JediPalm — Privacy Policy

Effective October 1, 2026 | Version 2026-10-01.1

What JediPalm uses to deliver your account, downloads and activation—and what stays on your computer.

Licensing network information

When the app requests activation or license renewal, we record its network IP address alongside the request time, identified account, product and result. We use this information for licensing support and abuse review, and may flag multiple trial accounts using one network. IP addresses can be shared or change, so we do not treat an IP address as a person or automatically refuse a trial solely because another account used that IP. The app uses a hashed computer identity to enforce repeat-trial limits. Network information is available only to authorized administration and support, not to other customers or affiliates.

1. Who and what this policy covers

JediPalm (“we”, “us”) provides this website, its account and licensing services, and the Lifeblood, Monolith, Revenant, Aftermath and Complete Chain apps. This policy explains our handling of personal information in those services and in support or business communications. Contact us at the address below with privacy questions or requests.

2. Information we collect

Account and purchases: your email address, account identifier, sign-in verification, purchased products, order identifiers, payment status and relevant transaction information. Stripe handles payment details through its checkout. Our licensing application does not collect or store your full card number or security code.

Activation and downloads: product and app version, platform, computer name, a hashed device identifier, device-registration identifiers, activation and renewal times, trial start and expiry, license status, authorized download requests and activation success or failure. Computer names can contain personal information. Activation codes, device credentials and signed receipts are used to authorize access; raw codes and renewal secrets are not written to the activation activity log.

Website and infrastructure: page visits, general device/browser information, referrers, approximate location and supported download-click events. Our hosting and security providers also process technical request information, including IP addresses and timestamps. Application rate limiting uses a hashed IP-derived identifier. Support and business communications may include messages, contact details, preferences and publicly available professional information or source links entered in our contact system.

3. What stays local in the apps

The current released apps do not request Keychain, Apple Music or media-library access. Standalone apps can request microphone/audio-input permission so they can process the input selected by you. Guitar/audio samples, DAW project contents and your recordings are not uploaded by the licensing or update-check code.

Preset files, user-selected impulse responses and audio processing are handled locally by the apps. Activation credentials and a signed license receipt are saved in the operating-system user’s application-data area. macOS uses a restricted local file; Windows protects the saved activation using its user-level data-protection service. If you voluntarily send audio or project files to support, we process that material to address your request.

4. Why we use information

We use information to create and secure accounts, deliver sign-in messages, process purchases and refunds, authorize downloads, issue and validate licenses, enforce computer and trial limits, investigate failed activation, prevent fraud and abuse, respond to support, operate the website and understand aggregate use.

Where a legal basis is required, processing may be necessary to perform our contract with you, comply with legal obligations, pursue legitimate interests such as service security and support, or act on consent where required. You can withdraw optional consent without affecting earlier lawful processing. We do not sell personal information or share it for cross-context behavioral advertising.

5. Email you will receive

Creating a JediPalm account means we will email you. Some of it is not optional while you hold an account or a licence: the sign-in link you asked for, purchase receipts, licence and activation messages, security notices and replies to your own support requests. There is no way to keep an account and switch these off, because they are how the account works.

The rest is optional and you can stop it at any time. If you start a trial we may ask how it is going, tell you when it is about to end, and later offer a discount if it lapsed. If you opt in to product news we will write when there is a new plugin or a significant update. We may also ask for feedback or check whether you have questions.

Expect no more than about four optional messages in a month, and possibly more during your first month, when the trial messages fall close together. Every optional message carries an unsubscribe link, and you can also unsubscribe from your account page or by emailing us. Opting out of optional email never affects your licences, your downloads or your ability to get support.

6. Service providers and disclosure

Our current service providers include Vercel for hosting and website analytics, HeyCatch (which uses PostHog) for product analytics, Supabase for account authentication, database and download storage, Stripe for payment processing, and Brevo for service email delivery. They receive information needed for their roles and process it under their applicable terms and safeguards. Following an external link, such as a YouTube video, takes you to a service with its own privacy practices.

