Privacy policy
What personal data Spectro collects, why, who processes it, how long it is kept and how to exercise your GDPR rights.
Controller
[Full legal name or company name] ([NIF / CIF]), [Street, number, postcode, city, Spain]. Contact for anything about your data: support@spectrovst.com.
What we collect
Account: email, name, country, language, password (stored only as a salted hash), two-step verification secret if you enable it, and marketing preference.
Purchases: plan, amount, dates, Stripe references and billing country.
Licence and computer: licence code, a machine identifier generated by the plugin, computer name, operating system and plugin version, and when it last checked in.
Security: for each sign-in session, the browser’s user agent and IP address, so you can review and close sessions.
What we don’t collect
Card details (they stay with Stripe), your audio, your projects or what you do inside the plugin. No analytics, advertising or tracking tools.
Why and on what legal basis
To create and run your account, sell and deliver licences, activate the plugin and provide downloads and support: performance of the contract (GDPR art. 6.1.b).
To keep accounts secure and prevent licence abuse and fraud: legitimate interest (art. 6.1.f).
To keep invoices and accounting records: legal obligation (art. 6.1.c).
To send product news, only if you opt in: consent (art. 6.1.a), which you can withdraw in your profile at any time.
Who processes it for us
Stripe Payments Europe, Ltd. (Ireland): payments, invoices and tax calculation.
Nominalia (Soluciones Corporativas IP, S.L.U., Spain): sending account emails (verification, password reset, receipts).
[Hosting provider of the server, country]: hosting of the server where the website and database run.
They act only on our instructions under data processing agreements. Stripe may transfer data outside the EEA with the safeguards of the EU–US Data Privacy Framework or standard contractual clauses.
How long we keep it
Account and licence data while your account exists. When you delete your account, it is erased immediately, except purchase and invoice records, which we must keep for as long as tax and commercial law require (in Spain, generally up to six years). Expired sign-in sessions and verification links are deleted automatically.
Your rights
You can access, correct, delete or export your data, object to or restrict its processing, and withdraw consent: much of it directly in your account, or by writing to support@spectrovst.com. If you are not satisfied, you can complain to the Spanish Data Protection Agency (aepd.es).
Security
Connections are encrypted (HTTPS), passwords are hashed with scrypt, sessions use secure cookies, two-step verification is available, and licence tokens are digitally signed.
Cookies
We use one strictly necessary cookie to keep you signed in. Details in the cookie policy.