Legal

Privacy Policy

How Spy-da Productions Ltd collects, uses and protects personal information when you use our website, studio services, apps, online shop and Spy-da Audio plugins.

Last Updated: 23 October 2026 Controller: Spy-da Productions Ltd Law: UK GDPR & Data Protection Act 2018

1. Who We Are

Spy-da Productions Ltd (“we”, “us”, “our”) is the controller of the personal information described in this policy. If you have any questions or want to use your rights, contact us:

  • Email: info@spy-daproductions.com
  • Telephone: +44 (0) 207 101 4363

Our mobile apps and the Spy-da Music websites may have their own privacy information, which applies alongside this policy.

2. What We Collect and Why

Enquiries, bookings and studio services

Your name, email address, phone number, project details, and the audio, stems and files you send us. We use them to answer you, provide and invoice the services you book, and keep records. Lawful basis: contract, and our legitimate interest in running the studio.

Shop orders and subscriptions

Your name, email address, order history, the plugins and plans you buy, licence keys, subscription status and, for merchandise, your delivery address. Payments are handled by Stripe; we receive your Stripe customer and subscription references but never see or store your full card details. Lawful basis: contract, and legal obligation (tax and accounting records).

Signing in to My Plugins

Your email address and a one-time sign-in link that expires shortly after we send it. Lawful basis: contract.

Xynthea, our AI assistant

The messages you type into the Xynthea chat on our website, which are processed to generate replies, including by our AI service provider. Please don't share sensitive personal information in the chat. Lawful basis: legitimate interests (answering your questions).

Using our website

Like most websites, our server records technical information such as your IP address, browser type, the pages you request and the time of each request, to keep the site running and secure. Lawful basis: legitimate interests.

Emails from us

We send service emails such as receipts, licence keys, sign-in links and important account notices. We only send marketing emails if you have agreed to receive them, and you can unsubscribe at any time. Lawful basis: contract for service emails; consent for marketing.

3. Plugins and Licensing (Spy-da Guard)

When you activate a Spy-da plugin or app, and each time it checks in, it sends our licence server:

  • your licence key and the plugin and version;
  • a device identifier for your Mac, the name you have given your Mac, your macOS version and the host app (for example Logic Pro);
  • your IP address and the date and time of the activation or check-in.

We use this to activate and check your licence, apply the Mac limit, let you sign Macs out, prevent licence sharing and fraud, and give you support. Spy-da FX also contacts our server to check for updates and new patch packs, which records your IP address in our server logs. Album Builder works offline and does not send us your music or briefs. Lawful basis: contract, and our legitimate interest in protecting our software.

4. Cookies

  • spyda_shop — an essential cookie that keeps you signed in to My Plugins and remembers your bag. It is deleted when you close your browser.
  • Stripe — sets its own cookies on the checkout pages to process payments and prevent fraud.
  • Embedded videos — videos from YouTube or our video host may set cookies when you play them, under those providers' own policies.

We don't currently use advertising or analytics cookies. If that changes, we will ask for your consent first.

5. Who We Share It With

We don't sell your personal information. We share it only where needed with:

  • Stripe, our payment provider;
  • our web hosting provider, which stores our website, databases and email;
  • our AI service provider, for messages sent to Xynthea;
  • delivery companies, for merchandise orders (your name and address);
  • professional advisers such as accountants and lawyers, and authorities where the law requires it or to protect our rights.

6. International Transfers

Some providers, such as Stripe, may process information outside the UK. Where they do, the transfer is protected by UK adequacy regulations or approved safeguards such as the UK International Data Transfer Agreement or Addendum.

7. How Long We Keep It

  • Orders, invoices and payment records: 6 years after the end of the financial year they relate to, as UK tax law requires.
  • Account and licence records: while your account or licence is active, then as part of the order records above.
  • Licence activity logs, including IP addresses: up to 24 months.
  • Enquiries: up to 2 years after our last contact, unless they become a booking.
  • Client audio and project files: as set out in our Terms & Conditions. We don't provide permanent storage unless agreed.

8. Security

We use encrypted connections, signed licence files, hashed sign-in tokens and restricted admin access to protect your information. No system is completely secure, but we work to keep your information safe and will tell you and the ICO about a serious breach where the law requires.

9. Your Rights

Under UK data protection law you can ask us to:

  • give you a copy of your personal information;
  • correct information that is wrong or incomplete;
  • delete your information, or restrict how we use it;
  • stop using it for our legitimate interests or for marketing;
  • send information you gave us to you or another organisation in a portable format.

Where we rely on consent you can withdraw it at any time. Email info@spy-daproductions.com and we will reply within one month. If you're unhappy with how we handle your information, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113, but please contact us first so we can try to help.

10. Children

Our shop and services are for adults. Under-18s must have a parent or guardian's permission to book or buy, and we don't knowingly collect information from children under 13.

11. Changes to This Policy

We may update this policy from time to time. The date at the top shows when it last changed. We will tell customers by email about significant changes.