Version 2.1

Who is the controller

Organic Pedal, at contato@organicpedal.com, for any request about your data. Payment data is handled by Paddle, which is the seller in your purchase.

What we collect

• At sign-in (OP Central and site): when you sign in with e-mail and password, we receive your e-mail and store the account in the sign-in service (Firebase Authentication, from Google), which protects your password and does not give it to us; when you sign in with Google, we receive your e-mail, name and an account identifier, without your Google password.
• In the trial and subscription: we store the account identifier, which plugins you tried and when, the subscription status (plan, status, end of period), received from Paddle, and the cancellation or refund requests you make. To prevent repeated trials, we also store a scrambled version (hash) of your e-mail, which cannot be read back.
• At purchase: Paddle collects name, e-mail, country and payment data to process the order, as reseller, according to its own privacy policy. We have no access to your card number.
• Computers on the account (OP Central): each account can be used on up to two computers. To enforce that limit, for each computer we store a random identifier generated by OP Central, the computer name, the system (Windows or Mac) and the date of last use. You can remove a computer from the account at any time, and it is deleted.
• Update checks: OP Central asks our server whether there are new plugins or versions and to renew the license (at computer startup and every hour, in the background, if you keep the options on in Settings; automatic updating only happens at computer startup). Like any server, it sees the IP address of the request. We use the IP only for abuse protection (rate limiting). Your Settings preferences stay on your computer only.
• In OP Central and the plugins: OP Central queries our server to renew your license and stores a digital certificate on your computer. The plugins work without internet and do not send your audio or what you do in them.
• On the site: we do not use tracking cookies or analytics tools. Sign-in (e-mail and password or Google) and Paddle checkout may use cookies necessary for them to work.

What we use it for

Identifying your account, unlocking and renewing access, enforcing the computer limit, providing support, processing refunds, preventing abuse of the free trial and complying with legal and tax obligations (legal bases: performance of a contract, compliance with a legal obligation and legitimate interest for fraud prevention).

Who we share it with

With Paddle (payments), with Google (sign-in, via Firebase Authentication) and with Cloudflare (server and database that store the trial and subscription). We do not sell data.

International transfer

Paddle, Google and Cloudflare process data outside Brazil (our database is located in North America), with the safeguards provided in their contracts and in the LGPD (Brazilian data protection law).

For how long

While the account exists and for the legal and tax periods. To prevent repeated trials, the scrambled e-mail record may be kept even after the account is deleted.

Security

Communications use HTTPS. The OP Central sign-in is stored encrypted on your computer. Plugin and OP Central files are downloaded from our server and checked with a verification code. No system is completely immune to failures: if an incident affects your data, we will notify you and the competent authority as required by law.

Your rights

You can request access, correction or deletion of your data, and information about its processing, at the e-mail above. You can also complain to the Brazilian National Data Protection Authority (ANPD).