Legal
Privacy Policy
This Privacy Policy describes how Quadra Audio (“Quadra,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information in connection with our websites (including https://quadraaudio.com), Quadra ID accounts, online store, software activation and licensing, support, and related services (collectively, the “Service” or “Services”). We design, sell, and support professional audio software for macOS — including MATRIX, MEAS, and WAYS — and related websites and licensing tools.
This Policy is intended to meet transparency expectations under applicable U.S. state privacy laws and, where we process personal information of individuals in the European Economic Area (EEA), United Kingdom, or Switzerland, the EU/UK GDPR and related regimes. By using the Services, you acknowledge the practices described here. Where we rely on consent, you may withdraw it as described below.
NOTICE TO EUROPEAN USERS: Please see the section “Notice to European users” for additional information for individuals located in the EEA, UK, and Switzerland.
This Policy forms part of our relationship with you together with the Terms of Use & End User License Agreement, the Cookie Notice, and the Refund Policy.
1. Index
This Policy covers: personal information we collect; tracking technologies; how we use personal information; retention; how we share personal information; your choices; other sites and services; security; international data transfer; children; changes; how to contact us; U.S. state privacy rights; and a Notice to European users (including legal bases and GDPR rights).
2. Who is responsible
Quadra Audio is the controller of personal information processed for the purposes described in this Policy, except where a third party (such as a payment processor or identity provider) acts as an independent controller of data you provide directly to them.
Privacy contact: [email protected] (subject line: “Privacy”). Mailing address: Available upon written request to [email protected] (subject: Legal / Mailing Address). We do not currently appoint a statutory Data Protection Officer; if that changes we will publish contact details here.
3. Personal information we collect
Information you provide to us. Personal information you may provide to us through the Service or otherwise includes:
Contact data, such as your name, email address, billing or shipping contact details, and support correspondence.
Account data, such as Google account subject ID (when you sign in with Google), display name, profile image URL (if provided), and Account preferences.
Demographic data, such as city, state, country of residence, postal code, and approximate location derived from IP where relevant to the Service.
Communications, such as the content of messages you send us and related diagnostics you choose to provide.
Marketing data, such as your preferences for receiving our marketing communications and details about your engagement with them (if you opt in).
Payment and transactional data needed to complete transactions: product SKUs, quantities, prices, currency, coupons, order numbers, purchase timestamps, fulfillment status, and Stripe (or other processor) transaction identifiers. We do not receive your full payment card number when Stripe processes the card.
Licensing and activation data: product identifiers, license/trial status, seat bindings, hardware identifiers (HWID), activation and deactivation timestamps, redemption codes, and signed entitlement metadata needed to operate licensing.
Other data not specifically listed here, which we will use as described in this Privacy Policy or as otherwise disclosed at the time of collection.
Information from other sources. We may obtain personal information from:
Identity and payment partners: Google (for Quadra ID sign-in) and Stripe (or other processors) for payment status and order references.
Service providers that host our infrastructure acting on our instructions as processors — notably Cloudflare (website hosting on Cloudflare Pages) and Supabase (Postgres database, object storage, and Edge Functions that run checkout, account, admin, and licensing APIs).
Public sources, such as publicly available information, where relevant to fraud prevention or support.
Automatic collection. When you browse our Sites or use Software that contacts our servers, we may automatically collect technical and usage data such as IP address, approximate location derived from IP, browser type, device/OS type, referring URLs, pages viewed, timestamps, error/crash reports you send, and Software version strings. We do not collect precise mobile geolocation through a Quadra mobile app (we do not operate one).
For more information concerning our automatic collection of data, please see the Tracking technologies section below and our Cookie Notice at /legal/cookies.
4. Tracking & other technologies
We use cookies and similar technologies as described in our Cookie Notice (/legal/cookies), which is incorporated by reference. That Notice lists categories (essential, functionality, analytics, advertising, social), providers, and controls.
Strictly necessary: session, authentication, security, load balancing, and cart/checkout state. Our static website may store Quadra ID session tokens and related preferences in browser local storage rather than traditional cookies; those tokens are still necessary for Account, checkout, and activation features.
Analytics (if enabled): understanding aggregate traffic and feature usage. Where required by law, non-essential analytics cookies are used only with consent. You may withdraw consent via Cookie Preferences in the site footer, the cookie banner, or browser settings. We do not currently deploy third-party analytics cookies on the Sites.
We do not use session-replay tools, Flash LSOs, or mobile advertising SDKs on the Sites.
5. How we use your personal information
Service delivery and operations. We may use your personal information to: create and administer your Account; authenticate you; process orders and issue licenses; provide downloads, activation, and seat management; provide customer support; send transactional notices (receipts, security, material product notices); and operate, maintain, and improve the Service.
Service personalization. We may use your personal information to remember preferences and improve reliability of store and account flows.
