JUSTANOTHER AUDIO — PRIVACY POLICY

Effective Date: 20 April 2026 Last Updated: 20 April 2026

This Privacy Policy explains how JustAnother Audio — a brand of REAV Rafał Sztaba — collects, uses, shares, and protects your personal data when you visit our website, purchase our products, activate and use our software, or contact us.

This policy is written in compliance with the EU General Data Protection Regulation 2016/679 (“GDPR”) and Polish data protection law (Ustawa o ochronie danych osobowych of 10 May 2018).

1. WHO WE ARE (DATA CONTROLLER)

The data controller responsible for your personal data is:

REAV Rafał Sztaba (d/b/a JustAnother Audio) ul. Poronińska 8/20, 02-459 Warsaw, Poland NIP: 7343587468 REGON: 387258879 Email: support@justanother.audio Web: https://justanother.audio

For any privacy-related matter — including requests to exercise your rights under the GDPR — please contact us at support@justanother.audio with the subject line “Privacy Request.”

We have not appointed a Data Protection Officer as we are not required to do so under Article 37 GDPR. However, all privacy inquiries are handled personally by Rafał Sztaba.

2. A NOTE ON PURCHASES THROUGH MOONBASE

We sell our licenses through Moonbase (moonbase.sh) acting as our Merchant of Record. This means that when you buy a license:

Moonbase is a separate data controller for your purchase transaction. Moonbase collects and processes your payment details, billing address, VAT number (if applicable), and invoice data under its own Privacy Policy, available at https://moonbase.sh.
We (JustAnother Audio) receive only the limited data needed to deliver your license and provide support: your name, email address, country, the products you purchased, and your order reference.
Refunds, billing errors, payment disputes, and invoice requests must be directed to Moonbase and are governed by Moonbase’s privacy practices.

The rest of this Policy describes the data we (JustAnother Audio) process as controller.

3. WHAT PERSONAL DATA WE COLLECT

3.1 Data we receive from Moonbase after a purchase

First name and last name
Email address
Country of residence
Order number, product(s) purchased, and license key issued
Whether you opted in to receive marketing communications

3.2 Data collected when you activate or use the Software

License key / activation token — used to authorize use of the Software.
Machine identifier (hash) — a technical fingerprint derived from your computer’s hardware, used solely to enforce the two-machine activation limit. We do not use this to identify you personally beyond license enforcement.
Operating system and version — collected at activation for compatibility and support.
IP address — temporarily logged when your computer contacts our licensing server, used for security, fraud prevention, and debugging activation issues.
Plugin version — to determine if updates are needed.

We do not collect audio data, project files, preset contents, or any material you create, process, or work on using the Software. The Software does not “listen” to your sessions.

3.3 Data you provide when you contact support

Your name, email address, and any information you voluntarily include in your message (e.g., system details, screenshots, logs, descriptions of your issue).

3.4 Data collected via our website (https://justanother.audio)

Essential technical data: IP address, browser type and version, device type, operating system, pages viewed, referring URL, and timestamps. This is logged in standard server logs.
Analytics data (only if you consent to analytics cookies): aggregated, pseudonymized information about how visitors use the site, used to improve it. [We use a privacy-respecting analytics provider — confirm provider and update this sentence, e.g., “Plausible Analytics, which does not use cookies and does not track individuals.”]
Newsletter subscription data (only if you sign up): email address, and the date and source of your subscription.

3.5 Optional crash reports and telemetry

If enabled in the Software’s settings, we may collect anonymous crash reports and diagnostic telemetry to help us fix bugs. This is off by default and you can disable it at any time. No personal data or audio content is transmitted.

4. WHY WE USE YOUR DATA AND ON WHAT LEGAL BASIS

Under the GDPR, every processing activity must have a lawful basis. Below is a summary:

Purpose	Data Used	Legal Basis (GDPR Art. 6)
Deliver the license you purchased	Name, email, order data, license key	Performance of a contract (Art. 6(1)(b))
Enforce license terms (two-machine limit, anti-piracy)	License key, machine identifier, IP	Legitimate interests: protecting our intellectual property (Art. 6(1)(f))
Provide customer support	Name, email, message content, technical details	Performance of a contract and legitimate interests (Art. 6(1)(b), (f))
Comply with tax, accounting, and legal obligations	Purchase records	Legal obligation (Art. 6(1)(c)) — Polish tax law, Accounting Act
Send newsletters and product announcements	Email address	Consent (Art. 6(1)(a)); you can withdraw at any time
Operate and secure the website	IP, browser data, server logs	Legitimate interests: security and stability (Art. 6(1)(f))
Understand aggregate website usage	Analytics data	Consent via cookie banner (Art. 6(1)(a))
Fix bugs using crash reports	Diagnostic telemetry	Consent, only if you opt in (Art. 6(1)(a))
Defend legal claims	All relevant data	Legitimate interests (Art. 6(1)(f))

We do not sell your personal data. We share it only with the following categories of recipients, strictly as needed:

Moonbase — Merchant of Record for purchase transactions (separate controller).
Email service provider — used to send license delivery emails, transactional notices, and (with consent) newsletters. [Confirm provider, e.g., MailerLite, Postmark, SendGrid.]
Hosting provider — hosts our website and licensing backend. [Confirm provider, e.g., Hetzner, DigitalOcean, Vercel.]
Support tools — if we use a helpdesk system (e.g., a ticketing service), email conversations may be processed through it.
Analytics provider — if you consent to analytics cookies.
Professional advisors — our accountant and, where necessary, our legal counsel, bound by professional confidentiality.
Public authorities — only where required by a valid legal request (e.g., court order, tax audit).

