Privacy Policy.

This policy covers deishmedia.com and its category hubs (/audio/, /trading/, /apparel/), and the licence-activation service used by Deish Media audio products (Prisma Suite, Base6ix, Ryza, Smack, Palma and Cymba, and their bundles). It is operated by Deish Media LLC (“Deish Media,” “we,” “us”). A person handles every request under this policy, not a queue.

Deish Media LLC is the “controller” of the personal data described here. Address: Deish Media LLC, New Jersey, USA. Contact: deishmedia@gmail.com.

We collect as little as the product actually needs.

• Email address, collected by Stripe at checkout when you buy a licence. Stripe's hosted checkout requires an email to complete a purchase. We receive it so we can send your licence serial and provide support.
• A machine fingerprint hash, generated by the plug-in when you activate a licence. This is a one-way hash derived from a stable machine identifier (the Windows machine GUID, or the equivalent on macOS). We never receive or store your raw hardware identifiers, only the hash, and it exists solely to enforce the three-device limit on your licence.
• Your purchase record from Stripe. When you buy, Stripe tells us your email, the product, the checkout reference and the amount. We store the email, product and checkout reference with your licence. We do not receive your card details or your billing address.
• Licensing service logs. When the plug-in activates or deactivates, our licensing service on Microsoft Azure records technical request logs (time, endpoint, result, and approximate location derived from your IP address). Azure Application Insights keeps these for up to 90 days. We use them to keep the service running and to stop abuse.
• Email delivery records. We send your licence serial with Azure Communication Services. It keeps a delivery record (recipient address, time and delivery status) so we can tell whether your email arrived.
• Your licence serial and purchase record, so we can verify a licence, help with support, and enforce the device limit.
• Basic site traffic data that any web host generates automatically, such as your IP address and browser type, purely as server logs from hosting the site. Deish Media does not currently run any analytics or tracking script (no Google Analytics, no advertising pixels, no tracking cookies) on this site. If that changes, this policy will be updated first, and this section will say exactly what was added and why.

We never see or store your payment card details. All payment processing happens entirely on Stripe's systems. Card numbers, expiry dates and CVVs never reach Deish Media's servers or databases. We also don't collect your name, physical address, or phone number unless you volunteer it to us directly, for example in a support email.

We use a small number of third-party processors to run the business. We don't sell your data to anyone, for any reason.

• Stripe and Link (payments). Purchases are sold through Link, a Stripe service, as the merchant of record. Link processes your payment, calculates and pays sales tax and VAT, sends your receipt and handles payment support and disputes. For that, Stripe and Link act as independent controllers under their own privacy policies: Stripe privacy policy and Link privacy policy. Stripe passes us your email and order details so we can deliver your licence.
• Microsoft Azure. Hosts this website (Static Web Apps), the licence-activation backend (Azure Functions), the licence and activation records (Azure Table Storage), the service logs (Application Insights), and sends the serial email after a purchase (Azure Communication Services). See Microsoft's privacy statement.

Microsoft is used strictly as an infrastructure provider to deliver the product and service you purchased, and may not use your data for its own marketing.

If you ask us to delete your data, we delete your licence record and tell you that your licence will stop activating on new computers. We keep only what tax law requires.

Wherever you are, you can ask us at any time to:

• Access the personal data we hold about you.
• Correct it if it's wrong.
• Delete it, subject to the retention needs in Section 5. For example, we may need to keep a minimal purchase record for accounting even after a deletion request.

We don't sell or share personal data for cross-context advertising, so there's nothing to opt out of on that front. To exercise any of these rights, email deishmedia@gmail.com. We'll respond directly.

You can also object to our processing, ask us to restrict it, and ask for a copy of your data in a portable format. If you are in the EU, the UK or Switzerland, you can complain to your local data protection authority. We will answer within one month. We may ask you to confirm a request from the email address on your licence, so we do not hand your data to someone else.

California residents: we do not sell or share personal information, and we do not use it for targeted advertising. You have the right to know, delete and correct, and we will not treat you differently for using them.

Legal bases (EU/UK). We process your email, licence and device hash to perform our contract with you: delivering and activating the licence you bought (GDPR Article 6(1)(b)). We keep purchase records to meet tax law (Article 6(1)(c)). We keep service logs for our legitimate interest in running a secure service (Article 6(1)(f)). We do not use your data for marketing, profiling or automated decisions.

International transfers. We are based in the United States, and our providers store data in the United States. Microsoft and Stripe transfer EU and UK data under the EU-U.S. Data Privacy Framework and standard contractual clauses.

Which laws apply. We follow GDPR and UK GDPR for buyers in Europe and the UK. U.S. state privacy laws such as the CCPA and the New Jersey Data Privacy Act apply only to much larger businesses. We still give everyone the same rights listed in Section 6.

Our products are not directed at children, and we do not knowingly collect personal information from anyone under 16. A licence must be bought by an adult, or by a parent or guardian. If you believe a child has provided us information, contact us and we'll remove it.

If this policy changes in a meaningful way (especially if we ever add analytics, tracking, or a new category of data collection), we'll update the “Last updated” date above and describe the change plainly rather than burying it in a rewrite.

Questions, requests, or concerns about this policy: deishmedia@gmail.com.