Research and development. We may use de-identified or aggregated information to improve products, fix bugs, and understand aggregate usage. We do not use Your Content (audio projects you create) to train third-party generative AI models.
Marketing. We may use contact and marketing preference data to send product updates or offers only where permitted (consent and/or soft opt-in / legitimate interests with easy unsubscribe, as allowed by local law).
Compliance and protection. We may use personal information to: comply with law; enforce our Terms; protect rights, safety, and property; detect, prevent, and respond to fraud, piracy, security incidents, unauthorized access, and abuse of trials or seats; and establish, exercise, or defend legal claims.
With your consent. We may use personal information for other purposes disclosed to you and for which you provide consent.
6. Retention
We retain personal information for as long as necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements, to establish or defend legal claims, and to resolve disputes.
To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process it, and whether we can achieve those purposes through other means.
Account data: for the life of the Account, then a reasonable wind-down period unless longer retention is required.
Orders and invoices: for the period required by tax, accounting, and consumer law (often several years).
Licensing/seat records: for the life of the Entitlement and a subsequent period for fraud prevention, support, and legal claims.
Support tickets: for a period needed to resolve issues and improve support quality.
Server logs: typically for shorter operational windows unless needed for security investigation.
Marketing lists: until you unsubscribe or we delete inactive contacts.
When retention ends, we delete or irreversibly anonymize data where feasible.
8. Your choices
Access or update your Account information through Account settings where available, or by contacting us.
Delete your content or close your account. You can request Account closure by emailing us. Closing an Account may not erase licensing or order records we must retain for legal, fraud-prevention, or accounting purposes.
Opt out of marketing. Use the unsubscribe link in promotional emails or contact us. Transactional messages may still be sent when needed.
Cookies and similar technologies. Use Cookie Preferences in the footer, the cookie banner, or browser settings. See /legal/cookies.
Google account. Review Google’s privacy settings before signing in with Google.
Do Not Track. Some browsers offer “Do Not Track” signals. There is no consistent industry standard for responding to those signals; we treat cookie preference controls and applicable opt-out laws as the primary mechanisms.
9. Other sites and services
The Service may link to third-party websites, DAWs, operating systems, app stores, or services that we do not control. Their privacy practices are their own. Plugin hosts, operating systems, and Google/Stripe accounts remain under those providers’ policies.
10. Security
We implement technical and organizational measures designed to protect personal information appropriate to the risk, including HTTPS/TLS in transit, access controls, least-privilege practices for staff and systems, and signed licensing artifacts where applicable.
No method of transmission or storage is completely secure. You are responsible for protecting Account access on your devices and for signing out of shared computers.
If a personal data breach is likely to result in a high risk to your rights and freedoms, we will notify you and competent authorities as required by applicable law.
11. International data transfer
We are a company that may process and store personal information in the United States and other countries where we or our processors operate. Those countries may have data-protection laws different from your home country.
Where required (including transfers from the EEA/UK/Switzerland), we use appropriate safeguards such as Standard Contractual Clauses, processor certifications, or other lawful transfer mechanisms, and supplementary measures where appropriate.
Users in Europe should read the important information in the Notice to European users about transfer of personal information outside of Europe.
12. Children
Our Services are directed to adults and professionals. We do not knowingly collect personal information from children under 16 (or a higher age required locally), or under 13 where U.S. COPPA applies. If you believe a child provided data, contact us and we will take appropriate steps to delete it.
If you are under 18, use the Services only with involvement of a parent or guardian where required by law.
13. Changes to this Privacy Policy
We may update this Policy by posting a new version and changing the version identifier and effective date. Material changes will be highlighted by notice on the Site or via Account email where appropriate.
We will not materially reduce protections for personal information collected in the past without providing required notice or obtaining consent where the law requires it.
14. How to contact us
Email: [email protected] (subject: “Privacy”).
Mail: Available upon written request to [email protected] (subject: Legal / Mailing Address).
We do not currently publish a dedicated privacy phone line; email is the preferred contact method.
15. U.S. state privacy rights notice
Residents of certain U.S. states (including California, Colorado, Connecticut, Virginia, Nevada, and others with comprehensive consumer privacy laws) may have rights regarding their personal information. Depending on your state, these may include rights to:
Know / access. Request information about how we have collected and used your personal information, and obtain a copy of personal information we have collected about you.
Correct. Ask us to correct inaccurate personal information.
Delete. Ask us to delete personal information we have collected from you, subject to legal exceptions.
Opt out. Opt out of “sale” or “sharing” of personal information, targeted advertising, and certain profiling, as those terms are defined under applicable state law. We do not sell personal information as commonly understood, and we do not currently share personal information for cross-context behavioral advertising on the Sites.
Appeal. Appeal our denial of a request where your state law provides that right.
Nondiscrimination. Exercise these rights free from discrimination prohibited by applicable state privacy laws.
Exercising these rights. Submit requests by email to [email protected] with enough detail to verify your identity and locate your records. We may request additional information to authenticate your request. Authorized agents may submit requests where permitted by law, subject to verification.
