Privacy Policy

The data controller is Jesper Jönsson, trading as ProsperAudio, a sole trader business (enskild firma) registered in Sweden. Full controller and contact details are on our Legal Information page.

1. Introduction

This Privacy Policy explains how ProsperAudio ("we", "us", "our") collects, uses, and protects your personal information when you visit our website, create an account, purchase a product, or use any of our free tools.

2. Information We Collect

a. Account information

When you create an account, we collect your email address and a hashed password.

b. Order information

When you make a purchase, we store the products purchased, the order total, the time of purchase and your account ID. Payment is processed by our payment provider, we do not store your full card number.

c. Usage data

We may collect anonymous technical data about how you use the Site (such as page views, browser type and approximate location derived from IP) for analytics and to improve the experience. Analytics are processed by our proprietary cookie-free analytics system, hosted on Lovable Cloud (Supabase Postgres) inside the EU. We do not use Google Analytics or third-party trackers.

d. Free tools (browser-based)

Audio files you analyze with our free tools (such as the BPM & Key Finder) are processed entirely in your browser. Files are not uploaded to our servers and we do not store, access, or retain them.

3. How We Use Your Information

• To provide, operate and maintain the Site and your account;
• To process orders and deliver products;
• To send transactional emails (purchase confirmations, download links, account notices);
• To respond to support requests;
• To detect, prevent and address fraud or abuse;
• To improve our products and user experience.

4. Legal Basis (GDPR)

If you are in the EEA, we process your personal data on the following bases: performance of a contract (to deliver products you purchased), legitimate interests (to operate and improve the Site and detect fraud), consent (where required for marketing), and legal obligations (such as tax records).

5. Sharing Your Information

We do not sell your personal information. We share it only with:

• Paddle.com Market Limited, our payment provider and the Merchant of Record for every sale. Paddle handles checkout, payments, billing, sales tax/VAT, invoices, refunds, and chargebacks. When you purchase, your name, email, billing address and payment details are collected and processed directly by Paddle under Paddle's Privacy Policy;
• Service providers who help us operate the Site (hosting, analytics, transactional email delivery, customer support tooling);
• Authorities, when required by law or to protect our rights;
• A successor in the event of a merger, acquisition or asset sale.

6. Cookies & Consent

We use a small number of essential cookies and local storage entries to keep you signed in, remember items in your cart, and store your cookie preferences. We only set analytics or marketing cookies after you opt in via our cookie banner. You can change your preferences at any time below or by clearing site data in your browser. Disabling essential cookies may prevent the Site from working correctly.

7. Data Retention

We keep your account and order data for as long as your account is active and for as long as needed to comply with legal obligations. When an approved deletion request is completed, active account and profile information is erased. Minimum transaction, invoice, and download-integrity records may be retained in pseudonymised, read-only form for seven years under Swedish bookkeeping requirements and for the establishment or defence of legal claims. Our payment provider may separately retain payment and tax records under its own legal duties.

8. Your Rights

Depending on where you live you may have the right to:

• Access the personal data we hold about you;
• Request correction or deletion of your data;
• Object to or restrict certain processing;
• Receive your data in a portable format;
• Withdraw consent at any time (without affecting prior processing);
• Lodge a complaint with a supervisory authority.

Signed-in customers can download their data or request account deletion from the Privacy & data area of their account. You may also contact support to request access, correction, restriction, objection, portability, or deletion. We respond without undue delay and normally within one month. We may need limited information to verify requests made outside a signed-in account, and may delay or refuse erasure where a dispute, legal claim, fraud investigation, chargeback, or legal retention duty applies. You may lodge a complaint with the Swedish Authority for Privacy Protection (IMY) or your local EEA supervisory authority.

9. Security

We use industry-standard measures (encryption in transit, hashed passwords, restricted access) to protect your data. No system is 100% secure, but we work hard to keep your information safe.

9a. Data Breach Notification

In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, and affected users without undue delay, in accordance with GDPR Articles 33 and 34.

10. Children

The Site is not directed at children under 16 and we do not knowingly collect data from them.

11. International Transfers

Our service providers may be located outside your country. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) to protect your data when it is transferred.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new "Last updated" date.

13. Contact

For questions or to exercise your rights, contact us through the support channels listed on our website.