Privacy Policy

1. Information we collect

• Accounts: email address, a name if provided, account status, sign-in records and authentication identifiers.
• Subscriptions: customer and subscription identifiers, subscription status, trial and billing dates, invoice information, and records of the terms and recurring billing authorization you accept. Stripe handles payment entry; our website does not receive your full card number or security code.
• Connected devices: the device or host name provided by the plugin, pairing and connection timestamps, hashed credentials, and connection status.
• AI requests: the sound description, refinement instructions, selected patch parameters, custom-macro descriptions and other context supplied to a generation request. These requests are transmitted to AI services to produce a response.
• Usage and security: request timestamps, hashed IP identifiers in our application records, prompt length, model and token/cost usage, latency, errors and allowance records. Hosting and infrastructure providers may also process IP addresses and technical request logs.
• Feedback and support: messages, ratings, tags, prompts, patch data, plugin version and diagnostic details you choose to send. Feedback can be stored in our database and emailed to our support team.

We receive information from you, the plugin, our website and service providers such as Stripe. Ordinary generation uses text and patch context; it does not upload your DAW project or audio samples through the generation API. Do not put sensitive personal information or confidential material into prompts or feedback unless you intend to send it to these services.

2. Why we use it

We use this information to sign you in, connect the plugin, provide AI generation, manage subscriptions and usage allowances, prevent abuse, diagnose problems, answer support requests and meet legal obligations. Account and service processing supports our contract with you; security, troubleshooting and support also support our legitimate interests. Billing and compliance records may be needed for legal obligations. Where a separate optional use requires consent, that consent must be obtained for that use; accepting our Terms is not consent to unrelated marketing.

3. Services that receive information

• Supabase: authentication, account and usage databases, device records and private release storage.
• Vercel: hosting, API execution and infrastructure logs.
• Stripe and Link: Checkout, payment processing, subscriptions, invoices, tax and the billing portal. Their own privacy notices apply to processing they perform independently.
• Resend and email providers: service emails and delivery of feedback or support messages.
• OpenRouter and the selected AI model providers: generation requests, including the prompt and patch context necessary to answer them. Provider logging, retention and model-training practices can differ. We do not promise that every AI provider uses zero retention or never uses data for training.

We do not sell personal information or share it for cross-context behavioral advertising. Necessary service-provider processing is described above. We may also disclose information when required by law, to protect rights or security, or in a business transfer subject to applicable protections.

Provider notices: Supabase, Vercel, Stripe, Resend, and OpenRouter. OpenRouter also publishes provider data-handling information.

4. Cookies and local storage

Our website uses authentication cookies or browser storage to maintain sign-in and complete account/device connection flows. It does not use advertising pixels or cross-site behavioral advertising. Fonts are served from Nob’s own domain. Blocking essential storage can prevent sign-in. See our Cookie Notice. We do not change essential service processing in response to Do Not Track or Global Privacy Control signals, because we do not use the site for sale or advertising sharing of personal information.

5. Retention

We keep account and device records while they are needed to provide and secure your account. Usage and diagnostic records are kept for troubleshooting, abuse prevention and allowance reconciliation. Feedback and support records are kept while needed to resolve and understand product issues. Billing and acceptance records may be retained after account closure for accounting, disputes and legal obligations.

Retention depends on the record’s purpose, account activity, unresolved issues and applicable legal requirements. A token or pairing link expiring does not by itself delete the associated database record. Provider logs and backups follow the relevant provider’s retention practices. This policy does not claim an automatic fixed deletion schedule that the service has not implemented.

6. Your choices and requests

Email admin@nob.audio from your account email to request access, correction, export, account closure or deletion of personal information. You can also request restrictions or object to processing where applicable, withdraw an optional consent, or appeal a privacy-request decision by replying and asking for a review. Depending on your location, these rights may be subject to legal exceptions.

We may verify account control before providing or deleting data. We respond within the period required by applicable law and explain any lawful refusal or retention exception. We do not require a government ID for routine requests and do not discriminate against you for exercising privacy rights. You may lodge a complaint with your applicable privacy regulator.

Deleting an account does not automatically cancel a subscription. Cancel in Manage billing, or clearly request both cancellation and deletion in your support message. We will coordinate both before removing the account where requested. Billing records required for legal purposes may remain.

7. Security and international processing

We use HTTPS, access controls and restricted server-side credentials. Device credentials are stored as hashes on the backend. No security system is guaranteed to prevent every incident.

Nob and its providers may process information in the United States and other countries, which may have different privacy laws from your location. The applicable service-provider contracts and available transfer safeguards depend on the provider and processing involved. Contact us for information about the safeguards applicable to your data. This notice does not represent that every international transfer arrangement has been independently certified.

8. Age and policy changes

Nob accounts and subscriptions are intended for adults aged 18 or older. We do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided information so we can investigate and take appropriate action.

We update the effective date when this policy changes. For material changes affecting account data, we provide notice through the service or an account email before the changed practice takes effect, and obtain additional consent where required.

9. Contact

Synthius Labs LLC is responsible for the Nob account and service processing described here. Contact our privacy/support team at admin@nob.audio. Please identify the request and your account email; do not email passwords, API keys or full payment-card details.