← Back to Home

Gabriel Santiago DBA Muzik Society ("we," "us," or "our"), a sole proprietorship based in Medellin, Colombia, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use Sample Monsta software and related services (the "Service").

1. Information We Collect

1.1 Information You Provide

When you register for an account or use our Service, we may collect:

Data Type	Purpose
Email Address	Account creation, communication, license delivery
Name	Personalization, customer support
Password (hashed)	Account security - stored only as secure hash

1.2 Information Collected Automatically

When you use Sample Monsta, we automatically collect:

• Hardware Identifier: A unique hash of your computer's hardware for license activation purposes. This is a one-way hash and cannot be used to identify your specific hardware.
• IP Address: For security, rate limiting, and fraud prevention
• License Usage Data: Activation status, validation requests
• Device Information: Operating system, application version, and the HTTP User-Agent string (stored per license validation event)
• Per-machine license telemetry: machine name, activation timestamp, and last-seen heartbeat — used to enforce the active-use license model (see Terms).
• Discord identity (if you link Discord): your Discord user ID and username, used to sync community roles.
• Payment & donation records: transaction IDs and amounts for purchases and tips (card data is handled entirely by Paddle — we never see it).

1.3 Information We Do NOT Collect

Sample Monsta respects your creative work. We do NOT:

• Access, scan, or upload your audio samples or music files
• Track your keystrokes or screen content
• Record your creative sessions
• Share your usage patterns with third-party advertisers
• Sell your personal information

2. How We Use Your Information

Account management

We use your information to create and maintain your account.

License enforcement

We use your information to issue, validate, and expire licenses, including the active-use/inactivity model.

Payment processing

We use your information to process purchases and donations via Paddle, our payment processor.

Product & service communications

We use your information to send updates, release notes, and (where you have not opted out) product marketing. Every marketing email includes an unsubscribe link.

Community features

We use your information to operate Discord role sync, forum, and related community tools.

Security & fraud prevention

We use your information for rate limiting, abuse detection, and account protection.

Analytics & product improvement

We use your information to analyze aggregate usage patterns and improve our products.

3. Legal Basis for Processing (GDPR)

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share information only in the following circumstances:

4.1 Service Providers

We work with third-party service providers who assist us in operating our Service:

Provider	Purpose	Data Shared
Render.com	Hosting infrastructure	Server logs, IP addresses
Resend	Email delivery	Email address, name
Paddle.com	Payment processing (Merchant of Record)	Payment details, billing address, transaction data (handled by Paddle per their Privacy Policy)
Discord	Community role sync	Discord user ID, username, membership/role status
Cloudflare	Software download delivery (CDN/storage)	IP address (retained only in Cloudflare's standard CDN access logs)

4.2 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4.3 Business Transfers

If Muzik Society is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

5. Data Retention

We retain your personal information for as long as:

• Your account is active
• Needed to provide you with our Service
• Required by law or for legitimate business purposes

After account deletion, we may retain certain information for up to 90 days for backup purposes and to comply with legal obligations. Anonymized or aggregated data may be retained indefinitely for analytics.

6. Your Rights and Choices

6.1 All Users

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update inaccurate information
• Deletion: Request deletion of your account and data
• Opt-out: Unsubscribe from marketing emails

6.2 Additional Rights for EEA Residents (GDPR)

6.3 California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to Know: What personal information we collect, use, and share
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt-out of the sale of personal information (note: we do not sell personal information)
• Non-Discrimination: We will not discriminate against you for exercising your rights

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption: All data transmitted using TLS/SSL encryption
• Password Security: Passwords are hashed using bcrypt (never stored in plain text)
• Access Controls: Limited access to personal data on a need-to-know basis
• Rate Limiting: Protection against brute-force attacks
• Regular Updates: Security patches and updates applied regularly

While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

8. International Data Transfers

Our company is based in Colombia, and our servers are hosted in the United States via Render.com. Your information may be transferred to and processed in the United States. If you are accessing our Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in a country with different data protection laws.

For EEA residents, we ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses where applicable.

9. Children's Privacy

Sample Monsta is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that we have collected information from a child under 13, we will delete it promptly. If you believe we have collected information from a child under 13, please contact us immediately.

10. Third-Party Links

Our Service may contain links to third-party websites or services (such as our Discord community or Reddit). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

11. Cookies and Tracking

We use essential cookies to:

• Maintain your login session
• Remember your preferences
• Ensure security of your account

We do not use advertising or tracking cookies. We do not track your browsing activity across other websites.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes:

• We will update the "Last Updated" date at the top of this page
• For material changes, we will notify you via email
• Continued use of the Service after changes constitutes acceptance

13. How to Exercise Your Rights

To exercise any of your privacy rights, please contact us using the information below. We will respond to your request within 30 days (or as required by applicable law).

To verify your identity, we may ask you to:

• Confirm your email address
• Provide information only you would know
• Log in to your account