Privacy Policy

1. Who we are

"ZAK Sound", "we", "us" and "our" refer to the independent music technology business operating zaksound.com from Buenos Aires, Argentina. ZAK Sound is the data controller for any personal information processed through this site. You can reach us at any time at ben@zaksound.com for privacy questions, data requests, or anything else.

2. What we collect

Information you give us

• Account data: when you create an account, we store your email address and a hashed password. Optionally, you may add your name and country.
• Order data: when you buy a product, we store the items purchased, the order total, the currency, and the date of the purchase.
• Payment data: we never see or store your card or payment details. Payments are processed directly by Stripe, PayPal, and other regional providers (see section 5).
• Support correspondence: if you write to us, we keep the email so we can answer and refer back to it later.

Information collected automatically

• Anonymous analytics: we use Umami, a privacy-friendly analytics tool that does not use cookies, does not track you across sites, and does not store your IP address. It tells us which pages are popular and how people arrive at the site, nothing more.
• Ad performance measurement (Meta CAPI): when you complete a purchase, we may send a server-to-server "Purchase" event to Meta's Conversions API so we can measure ad performance. The data sent is limited to: a hashed (SHA-256) version of your email, your country, your postcode, the order value, and the currency. No cookies are set in your browser as part of this. For EU/EEA/UK visitors this only happens with explicit opt-in via our cookie banner; for visitors elsewhere it runs by default and can be opted out from Cookie Settings.
• Server logs: our hosting providers keep short-lived technical logs (IP address, user agent, request time) for security and abuse prevention.

Information stored in your browser

We store a few small items locally in your browser to make the site work. These are not tracking cookies and are exempt from cookie consent requirements under ePrivacy law because they are strictly necessary to deliver the service you requested:

• Cart identifier (localStorage): so your cart survives a page refresh.
• Affiliate / UTM tag: if you arrive via an affiliate link, we remember the affiliate code so they can be credited if you buy. By default we store this in sessionStorage for visitors in the EU/EEA/UK without consent — meaning attribution lasts only as long as the current browser tab. For visitors elsewhere, or for EU visitors who opt in via our cookie banner, we store it in localStorage with a 30-day window so partners are still credited if you come back later. Either way, the data lives only in your browser and is never shared with third parties.
• Login session: standard authentication data so you stay signed in.

3. Why we collect it (legal basis)

• To deliver your purchase — contractual necessity (GDPR Art. 6(1)(b)).
• To send you license keys, download links, and invoices — contractual necessity.
• To run our affiliate program — legitimate interest (GDPR Art. 6(1)(f)) in fairly compensating partners who refer customers.
• To understand site usage in aggregate — legitimate interest, using only privacy-respecting tools.
• To measure the performance of our advertising (Meta CAPI) — for EU/EEA/UK visitors, consent (GDPR Art. 6(1)(a)) collected through our cookie banner. For visitors outside those jurisdictions, legitimate interest in understanding which campaigns are profitable.
• To comply with tax and accounting law — legal obligation.

4. How long we keep it

• Account and order data: for as long as your account exists, plus the period required by tax law (typically up to 10 years for invoices).
• Affiliate / UTM tag in your browser: until you close the tab (EU without consent), or up to 30 days from the last UTM-bearing visit (everywhere else, or EU with consent).
• Cart identifier: until the cart is checked out, abandoned, or you clear your browser storage.
• Server logs: typically 30 days.
• Anonymous analytics: aggregated indefinitely; no personal data is stored.

5. Who we share data with

We only share data with the service providers we need to operate the store. Each one acts as a processor on our behalf and is bound by appropriate data-protection terms.

• Moonbase — handles our store, orders, license delivery, and payment routing. moonbase.sh
• Stripe, PayPal, and regional payment providers (iDEAL, Bancontact, MobilePay, EPS) — process payments. They receive the data they need to charge your card or bank account.
• Umami Cloud — anonymous, cookieless analytics. EU-hosted.
• Email delivery providers — to send you order confirmations, license keys, and password reset emails.
• Meta Platforms, Inc. (Facebook / Instagram) — receives hashed conversion events via the Conversions API for ad measurement. Only sent for EU users who opt in, or for non-EU users by default. Opt out anytime via Cookie Settings.
• YouTube (in privacy mode) — product demo videos are embedded via youtube-nocookie.com, which does not set tracking cookies until you actively press play.

We do not sell, rent, or trade your personal information. We do not share data with advertisers.

6. International transfers

ZAK Sound operates from Argentina, which the European Commission has formally recognised as offering an adequate level of data protection (Decision 2003/490/EC). Some of our processors are based in the United States; in those cases we rely on Standard Contractual Clauses or equivalent safeguards.

7. Your rights

If you are in the European Economic Area, the United Kingdom, Switzerland, or any jurisdiction with comparable data-protection laws, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data ("right to be forgotten"), subject to our legal retention obligations.
• Object to or restrict certain kinds of processing.
• Receive a copy of your data in a portable format.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with your local data-protection authority.

To exercise any of these rights, simply email ben@zaksound.com. We answer within 30 days.

8. Children

Our products are aimed at music producers and audio professionals. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. Security

We use HTTPS across the entire site, hash passwords, and rely on established providers (Moonbase, Stripe, PayPal) to handle the most sensitive parts of the experience. No system is perfect, but we do our best to keep your data safe and to disclose breaches promptly if they ever occur.

10. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of the page reflects the most recent change. Material changes will be announced on the site or by email when appropriate.

11. Contact

Questions, concerns, or data requests: ben@zaksound.com