Privacy Policy
SetMaster Pro — Last updated: April 2026
This Privacy Policy explains how SetMaster Pro collects, uses, stores, and protects your personal data. The Service is available worldwide. We comply with the UK GDPR, EU GDPR, CCPA/CPRA (California), PIPEDA (Canada), and Australia's Privacy Act 1988.
1. Who We Are
SetMaster Pro is a sole trader business based in the United Kingdom, operating under the trading name SetMaster Pro.
Data Controller contact: privacy@setmasterpro.com
2. What Personal Data We Collect
2.1 Account data
- —Email address
- —Display name or DJ/artist name
- —Encrypted password (we never have access to your plain-text password)
- —Account creation date
2.2 Billing data
- —Stripe customer and subscription ID
- —Subscription tier and status
- —Billing history (amounts and dates only — no card details)
- —Billing country for tax purposes
2.3 Usage data
- —File metadata (filename, size, upload timestamp)
- —Mastering jobs (profile selected, format, status)
- —Monthly usage count
- —Login timestamps and IP addresses
2.4 Audio files
Audio files are stored temporarily for processing only. We do not listen to, transcribe, analyse, or use your audio for any purpose other than the mastering service. Files are automatically deleted after your plan's retention period (3–30 days).
2.5 Technical data
- —IP address
- —Browser type and version
- —Device type
- —Pages visited and time spent
- —General geographic location (country level)
3. How We Use Your Data
| Purpose | Legal basis |
|---|---|
| Account management and authentication | Contract performance |
| Processing your audio files | Contract performance |
| Payment processing and subscriptions | Contract performance |
| Service emails (receipts, download alerts) | Contract performance |
| Fraud prevention and security | Legitimate interests |
| Usage analytics to improve the Service | Legitimate interests |
| Tax calculation and legal compliance | Legal obligation |
| Marketing communications | Consent |
4. Third-Party Processors
We do not sell your personal data. We do not share data with third parties for their marketing purposes. We use the following processors:
| Service | Purpose | Location |
|---|---|---|
| Supabase | Authentication & database | EU (Ireland) |
| Amazon S3 | Audio file storage | EU (Ireland) |
| Stripe | Payment processing | USA (SCCs) |
| Railway | Audio processing | USA (SCCs) |
| Resend | Transactional email | USA (SCCs) |
| PostHog | Product analytics | EU |
For US-based processors, Standard Contractual Clauses (SCCs) are in place to protect your data.
5. Data Retention
| Data type | Retention period |
|---|---|
| Account data | Until deletion + 30 days |
| Audio files | 3–30 days (plan dependent) |
| Billing records | 7 years (UK legal requirement) |
| Support correspondence | 3 years |
| Usage logs | 12 months |
6. Your Rights
6.1 UK and EU users (UK GDPR / EU GDPR)
- —Right of access — request a copy of your personal data
- —Right to rectification — request correction of inaccurate data
- —Right to erasure — request deletion of your personal data
- —Right to restriction — request we limit processing in certain circumstances
- —Right to data portability — receive your data in a machine-readable format
- —Right to object — object to processing based on legitimate interests
6.2 California residents (CCPA/CPRA)
- —Right to know — request disclosure of categories and specific pieces of personal information collected
- —Right to delete — request deletion of your personal information
- —Right to correct — request correction of inaccurate information
- —Right to opt out of sale — we do not sell or share your data for advertising; no action needed
- —Right to non-discrimination — we will not discriminate for exercising your rights
To submit a CCPA request, email privacy@setmasterpro.com with subject "California Privacy Request". We respond within 45 days.
6.3 Canadian users (PIPEDA)
You have the right to access your personal information and challenge its accuracy. Contact privacy@setmasterpro.com.
6.4 Australian users (Privacy Act 1988)
You have rights under the Australian Privacy Principles including access and correction. Contact privacy@setmasterpro.com.
7. International Data Transfers
SetMaster Pro is based in the United Kingdom. Your data may be transferred to and processed in the UK, EU, and USA. We ensure all transfers are protected by appropriate safeguards including Standard Contractual Clauses (SCCs).
8. Security
- —Encryption in transit (HTTPS/TLS)
- —Encrypted password storage (bcrypt)
- —Access controls limiting data access
- —Regular security reviews
- —Security-certified cloud providers (AWS, Supabase)
9. Children
The Service is not directed at children under 18. We do not knowingly collect data from children. Contact privacy@setmasterpro.com if you believe we have collected data from a child.
10. Complaints
UK: Information Commissioner's Office — ico.org.uk — 0303 123 1113
EU: Your local member state data protection authority — edpb.europa.eu
Australia: OAIC — oaic.gov.au — 1300 363 992
Please contact us first at privacy@setmasterpro.com — we aim to resolve all complaints within 14 days.
11. Contact
SetMaster Pro — privacy@setmasterpro.com — setmasterpro.com