Privacy Policy

SetMaster Pro — Last updated: April 2026

This Privacy Policy explains how SetMaster Pro collects, uses, stores, and protects your personal data. The Service is available worldwide. We comply with the UK GDPR, EU GDPR, CCPA/CPRA (California), PIPEDA (Canada), and Australia's Privacy Act 1988.

1. Who We Are

SetMaster Pro is a sole trader business based in the United Kingdom, operating under the trading name SetMaster Pro.

Data Controller contact: privacy@setmasterpro.com

2. What Personal Data We Collect

2.1 Account data

  • Email address
  • Display name or DJ/artist name
  • Encrypted password (we never have access to your plain-text password)
  • Account creation date

2.2 Billing data

  • Stripe customer and subscription ID
  • Subscription tier and status
  • Billing history (amounts and dates only — no card details)
  • Billing country for tax purposes

2.3 Usage data

  • File metadata (filename, size, upload timestamp)
  • Mastering jobs (profile selected, format, status)
  • Monthly usage count
  • Login timestamps and IP addresses

2.4 Audio files

Audio files are stored temporarily for processing only. We do not listen to, transcribe, analyse, or use your audio for any purpose other than the mastering service. Files are automatically deleted after your plan's retention period (3–30 days).

2.5 Technical data

  • IP address
  • Browser type and version
  • Device type
  • Pages visited and time spent
  • General geographic location (country level)

3. How We Use Your Data

PurposeLegal basis
Account management and authenticationContract performance
Processing your audio filesContract performance
Payment processing and subscriptionsContract performance
Service emails (receipts, download alerts)Contract performance
Fraud prevention and securityLegitimate interests
Usage analytics to improve the ServiceLegitimate interests
Tax calculation and legal complianceLegal obligation
Marketing communicationsConsent

4. Third-Party Processors

We do not sell your personal data. We do not share data with third parties for their marketing purposes. We use the following processors:

ServicePurposeLocation
SupabaseAuthentication & databaseEU (Ireland)
Amazon S3Audio file storageEU (Ireland)
StripePayment processingUSA (SCCs)
RailwayAudio processingUSA (SCCs)
ResendTransactional emailUSA (SCCs)
PostHogProduct analyticsEU

For US-based processors, Standard Contractual Clauses (SCCs) are in place to protect your data.

5. Data Retention

Data typeRetention period
Account dataUntil deletion + 30 days
Audio files3–30 days (plan dependent)
Billing records7 years (UK legal requirement)
Support correspondence3 years
Usage logs12 months

6. Your Rights

6.1 UK and EU users (UK GDPR / EU GDPR)

  • Right of access — request a copy of your personal data
  • Right to rectification — request correction of inaccurate data
  • Right to erasure — request deletion of your personal data
  • Right to restriction — request we limit processing in certain circumstances
  • Right to data portability — receive your data in a machine-readable format
  • Right to object — object to processing based on legitimate interests

6.2 California residents (CCPA/CPRA)

  • Right to know — request disclosure of categories and specific pieces of personal information collected
  • Right to delete — request deletion of your personal information
  • Right to correct — request correction of inaccurate information
  • Right to opt out of sale — we do not sell or share your data for advertising; no action needed
  • Right to non-discrimination — we will not discriminate for exercising your rights

To submit a CCPA request, email privacy@setmasterpro.com with subject "California Privacy Request". We respond within 45 days.

6.3 Canadian users (PIPEDA)

You have the right to access your personal information and challenge its accuracy. Contact privacy@setmasterpro.com.

6.4 Australian users (Privacy Act 1988)

You have rights under the Australian Privacy Principles including access and correction. Contact privacy@setmasterpro.com.

7. International Data Transfers

SetMaster Pro is based in the United Kingdom. Your data may be transferred to and processed in the UK, EU, and USA. We ensure all transfers are protected by appropriate safeguards including Standard Contractual Clauses (SCCs).

8. Security

  • Encryption in transit (HTTPS/TLS)
  • Encrypted password storage (bcrypt)
  • Access controls limiting data access
  • Regular security reviews
  • Security-certified cloud providers (AWS, Supabase)

9. Children

The Service is not directed at children under 18. We do not knowingly collect data from children. Contact privacy@setmasterpro.com if you believe we have collected data from a child.

10. Complaints

UK: Information Commissioner's Office — ico.org.uk — 0303 123 1113

EU: Your local member state data protection authority — edpb.europa.eu

Australia: OAIC — oaic.gov.au — 1300 363 992

Please contact us first at privacy@setmasterpro.com — we aim to resolve all complaints within 14 days.

11. Contact

SetMaster Pro — privacy@setmasterpro.com — setmasterpro.com