Information can be disclosed to authorized support personnel and providers, when required by law, to protect legal rights or service security, or as part of a business transfer subject to applicable protections. It may be processed outside your country, including in the United States. Where applicable law requires safeguards for international transfers, those requirements continue to apply.

7. Cookies, browser storage and analytics

Signing in stores a session in browser local storage so the site can keep you signed in and renew your session. Signing out removes the local sign-in session. Blocking or clearing this storage can require another website sign-in; it does not by itself delete the native app’s activation file.

Partner referrals: following a partner link stores a random referral receipt in browser storage for up to 30 days. When an eligible new account verifies its email, we associate that account and a hash of the normalized email with the first eligible partner for future purchase credit. We retain click timestamps, referral associations, purchase amounts, commission adjustments, application details and payout records to operate the program and prevent fraud. Partners see aggregate performance, not customer emails or card information. Clearing browser storage before signup can prevent attribution; it does not remove an attribution already saved to your account. Contact us with referral or privacy questions.

This website sets no cookies. What it keeps, it keeps in your browser’s own local or session storage, and you can clear all of it from your browser settings. We use two analytics services. Vercel Web Analytics measures page views without cookies and without identifying you. HeyCatch, which runs on PostHog, measures product use such as which downloads and checkout buttons are pressed; it stores an anonymous visitor identifier in local storage so repeat visits are not counted as new people, and window and session identifiers in session storage. If you sign in, we associate that identifier with your account identifier so support can see your own activation history. We honour your browser’s Do Not Track setting, and neither service is an advertising network: we do not use them to build advertising profiles or share them for cross-context behavioral advertising.

The complete list of what this site can store in your browser: your sign-in session; an anonymous analytics identifier and its window and session identifiers; a partner referral receipt for up to 30 days; the product you selected before signing in to checkout; and a note that you have already seen the newsletter prompt. We remove URL query strings and fragments from our analytics events, keeping only standard utm_ campaign tags, and exclude the admin pages. Our analytics does not deliberately send account names, email addresses, activation codes or guitar audio. Infrastructure security logs and the separate account and licensing records described above still exist.

8. Retention and security

Licensing-request IP addresses are restricted to authorized administration and support. Shared-IP trial flags compare identified trial accounts over the previous 90 days; this is a review window, not proof that accounts belong to the same person. Network records are retained only as needed for security, support and dispute handling, with the other retention practices below.

We retain account, purchase and activation information for as long as needed to provide purchased access, manage support, enforce trials and device limits, meet recordkeeping duties and resolve disputes. Retention depends on the type of record and purpose; this service does not promise automatic deletion after a fixed number of days. Trial-abuse prevention, transaction or legal records may need to be retained after an account-deletion request.

Access controls, restricted database permissions, encrypted connections and protected credentials are used to reduce unauthorized access. No system can guarantee absolute security. Do not post activation codes, sign-in links or support files publicly.

9. Your choices and requests

Depending on your location, you may have rights to access, correct, delete or obtain a copy of personal information, object to or restrict processing, withdraw consent, or appeal a decision or complain to a privacy regulator. Email us to make a request. We may verify identity and explain any lawful limitations before acting. We do not require you to send a password or payment-card number for a privacy request.

You can manage registered computers in My Account. Account deletion is different from unregistering a computer and may remove access to purchases and downloads, so contact support to discuss its effect first. You can opt out of optional marketing or business outreach using the message’s instructions or by emailing us. Essential account, security and purchase communications may still be needed.

10. Children

The service is not directed to children under 13, and we do not knowingly collect their personal information. Where a higher age or parental authorization is required by local law, those requirements apply. Contact us if you believe a child has provided information without the required authorization.

11. Updates and contact

We update this policy when our practices change and identify the effective date on this page. We will provide additional notice or obtain consent when required for a material change. Contact the address below for privacy requests.

Contact JediPalm: chisholm@jedipalm.com