Privacy notice

Who controls your information

flowstatedsp controls the account and activation information described here.

Business address: 1st Floor 44-50 The Broadway, Southall, Middlesex, UB1 1QB.

Strict Personal Data and Creative Audio Guarantee

Drum Chopper is designed with strict local-first data isolation. We NEVER access, read, monitor, upload, or transmit your audio recordings, drum breaks, sample libraries, project sessions (.dcf, .logicx, etc.), or personal files. All creative audio editing, chopping, DSP transformations, and disk-image writing occur entirely on your local Mac and connected hardware sampler. We will never collect your audio, train machine learning models on your work, or expose your projects.

Diagnostics, Telemetry, and Redaction Standards

We do not collect background telemetry or tracking during regular use. Diagnostic reports are only ever generated when you deliberately invoke Send Diagnostics & Bug Report from the application's Help menu. Even when sent, diagnostic collection strictly enforces the following guarantees:

• Strictly Technical Only: Reports contain only technical environment data necessary to diagnose crashes or hardware communication failures (macOS version, Apple Silicon architecture, audio buffer sizes/sample rates, and Raspberry Pi connection states).
• Zero Personal Identity: Personal names, account credentials, passwords, licence secret tokens, and filesystem usernames are automatically stripped and redacted before any data leaves your Mac.
• Private & Confidential Routing: Telemetry is transmitted over encrypted HTTPS and delivered exclusively to our private diagnostics mailbox (diagnostics@drumchopper.com). It is accessible only to internal engineering, is never stored in publicly readable storage, and is never shared with third parties.
• Complete Transparency: The application displays the exact raw JSON report preview to you before transmission, so you always know exactly what is being sent.

Information we use

We process your name, email address, primary DAW and selected sampler types, a securely derived password hash, account and purchase records, licence status, device public keys and privacy-preserving fingerprints, activation timestamps, and limited security and rate-limit data. We do not receive or store full card details.

Trial protection and network security

We retain limited device-binding and trial-use history so changing an email address, removing a device, reinstalling the app or purchasing a full licence does not erase previous trial use. These records support licence enforcement and investigations; they are not proof of a person's legal identity.

For verified account logins and trial requests, we may use a short-lived, keyed network identifier derived from the connection's IP address to flag several accounts using the same connection. The identifier changes daily and its temporary records are regularly removed. This review signal stores counts and limited account references, rather than the raw IP address. Shared networks, studios and VPNs can produce the same signal; it does not automatically block an account or establish misuse.

These pseudonymous security records remain personal data where we can link them to an account. They are used for account and licence security, not advertising or monitoring creative work, and are subject to the retention purposes and rights described below.

Licence watermarks

Signed licence data may contain a random licence watermark. It does not contain your name or postal address. We keep the link to your customer account privately on our server. Where we record your name, postal address and terms acceptance for licence traceability, that snapshot is encrypted and access through the website is restricted to the owner, with access recorded. The watermark remains personal data because we can link it to you.

We use these records to investigate unauthorized distribution and handle related disputes. A watermark identifies the associated licence, not necessarily the person responsible for sharing a copy. Corrections retain a history; records are kept only while needed for these purposes or applicable legal obligations, subject to your rights below.

Development email updates

If you sign up for updates, we store your email address, selected projects, consent wording and confirmation status. We use these to send development and availability updates for your confirmed choices. Confirming a new selection replaces your previous project choices. You can unsubscribe from any update email or contact support to withdraw consent. Signing up does not create an account or place a preorder.

Website and launch measurement

We count public website page views and arrivals in daily and hourly groups, approximate countries and referring website hostnames, and campaign labels supplied in marketing links. These website metrics use no analytics cookies, persistent browser identifiers or fingerprinting. Our first-party measurement respects Do Not Track and Global Privacy Control. We do not store full referring URLs or their query strings in these reports.

Campaign labels may be saved with a mailing-list signup or new account so we can understand which campaigns lead to confirmed interest and purchases. A confirmed mailing-list signup can supply the campaign for a later account using the same email. We also count authorized download starts by account and release; a start does not prove a completed download. Website aggregates and download-start records are retained for up to 180 days. Campaign labels remain with the related signup or account.

For recorded account downloads, the owner can review the file version, start time and connection IP address to help with download support and security enquiries. Download IP records are retained for up to 30 days; older downloads do not gain an IP record retrospectively. A shared or VPN address does not identify a particular person. The same Do Not Track and Global Privacy Control exclusions apply.

This does not add background app usage tracking. Your audio, projects and creative activity remain local.

Why and how long

This information is used to perform the purchase and software-licence contract, secure accounts, prevent fraud, provide support, prioritize compatible DAW and sampler workflows, meet tax and accounting obligations, and protect the service. Commerce records are retained for legally required periods; expired sessions, one-time account links and transient security data are regularly removed.

Service providers and transfers

Cloudflare hosts the website, activation service and database; Stripe processes payments and, for physical orders, delivery contact details; and Brevo delivers transactional email. Each provider processes the minimum information needed for its role and may process data outside your country under its applicable safeguards.

Your choices and rights

Depending on where you live, you may ask for access, correction, deletion, restriction, portability or an objection, and may complain to your data-protection authority. Some records must be retained for legal or fraud-prevention reasons.

Send privacy requests to support@drumchopper.com.