they cannot be forged. If a privacy breach is likely to cause serious harm, we tell the people affected and the Privacy Commissioner as soon as practicable, and, for EU or UK residents, the relevant supervisory authority as the law requires.

Your rights

See and change most of your details, and delete your account, on the account page.
Ask for a copy of everything we hold about you, or for a correction, by email to the privacy officer. We reply within 20 working days.
If you are in the EU or UK, you can also ask us to erase or restrict your information, to send it to you in a portable form, or object to how we use it, and withdraw consent at any time.

If you are not satisfied with our reply, you can complain to the Office of the Privacy Commissioner in New Zealand (privacy.org.nz), or to the data protection authority where you live.

Children

Accounts are for people aged 16 or over. Younger people need a parent or guardian to buy and manage the licence.

Changes

Changes to this policy are published on this page with a new date. Significant changes are also sent to account holders by email.