Privacy
Short version: an email address if you asked for one message, and a machine fingerprint if you activated a licence. The mobile app collects nothing at all. Nothing is sold to anyone.
Desteba Productions S.L., a company registered in Spain, is the data controller for everything described here. For any question about this notice, or to exercise any of the rights below, write to hello@saimox.com.
Your email address, and the date you submitted it. That is the whole record.
There is no online checkout and no payment platform. You receive an invoice and pay by bank transfer or by card. We hold what an invoice legally has to contain — your name or company, address and tax number — and nothing beyond it.
We never see or store your card number. The card terminal talks to our bank directly; we only learn that the payment went through.
saimox Studio does not phone home, does not track usage, and contains no analytics. It contacts our server in exactly two situations, and no others.
saimox Player collects nothing. There is no account and no sign-in. There is no analytics package, no advertising framework and no tracking code of any kind — not disabled, not present.
It has no identifier for you or for your device, so there is nothing that could be joined to anything else later.
Only when you ask it to: when you open an address you typed or pasted, and when you download a piece you chose. It never reports what you listen to, when, or for how long.
If the address you open is one of ours, our server sees your IP address for the length of the request, as every web server does. We do not store it, and we do not use it to recognise you on a later visit.
None of it is uploaded, backed up to us, or synchronised through us.
If you turn it on, the app reads the motion sensors in your headphones so the sound stage can stay in place while you turn your head. That data never leaves the device. It is used in the moment and kept nowhere — not by us, and not by the app.
We mention it because motion data is personal data under the GDPR, even when it stays where it is. Nothing here obliges us to say more; we would rather say it anyway.
A future version may report that a piece was played, so an artist can see how often their work was heard. It would carry the identifier of the piece and nothing else — no device identifier, no position, no listening history. If that arrives, this notice changes with it before it ships.
| Data | Purpose | Legal basis |
|---|---|---|
| Email on the mailing list | Send one launch message | Consent (Art. 6(1)(a)) |
| Licence key, email, hardware ID | Deliver and verify the licence you bought | Contract (Art. 6(1)(b)) |
| Activation events | Prevent one licence running on unlimited machines | Legitimate interest (Art. 6(1)(f)) |
| Invoices | Meet Spanish accounting and tax obligations | Legal obligation (Art. 6(1)(c)) |
The mobile app appears nowhere in this table, because it gives us nothing to process.
Three companies process data on our behalf, each for one clearly defined task, and all three are in the EU:
All three are inside the European Union, and no personal data leaves the EU. There is no processor in the United States or anywhere else outside the European Economic Area — which is one of the reasons we sell directly instead of through a payment platform.
Beyond those three, only the tax authorities, and only where the law requires it. Nobody else. We do not sell personal data, we do not share it with advertisers, and there is no advertising or tracking script anywhere on this site or in either application.
Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict what we do with it, hand it over in a portable format, or object to processing based on legitimate interest. Where we rely on consent, you can withdraw it at any time without affecting what was lawful before.
Write to hello@saimox.com. We answer within one month. If you are not satisfied, you can complain to the Spanish supervisory authority, the Agencia Española de Protección de Datos (aepd.es).
Deleting your licence record while a licence is active will deactivate it — we cannot verify a licence we have no record of.
If you only ever used the mobile app, there is nothing for us to give you, correct or delete. Deleting the app removes everything it held.
This site sets no cookies. None. There is no analytics, no advertising pixel, no social embed, no session tracking and therefore no consent banner, because there is nothing to consent to.
There are also no third-party requests. Fonts, styles and scripts are all served from this domain, so your browser never contacts another company while you read this page and no one else learns your IP address from your visit here. The only moment anything leaves this site is when you submit the signup form yourself.
The mobile app sets no cookies either, and embeds no browser view that could.
If this notice changes materially, the date at the top changes with it, and anyone on the mailing list is told before the change takes effect.