Privacy

OA Labs is a label of Form and Function Studio, a sole proprietorship based in Toronto, Ontario, Canada, and is responsible for the personal data described here. This page explains what we collect, why, and who processes it. It is written plainly and kept short on purpose.

What we collect

• Mailing list. If you join our list, on this site or from inside a plugin, we collect your email address and a few technical tags so we know what you signed up for: the product, its version, your platform, and, if you arrived from a tracked link, the campaign source. We do not ask for your name.
• Purchases. When you buy, Dodo Payments takes your payment. They share with us what we need to deliver and support your order: your name, email address, country, what you bought, the amount, and your license key. We never see or store your card details.
• Ideas you send us. If you submit an idea, we receive the idea and, if you give it, your email address, so we can reply.
• Support emails. If you email us, we keep the conversation so we can help you.
• Site visits. Our analytics count page views without cookies and without identifying you. Like any website, our hosting sees your IP address when you load a page.

What the plugins send

Our plugins connect to the internet only for these things:

• License activation. A paid plugin sends your license key and a name for the computer to Dodo Payments, to activate it and to check the key is valid. This is how activations are counted and freed up.
• Update check. At most once a day, the plugin downloads a small file from this site that says what the latest version is. The request carries nothing about you or your setup; like any web request, it reaches the site from your IP address.
• Mailing list signup. Only if you choose to sign up from inside the plugin; it sends what’s listed under Mailing list above.

The plugins send no usage analytics, crash reports, or anything about your projects or your audio.

Why we collect it

• To send you the download link, and to email you occasionally about new instruments and meaningful updates. No drip campaigns.
• To deliver what you buy, manage your license and activations, and help you when something goes wrong.
• To keep records the law requires for sales.

We do not sell your data, share it for advertising, or use it to profile you.

Who processes your data

• Dodo Payments is our reseller and merchant of record. They run checkout, take payment, handle sales tax, issue receipts and license keys, and process refunds. They act as an independent controller of your purchase data under their own privacy policy.
• Kit (formerly ConvertKit) stores the mailing list and sends our emails.
• Vercel hosts the site and provides cookieless traffic analytics.
• Cloudflare provides cookieless traffic analytics.
• GitHub hosts the free plugin downloads; download links go to it.
• Resend delivers ideas submitted on this site to our inbox.
• YouTube serves the devlog thumbnails and videos; YouTube receives your IP address when they load or play.

Some of these companies are based outside Canada, mostly in the United States, so your data may be stored and processed there. The site sets no advertising or cross-site tracking cookies.

How long we keep it

• Mailing list: until you unsubscribe or ask us to delete it.
• Purchases and licenses: for as long as you might use the license, and for the period tax and accounting law requires.
• Support emails and ideas: as long as they are useful for helping you, then deleted.

Your choices and rights

• Every email includes a one-click unsubscribe link.
• You can ask us to show, correct, or delete the data we hold about you, or to stop using it. Some purchase records must be kept for tax reasons even after you ask.
• For payment data held by Dodo Payments, you can also contact them directly.
• If you’re unhappy with how we handle your data, you can complain to your local privacy regulator. In Canada that is the Office of the Privacy Commissioner.

Our products are not aimed at children, and we do not knowingly collect data from anyone under 16.

Changes

We may update this policy. The current version is always on this page, with the date shown above.

Contact

Privacy questions, or access and deletion requests: hello@oa-labs.com.