Privacy Policy

• Account: email address, a securely hashed password (never the password itself), the date you signed up and your account settings.
• Orders: what you bought, when, the price, and for physical goods your name, shipping address. Card details go directly to Stripe and never reach our servers.
• Downloads and licenses: trial and purchased downloads, license keys, and the activation records described in section 2.
• Community and messages: posts, bug reports and feature requests you submit, event RSVPs, and emails you send to any @solidgrnd.co address.
• Technical data: IP address, browser and device type, pages requested, referring page, and timestamps, recorded in our server and security logs.
• Advertising data (only with your consent): see section 4.

We do not knowingly collect sensitive personal information (such as health, financial account, precise location or government ID data).

When you activate a paid plugin, and when it periodically re-checks its license, it contacts api.solidgrnd.co and sends:

• your license key and the product;
• a machine identifier: a one-way SHA-256 hash derived from your computer's device ID, so we can count activations without learning the underlying ID;
• your IP address, as with any internet request.

To check for updates, a plugin downloads our public product list; that request carries only your IP address and standard connection details, not your license key. Our plugins do not collect your audio, project files, file names, DAW contents or usage analytics.

• to create and secure your account and authenticate you;
• to process payments, deliver downloads and license keys, and fulfill and ship orders;
• to send transactional emails (receipts, password resets, license keys, shipping updates);
• to provide support, answer messages and run the community board and events;
• to prevent fraud, abuse, license sharing and security incidents;
• to understand which ads and pages work, only if you allow it (section 4);
• to comply with law, enforce our terms and protect our rights.

We will only send marketing emails where you have agreed to receive them, and every marketing email includes a way to unsubscribe.

Necessary storage. We use your browser's local storage to keep you signed in and to remember your cookie choice. These are needed for the site to work and do not track you across sites.

Affiliate referrals. If you arrive through a creator's affiliate link (one ending in ?ref=), we keep a note of that link in your browser's local storage for 30 days so the creator is credited if you buy. We record that a click happened, not who you are, and the creator never sees your name or email.

Discount codes. If you ask for a discount code on a product page, we email it to you along with up to two reminders before it expires, and keep the code in your browser's local storage so it applies at checkout. Every one of those emails has an unsubscribe link.

Ad tracking (opt-in). We advertise on Facebook and Instagram. If you choose “Allow” on our cookie banner, we load the Meta Pixel, which sets Meta cookies, and share page visits, product views, checkouts, sign-ups (including email sign-ups for a discount code) and purchases with Meta Platforms, Inc. so we can measure our ads. For sign-ups and purchases we also send these events from our server, with your email address hashed (scrambled one-way) so Meta can match it without receiving it in plain text. Meta uses this data under its own privacy policy.

If you choose “No thanks”, or your browser sends a Global Privacy Control (GPC) signal, none of this happens. You can change your choice by clearing this site's storage in your browser. Under some US state laws, this kind of advertising measurement may count as “sharing” or “targeted advertising”; choosing “No thanks” or sending GPC is how you opt out.

We share personal information only with:

• Service providers who process it for us: Stripe (payments), Microsoft Azure (hosting, database and file storage, in the United States), Resend (sending and receiving email), Roastify and other fulfillment partners (making and shipping physical orders), and shipping carriers.
• Meta, only if you allow ad tracking (section 4).
• Other users, where you choose to post publicly, for example on the community board.
• Authorities and others when required by law, legal process or to protect the rights, property or safety of solidground, our customers or the public.
• A successor, if the business is sold, merged or reorganized; this policy will continue to apply to your information.

We do not sell personal information for money, and we have not done so in the past 12 months.

We keep account information while your account is open. We keep order, payment and license records for as long as needed for licensing, taxes, accounting and legal obligations (typically up to 7 years). Server logs are kept for a limited period for security and troubleshooting. When information is no longer needed, we delete or anonymize it.

We use reasonable safeguards, including encryption in transit, hashed passwords, managed identities in place of stored keys, and restricted access. No system is completely secure, and we cannot guarantee the security of information transmitted to or stored by us. You are responsible for keeping your password safe. If a breach affecting your information occurs, we will notify you where the law requires.

Depending on where you live (including Texas, California and other US states, the EU, the UK and Canada), you may have the right to access, correct, delete or get a portable copy of your personal information, to opt out of targeted advertising or “sharing”, to withdraw consent, and to appeal our decision on a request. To use these rights, email hello@solidgrnd.co from the email address on your account. We may need to verify your identity, and you may use an authorized agent where the law allows. We will respond within the time the law requires (usually 30 to 45 days) and will not discriminate against you for using your rights. If we deny your request, you may appeal by replying to our decision; if you are still unhappy, you can contact your state attorney general or local data protection authority.

Deleting your account removes your access to downloads and license management. We may keep records we are required to keep by law, such as order and tax records.

EU/UK visitors: we process your information to perform our contract with you, with your consent (ad tracking), to meet legal obligations, and for our legitimate interests in running and securing the Services. Your information is processed in the United States.

The Services are not directed to children under 13 and we do not knowingly collect their personal information. If you believe a child under 13 has given us information, email hello@solidgrnd.co and we will delete it.

We may update this policy from time to time. We will post the new version here and change the date at the top. If a change materially affects how we use information we already have, we will tell you by email or on the site.