Privacy
How S9 Audio handles your information.
Version 2026-10-23.2.
Contents
Who is responsible
SZ9 AB, trading as S9 Audio, controls the customer information described here. For privacy requests, email contact@s9audio.com. Full business contact details are in Purchase terms.
Your files
Our audio plugins process your audio locally and do not automatically upload projects, audio or your sample library. They do not automatically upload usage analytics or crash reports. Files you choose to share, export or back up are subject to your chosen services and recipients. Support examples are used to resolve your request, not to train models on your audio.
Plugin updates
When online, our audio plugins use technical request information, including IP address, product version and request time, to check for updates. Products with restricted downloads also use their licence. Activation-free products do not send a licence or device fingerprint for update checks. Moonbase handles update checks and downloads; Netlify supplies release metadata and artwork. Audio, projects and library contents are not sent. Updates are not installed automatically.
Feedback you choose to send
Send Feedback sends your message, email and the app, DAW and system details you can review before sending to support@s9audio.com. We use them to reply and investigate your report. Technical details do not include audio, project files, sample names or paths, licence keys or unique device identifiers. Do not include private or confidential information in your message. We keep short pseudonymous delivery and sending-limit records for 30 days without activity; support correspondence follows the retention period below.
Purchase withdrawal form
The withdrawal form sends your name, receipt email and purchase reference or description to support, and emails you a receipt. No account or marketing consent is required. We keep short pseudonymous delivery and sending-limit records for 30 days without activity; correspondence follows the support and purchase-record retention periods below. Do not include payment-card details, passwords or licence keys.
Information we handle
Website visits and feedback requests provide technical information such as IP address, browser, requested page and time. Accounts, purchases and support provide contact details, messages, order/payment references, accepted terms and subscription/refund status. Online activation and renewal use account/licence identifiers, device fingerprints, device names where provided and technical request information. Linked device identifiers are personal data. We receive this information from you, your device and the relevant service providers. We do not receive full payment-card numbers.
Optional website statistics
If you allow statistics, PostHog measures public-page visits, feature interest, trial and checkout clicks, device/browser type, approximate location, loading performance and campaign sources using a random browser identifier. We do not send form contents, email addresses, account pages, licence keys or full page-query strings to PostHog. There are no session recordings. With consent, campaign labels and the referring domain may also accompany links to Moonbase so we can attribute sales. Reject or withdraw through Privacy choices in the footer; browsing and purchases still work.
Optional advertising measurement
Separately, if you allow advertising, configured Meta Pixel and Google Ads tags measure public-page visits, product interest, clicks towards checkout, trials or downloads, and confirmed paid orders when you return from checkout. Paid-order events contain the order reference, product, amount paid and currency. Campaign labels may accompany the order so we can compare ad sales. These services receive technical information such as IP address, browser, page address and ad/click identifiers and may connect activity with information they already hold, including an account with their service. Meta supports Instagram and Facebook advertising; Google supports YouTube and other Google Ads campaigns. Their privacy notices explain their processing. We do not provide form contents, email addresses, licence keys or account pages to these tags or enable automatic form matching. We verify payment status with Moonbase before reporting a paid order; clicks and zero-value orders do not count as purchases. Tags stay off until your advertising choice; statistics consent alone does not enable them. Withdraw through Privacy choices.
Purposes and legal bases
We use necessary account, purchase, activation and update data to provide the contract you request; without it we cannot provide those functions. Accounting and statutory requests are handled under legal obligations. Security, fraud prevention, business correspondence and legal claims rely on our legitimate interests in operating and protecting the service. Optional website statistics, advertising measurement and optional marketing rely on consent, which you may withdraw separately. We do not sell customer records. Automated entitlement/security checks can restrict a request; contact us for human review of a mistake.
Who receives information
Netlify hosts our website and processes feedback and withdrawal requests. PostHog provides optional statistics in its EU cloud; IP addresses are used for approximate location and are not retained in our PostHog events. Meta and Google receive advertising measurement information when you allow the relevant optional tracking. Moonbase provides checkout, customer accounts, licensing and digital delivery. Zoho ZeptoMail delivers transactional messages, and Zoho Mail holds support correspondence. Each receives the information needed for its service. Payment and advertising providers handle data under their own applicable privacy notices. Authorised staff, professional advisers and authorities receive information where needed for their work or required by law. These services operate in the EEA and may process data in the United States or other countries outside it.
International transfers
Transfers outside the EEA require applicable safeguards, such as an adequacy decision or EU standard contractual clauses and any necessary additional protection. Contact us for information about relevant recipients, processing locations and safeguards, or a copy of the safeguards.
Retention
We keep minimal licence/purchase records for the duration needed to establish and provide your entitlement, including lifetime license rights. Swedish accounting records are kept for seven years after the calendar year in which the financial year ended. Ordinary support records are reviewed for deletion within 24 months of resolution. Temporary authentication data expires with its link/session; security records are retained for the relevant operational issue or investigation. Legal obligations or ongoing claims may require longer retention. Optional PostHog events are retained for up to one year. Browser statistics identifiers, campaign attribution and advertising purchase deduplication records last up to 30 days; pending checkout references remain in tab storage for up to one day; advertising attribution cookies typically last up to 90 days. Your optional tracking choices last 180 days. Advertising providers explain retention of information they receive in their privacy notices. We review continued need and applicable provider log, email and backup expiry.
Your rights
Where applicable, you may request access, correction, erasure, restriction, portability, or object to processing based on legitimate interests. Withdrawing consent does not affect earlier lawful processing. We normally respond within one month, explain any lawful extension or refusal, and request only proportionate identification. You may complain to IMY in Sweden or the relevant authority where you live, work or believe a breach occurred.
Cookies and changes
See Cookies for browser storage and external services. Material changes to data use will be explained where required; optional tracking requires any applicable prior choice. Reading this notice is not consent.