Each third-party processor listed above acts on our instructions under a written data processing agreement (GDPR Art. 28) and is bound to confidentiality and security obligations.

6. INTERNATIONAL DATA TRANSFERS

Some of our service providers may be located outside the European Economic Area (EEA), such as in the United States. Where that is the case, we ensure an appropriate safeguard is in place — typically:

An adequacy decision of the European Commission covering the destination country, or
Standard Contractual Clauses (SCCs) approved by the European Commission, supplemented by technical measures (encryption in transit and at rest) where needed.

You can request a copy of the safeguards applied to any specific transfer by emailing support@justanother.audio.

7. HOW LONG WE KEEP YOUR DATA

We retain personal data only for as long as needed for the purposes described, with the following typical periods:

Purchase and invoice records — 5 years from the end of the calendar year in which the transaction occurred, as required by Polish tax law (Ordynacja podatkowa / Ustawa o rachunkowości).
Active license records — for as long as your license is active, plus 3 years afterwards for warranty, support history, and legal-claim purposes.
Customer support conversations — 3 years from the last interaction.
Newsletter subscription data — until you unsubscribe, plus a brief record that you unsubscribed (to honor your opt-out).
Website server logs — up to 12 months, then deleted or anonymized.
Analytics data — up to 14 months (industry standard).
Crash reports — up to 12 months, then deleted or aggregated anonymously.

After these periods, data is deleted or fully anonymized unless longer retention is required by law (for example, to defend a legal claim).

As a data subject, you have the following rights:

Right of access (Art. 15) — obtain confirmation of whether we process your data and receive a copy of it.
Right to rectification (Art. 16) — have inaccurate data corrected.
Right to erasure / “right to be forgotten” (Art. 17) — have your data deleted, subject to legal retention obligations.
Right to restriction of processing (Art. 18) — ask us to limit processing in specific circumstances.
Right to data portability (Art. 20) — receive your data in a structured, machine-readable format, or have it transferred to another controller.
Right to object (Art. 21) — object to processing based on legitimate interests or direct marketing. Objection to direct marketing is always honored.
Right to withdraw consent (Art. 7(3)) — where processing is based on consent, you can withdraw it at any time, without affecting the lawfulness of prior processing.
Right not to be subject to automated decision-making (Art. 22) — we do not carry out automated decision-making or profiling that produces legal or similarly significant effects.

How to exercise your rights: Email support@justanother.audio with “Privacy Request” in the subject line. We will respond within one month (Art. 12(3)). We may need to verify your identity before acting on a request.

Right to lodge a complaint: If you believe we have mishandled your data, you have the right to lodge a complaint with the Polish supervisory authority:

Urząd Ochrony Danych Osobowych (UODO) ul. Stawki 2, 00-193 Warsaw, Poland https://uodo.gov.pl Phone: +48 22 531 03 00

EU residents outside Poland may also contact their local data protection authority.

9. COOKIES AND SIMILAR TECHNOLOGIES

Our website uses cookies and similar technologies. We classify them as follows:

Essential cookies — required for the site to function (e.g., remembering your cookie preferences, maintaining a login session). These do not require consent.
Analytics cookies — used to understand how visitors use the site. Only set if you consent via our cookie banner.
Marketing cookies — we currently do not use marketing or advertising cookies. If this changes, we will update this Policy and obtain your consent first.

You can manage your cookie preferences at any time via the cookie banner on our website, and you can also block or delete cookies through your browser settings. Blocking essential cookies may break parts of the site.

10. MARKETING COMMUNICATIONS

We send product announcements, release notes, and promotional emails only to users who have explicitly opted in — for example, by ticking the subscribe box at checkout or on our website.

Every marketing email contains a one-click unsubscribe link, and you can also unsubscribe by emailing support@justanother.audio. Transactional emails (license delivery, important service notices, replies to your support messages) are not affected by unsubscribing, as they are necessary to perform the contract with you.

11. CHILDREN

Our products and website are not directed to children under 16, and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact support@justanother.audio and we will delete it promptly.

12. SECURITY

We apply reasonable technical and organizational measures to protect your data, including:

Encryption of data in transit (HTTPS/TLS);
Encryption of sensitive data at rest where appropriate;
Access controls and authentication for internal systems;
Regular software updates and security patching;
Minimization — we only collect the data we actually need.

No method of transmission or storage is 100% secure. If we become aware of a personal data breach that poses a risk to your rights and freedoms, we will notify the UODO within 72 hours and, where required, notify affected users without undue delay (GDPR Art. 33–34).

13. CHANGES TO THIS POLICY

We may update this Policy from time to time to reflect changes in our practices, services, or the law. When we make material changes, we will:

Update the “Last Updated” date at the top of this page;
Post a notice on our website; and
Where changes materially affect you (e.g., new processing purposes), notify you by email if we have one on file.

Continued use of the Software or website after the updated Policy takes effect constitutes acceptance of the changes, subject to any new consent required by law.

14. CONTACT

For any question about this Privacy Policy or how we handle your data:

REAV Rafał Sztaba (d/b/a JustAnother Audio) ul. Poronińska 8/20, 02-459 Warsaw, Poland Email: support@justanother.audio Web: https://justanother.audio

Privacy Policy