Privacy Policy

Last Updated: December 27, 2025

Northern Valley Audio ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website northernvalleyaudio.com and purchase our audio software products.

Please read this Privacy Policy carefully. By using our website and services, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Information You Provide

When you make a purchase on our website, we collect information that you voluntarily provide through our payment processor, Stripe. This includes:

• Contact Information: Your name and email address
• Transaction Information: Details about the products you purchase, order date, and order amount

Payment Information

All payment processing is handled securely by Stripe. We do not collect, store, or have access to your full credit card number, debit card number, or bank account information. Stripe's collection and use of your payment information is governed by their Privacy Policy.

Information We Do Not Collect

We prioritize your privacy and minimize data collection:

• We do not use tracking cookies or analytics services
• We do not collect browsing behavior or usage patterns
• We do not store payment card details
• We do not collect data through third-party advertising networks

2. How We Use Your Information

We use the information we collect for the following purposes:

• Order Fulfillment: To process your purchase and deliver your software license and download links
• Order Confirmation: To send you email confirmation of your purchase
• Product Delivery: To provide you with download links for your purchased software
• Customer Support: To respond to your inquiries, provide technical support, and assist with any issues related to your purchase
• License Management: To generate and manage your software license key
• Legal Compliance: To comply with applicable laws, regulations, and legal processes

We do not sell your personal information. We do not use your information for marketing purposes unless you explicitly opt-in to receive promotional communications.

3. Third-Party Services

We use the following third-party services to operate our business. Each of these services has their own privacy policy governing how they handle your data:

Stripe (Payment Processing)

We use Stripe to process all payments. When you make a purchase, your payment information is collected and processed directly by Stripe. We receive only your name, email address, and transaction details necessary for order fulfillment. For more information, see Stripe's Privacy Policy.

Supabase (Data Storage)

We use Supabase to securely store order information, including your email address, purchase history, and license keys. Supabase provides enterprise-grade security and is compliant with industry standards. For more information, see Supabase's Privacy Policy.

Resend (Transactional Emails)

We use Resend to send transactional emails, including order confirmations and download links. Your email address is shared with Resend solely for this purpose. For more information, see Resend's Privacy Policy.

Vercel (Website Hosting)

Our website is hosted on Vercel. Vercel may collect standard web server logs including IP addresses for security and operational purposes. For more information, see Vercel's Privacy Policy.

4. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Order and License Data: We retain your order information and license keys indefinitely to allow you to re-download your purchases and for our records. This ensures you can always access your purchased products.
• Email Communications: Transactional email records are retained for up to 3 years for customer support purposes.
• Support Correspondence: Customer support communications are retained for up to 3 years to provide consistent service.

You may request deletion of your personal data at any time (see "Your Rights" below), subject to our legal obligations to retain certain information.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL
• Secure, encrypted database storage through Supabase
• Limited access to personal data on a need-to-know basis
• Regular security assessments of our systems and third-party providers
• Use of industry-standard payment processing through Stripe (PCI-DSS compliant)

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to maintaining the highest practical level of protection.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request that we correct any inaccurate or incomplete personal data.
• Right to Erasure: You can request that we delete your personal data, subject to certain legal exceptions.
• Right to Restrict Processing: You can request that we limit how we use your personal data.
• Right to Data Portability: You can request a copy of your data in a structured, machine-readable format.
• Right to Object: You can object to the processing of your personal data in certain circumstances.
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw that consent at any time.

To exercise any of these rights, please contact us at northernvalleyaudio@gmail.com. We will respond to your request within 30 days. We may need to verify your identity before processing your request.

7. Children's Privacy

Our website and services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at northernvalleyaudio@gmail.com. If we discover that a child under 13 has provided us with personal information, we will promptly delete such information from our systems.

8. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

Right to Know

You have the right to request that we disclose:

• The categories of personal information we have collected about you
• The categories of sources from which personal information is collected
• The business or commercial purpose for collecting personal information
• The categories of third parties with whom we share personal information
• The specific pieces of personal information we have collected about you

Right to Delete

You have the right to request that we delete personal information we have collected from you, subject to certain exceptions.

Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights. We will not deny you goods or services, charge you different prices, or provide a different level of service for exercising your rights.

Categories of Information Collected

In the past 12 months, we have collected the following categories of personal information:

• Identifiers: Name and email address
• Commercial Information: Records of products purchased

Sale of Personal Information

We do not sell your personal information. We have not sold any personal information in the preceding 12 months.

To submit a CCPA request, please contact us at northernvalleyaudio@gmail.com. You may also designate an authorized agent to make a request on your behalf.

9. International Users

Northern Valley Audio is based in the United States. If you access our website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located and our central database is operated.

By using our services, you acknowledge that your personal information may be transferred to the United States. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.

For European Economic Area (EEA) Users

If you are located in the EEA, we process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to fulfill our contractual obligations to you (e.g., delivering purchased products)
• Legitimate Interests: Processing necessary for our legitimate business interests (e.g., fraud prevention, customer support)
• Legal Compliance: Processing necessary to comply with our legal obligations

Data transfers from the EEA to the United States are conducted in compliance with applicable data protection laws, including the use of Standard Contractual Clauses where required.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. When we make material changes, we will:

• Update the "Last Updated" date at the top of this Privacy Policy
• Post the updated Privacy Policy on our website
• For significant changes, we may notify you via email (if we have your email address)

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will make every effort to respond to your inquiry within 30 days.