Privacy Policy

1. Information We Collect

We collect the following information:

• Purchase Information: Name, email address, billing address, and payment details (processed securely by Lemon Squeezy, our Merchant of Record)
• License Activation: Email address and machine identifiers for software authorization
• Account Information: Email, password (encrypted), and preferences when you create an account
• Newsletter Subscription: Email address and preferences if you opt in to marketing communications
• Website Analytics: Anonymous usage data to improve our website
• Support Communications: Messages you send to our support team

2. How We Use Your Information

Your information is used to:

• Process your purchases and deliver software downloads
• Verify software licenses and prevent unauthorized use
• Send order confirmations and important product updates
• Provide technical support
• Send marketing emails about new products and offers (only if you opt in)
• Improve our products and services
• Comply with legal obligations

3. Marketing Communications

We only send marketing emails if you explicitly opt in during checkout, account signup, or through our newsletter form. You can unsubscribe at any time by clicking the unsubscribe link in any email or contacting us directly. We use Amazon SES to send emails securely.

4. Data Sharing

We do not sell your personal information. We share data only with trusted service providers who help us operate our business: our payment Merchant of Record (Lemon Squeezy), cloud services (AWS), and email providers (Amazon SES). These partners are contractually obligated to protect your data.

5. Ambitura Data Processing

Ambitura processes all video content locally on your machine. No video files, frames, or content are ever uploaded to our servers during local analysis. The only data transmitted is license verification information (user ID, machine ID) and optional bug reports you choose to submit.

6. AI Data Processing

Ambitura uses artificial intelligence for scene detection and classification. Here is how your data is handled in each AI mode:

• Local AI Processing: Pre-trained vision models run entirely on your device. No data is transmitted. No internet connection is required.
• Cloud AI Processing (Optional): When you enable Cloud AI features, low-resolution frame snapshots extracted from your video are transmitted to Amazon Web Services (AWS) for classification via AWS Bedrock AI services. Full video files are never uploaded. Frame data is processed in real-time and is not stored by AWS beyond the duration of the API request (subject to AWS abuse-detection logging as described in the AWS Service Terms, Section 50.3). AWS does not use API inputs or outputs to train its models.
• AI Verification Agent (Optional): Runs locally using Google Gemma 3 via the Ollama runtime. No data is sent to Google or any external service.

What we never send to AI services: video files, file names, file paths, personal information, project names, or any data beyond anonymized frame snapshots required for scene classification.

7. Third-Party Sub-Processors

The following third-party service providers may process your data:

All sub-processors are contractually obligated to protect your data. We maintain Data Processing Agreements with each provider. For GDPR purposes, Paraflex Audio (Daniel Dunevsky, Israel) acts as the data controller, and the above providers act as data processors/sub-processors. Lemon Squeezy acts as an independent data controller for payment and tax data it processes as Merchant of Record.

8. Optional Usage Analytics (Ambitura)

Ambitura offers optional, opt-in usage analytics to help us improve the software. When you first launch Ambitura after activation, you will be asked whether you consent to share anonymous usage data. This is entirely voluntary.

If you consent, we collect:

• Feature usage patterns (which tools you use most)
• Performance metrics (processing times, memory usage)
• Error occurrences (crash reports, exceptions)
• Workflow completion rates
• Operating system type and version
• Application version

We never collect:

• Video content, file names, or file paths
• Personal identifiable information (names, emails)
• Project names or creative content
• Keyboard input or screen recordings

All data is anonymized using one-way hashing before transmission. Data is sent only when you close the application, minimizing any performance impact. You can change your analytics preference at any time in Ambitura Settings → Privacy. Analytics data is retained for 90 days and then automatically deleted.

9. Data Security

We implement industry-standard security measures to protect your data. Payment information is processed securely through Lemon Squeezy, our Merchant of Record. Passwords are hashed and never stored in plain text. However, no method of transmission over the internet is 100% secure.

10. Your Rights (GDPR & Data Subject Requests)

Under the General Data Protection Regulation (GDPR) and applicable data protection laws, you have the following rights regarding your personal data:

• Right of Access: Request a copy of all personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your data (subject to legal retention requirements)
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing of your data for marketing purposes
• Right to Restrict Processing: Request that we limit how we use your data
• Right to Withdraw Consent: Withdraw consent for analytics or marketing at any time

How to Exercise Your Rights

To submit a data access, deletion, portability, or any other GDPR request:

1. Send an email to support@paraflexaudio.com with the subject line "GDPR Data Request"
2. Include the email address associated with your account so we can locate your data
3. Specify which right you are exercising (access, deletion, portability, etc.)
4. We will verify your identity and respond within 30 days

What we will provide on access request: A JSON export of your account data, purchase history, license activations, subscription status, support tickets, and any analytics data associated with your account.

What happens on deletion request: We will delete your account, personal data, and associated records. Certain data may be retained where required by law (e.g., financial transaction records for tax purposes, retained for up to 7 years as required by Israeli tax law). License keys will be deactivated. This action is irreversible.

For payment-related data: Purchase invoices and payment records processed by Lemon Squeezy (our Merchant of Record) are subject to their own retention policies. Contact Lemon Squeezy directly for data requests related to payment processing.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection supervisory authority.

11. Data Retention

We retain purchase records for accounting and licensing purposes. Newsletter preferences are kept until you unsubscribe. Analytics data is automatically deleted after 90 days. You can request deletion of your account, but we may need to retain certain information for legal compliance and fraud prevention.

12. Cookies & Site Telemetry

Our website uses essential cookies for cart functionality and session management. With your consent, we collect anonymous site telemetry to understand how visitors navigate our website. This helps us improve the browsing experience and product discoverability.

What site telemetry collects (only with consent):

• Page views and navigation patterns
• Button clicks (e.g., "Add to Cart", "Download")
• Purchase intent signals (viewing pricing, adding to cart)
• Device type (desktop/mobile) and country (from request headers)
• Referrer source (which website directed you here)

Privacy protections built in:

• IP addresses are never stored. A one-way hash with a daily rotating salt creates an anonymous visitor ID that cannot be reversed to your real IP.
• No personally identifiable information is collected or stored.
• Telemetry only activates when you click "Accept All" on the cookie banner.
• All telemetry data is automatically deleted after 90 days.
• Data is stored in AWS DynamoDB (EU region eu-central-1).

You can control cookie preferences through the cookie banner. Selecting "Essential Only" disables all analytics and telemetry collection.

13. International Transfers

Your data may be processed in the European Union (AWS eu-central-1 region). We ensure appropriate safeguards are in place for any international data transfers.

14. Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children.

15. Changes to This Policy

We may update this privacy policy periodically. We'll notify you of significant changes via email or website notice.

16. Contact

Questions about privacy? Contact us at support@paraflexaudio.com