Privacy Policy

1. Who We Are

Stride ("we", "us", "our") publishes the Stride desktop application and operates the website at stridehub.io. Stride is a sound design engine for Ableton Live — a local desktop app that helps electronic music producers design modulation curves and apply them to instrument racks in Ableton Live.

For privacy inquiries, contact us at: home@stridehub.io

2. What Data We Collect

Data you provide directly:

• Email address (when you sign up to the waitlist or purchase a license)
• Artist / display name (if you provide one at waitlist signup — optional)
• Payment and billing information (collected by Lemon Squeezy — see Section 6)

Data we collect automatically:

• License key status (validated against our backend when you activate or re-check)
• Approximate activation machine identifier (hostname) — so your license can be tied to the devices you installed it on

Data we do NOT collect:

• Your Ableton rack files, MIDI clips, automation curves, or any content you create in Stride — all of that stays on your local machine and is never transmitted to us
• We do not use tracking cookies or third-party analytics
• We do not collect browsing behavior, IP addresses for profiling, or device fingerprints
• We do not purchase data from third parties

3. How We Use Your Data

• To deliver the service: validate your license key when you activate Stride or launch it periodically
• Order fulfillment: deliver your license key and receipt to the email you provided at purchase
• Service communications: critical updates (e.g. a bug-fix release, security advisory) sent to the email you used for purchase or waitlist signup

We do not use your data for advertising, profiling, or marketing without your explicit consent.

4. Legal Basis for Processing (GDPR)

If you are in the EU/EEA or UK, we process your personal data under the following lawful bases:

• Contract performance: order processing, license delivery, license validation — necessary to provide the product you purchased
• Legitimate interest: limiting license activations per seat, preventing fraud, critical service notices
• Consent: marketing communications, if any

5. Local-First Processing

Stride runs as a desktop application on your computer. All sound design work — scanning your Ableton racks, drawing automation curves, generating .alc files — happens entirely on your local machine. Your project files, MIDI data, instrument presets, and canvas state never leave your computer.

The only network traffic Stride initiates is:

• An occasional license-key validation call to our backend (Cloud Functions on Firebase), which proxies to Lemon Squeezy for activation and re-validation
• Downloading application updates, when prompted

Whatever you create in Stride is yours. Stride does not claim any ownership over content you produce with the software.

6. Third Parties Who Receive Your Data

We do not sell, rent, or share your personal data with any third party for advertising or marketing purposes.

7. International Data Transfers

Your data may be transferred to and processed in the United States, where Google, Supabase, and Lemon Squeezy operate servers. These transfers are protected by:

• The EU-US Data Privacy Framework
• Standard Contractual Clauses (SCCs) where applicable

Google, Supabase, and Lemon Squeezy are certified under applicable international transfer mechanisms.

8. Data Retention

• Waitlist email: retained until you unsubscribe or request deletion
• Purchase records (email, order, license key): retained for the lifetime of the license and as required by applicable tax law (up to 7 years)
• License validation logs: retained for up to 12 months for fraud prevention and support

Upon deletion request, all personal data we hold about you is purged from our systems within 30 days, subject to legal retention requirements for tax records.

9. Your Rights

All users:

• Access — request a copy of all data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request deletion of your account and all associated data
• Export — request your data in a machine-readable format (JSON)

Additional rights for EU/UK residents (GDPR):

• Restrict processing — request that we limit how we use your data
• Object to processing — object to processing based on legitimate interest
• Data portability — receive your data in a structured, machine-readable format
• Withdraw consent — where processing is based on consent, withdraw at any time
• Lodge a complaint — with your local Data Protection Authority

To exercise any of these rights, email home@stridehub.io. We will respond within 30 days.

10. Data Security

• All data is encrypted in transit (HTTPS/TLS)
• All data is encrypted at rest (Firebase and Supabase default encryption)
• Passwords are hashed by Firebase Authentication — we never store plaintext passwords
• Access to production data is restricted to authorized personnel only

11. Local Storage

Stride's desktop app stores your license status, settings, and your canvas sessions locally on your computer (in your user-data folder). This data is never transmitted to us and is purely there to keep the app working between launches.

Our website does not use cookies for tracking, advertising, or analytics. No third-party tracking technologies are present on our site.

12. Children's Privacy

Stride is not directed at children. You must be at least 16 years old to create an account. We do not knowingly collect personal data from anyone under 16. If we become aware that we have collected data from a child under 16, we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a notice in the app. Continued use of the service after changes constitutes acceptance of the updated policy.

Previous versions are available upon request.

14. Contact

For any privacy-related questions or requests:

Email: home@stridehub.io