Information practices (current and past 12 months). Categories collected typically include identifiers, commercial information, internet/electronic activity, and professional-related information as described in this Policy. Sources include you, automatic collection, and service providers. Business purposes include those listed in “How we use your personal information.” We disclose categories to service providers and as otherwise described in “How we share your personal information.” We do not sell personal information.
Additional information for California residents. California residents may have rights under the CCPA/CPRA as described above. California “Shine the Light” requests for certain third-party marketing disclosures may be submitted to the same email. We do not knowingly sell or share the personal information of consumers under 16.
16. Notice to European users
This section applies to individuals located in the EEA, UK, and Switzerland. References to “personal information” in this Privacy Policy should be understood to include a reference to “personal data” as defined under the GDPR/UK GDPR.
Controller. Quadra Audio is the controller in respect of the processing of your personal information covered by this Privacy Policy. Contact: [email protected].
Our GDPR representatives. We have not currently appointed an EU or UK Article 27 representative. If we appoint one, we will publish contact details here. You may also contact your local supervisory authority.
Personal information. We process the categories described in this Policy for the purposes described above.
Our legal bases for processing. In respect of each purpose, GDPR requires a lawful basis. Depending on the activity, we rely on: (a) performance of a contract with you (or steps prior to entering a contract) — for example Account, purchases, licensing, and support; (b) legitimate interests — for example securing Accounts, preventing fraud and piracy, improving products, and network security, balanced against your privacy interests; (c) legal obligation — for example tax, accounting, and responding to lawful requests; and (d) consent — for example non-essential cookies/analytics and certain marketing, which you may withdraw at any time without affecting the lawfulness of processing before withdrawal.
Sensitive personal information. We ask that you not provide us with sensitive personal information (for example social security numbers, health data, or biometric templates) through the Service unless we expressly request it for a stated purpose.
Data Processing outside Europe. We are based outside Europe and many of our service providers are also based in the United States or other countries. We may transfer your personal information to countries or territories whose laws have not been deemed to provide an adequate level of protection. Where we do so, we use appropriate safeguards such as Standard Contractual Clauses (and UK addenda where applicable), and we contractually require providers to maintain appropriate data protection safeguards and prohibit them from using personal information for their own purposes except as allowed by law.
Your GDPR rights. European data protection laws give you certain rights regarding your personal information, subject to conditions and exceptions. These include rights to: Access (information about our processing and a copy of your personal information); Correct (update or correct inaccuracies); Delete (erase where there is no good reason for continuing to process); Restrict (limit processing in certain cases); Object (to processing based on legitimate interests, and to direct marketing); Transfer (receive a machine-readable copy or have it transferred to another controller where applicable); and Withdraw Consent (where processing is based on consent).
No automated decision-making producing legal or similarly significant effects beyond administering Entitlements and security. We may use automated checks for fraud, payment risk, trial abuse, and seat limits. These checks may automatically refuse a duplicate trial or flag an order. You may contact us to contest a decision that blocked a legitimate purchase or activation.
Exercising these rights. Email [email protected]. We may need to verify your identity. We will respond within the time required by law (typically one month under GDPR, extendable where permitted).
Complaints. You may lodge a complaint with your local data protection authority. For the UK, contact the Information Commissioner’s Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, Tel. +44 303 123 1113, https://ico.org.uk. For the EEA, see https://edpb.europa.eu/about-edpb/board/members_en for your authority.
17. Quadra ID and Google sign-in
We use Google as an identity provider. When you sign in, Google authenticates you and, with your authorization, shares limited profile data with us. Google’s processing as an independent service is governed by Google’s privacy policy and your Google account settings.
If you do not want Google to share that data with us, do not sign in. Without an Account we generally cannot sell, activate, or manage licenses tied to Quadra ID.
18. Payments (Stripe and similar)
Checkout payments are processed by Stripe (or another processor we designate at checkout). The processor is typically the merchant of record or payment facilitator for the card transaction and processes payment data under its own privacy notice and terms.
We receive confirmation of payment, payer email or account identifiers, transaction IDs, and amounts needed to fulfill your order and prevent fraud. We do not store full payment card numbers on Quadra servers when the processor handles card entry.
19. Licensing telemetry and hardware identifiers
To issue, redeem, validate, move, or revoke licenses and trials, Software and our activation Services may process hardware identifiers, Account identifiers, product SKUs, and timestamps. This is analogous to device/license checks used by other pro-audio vendors to prevent fraud and seat abuse.
Legal basis: performance of the license contract and our legitimate interest in protecting Software. We retain seat/activation records as described in Retention.
Offline-activated Software may store a signed license locally (for example in the macOS Keychain). That local copy is under your control on the device; deletion of local licenses does not automatically erase server-side Entitlement history.
Version 2026-10-15.1. Related policies: Cookie Notice · Terms of Use · Refund Policy.