Luminous.Works LLC
The long version below says the same thing with the detail a privacy policy owes you. Everything in it describes what our systems actually do — it was written from the licence service's own schema, not from a template.
Luminous.Works LLC, a Wisconsin limited liability company (WI LLC ID L088081), registered office 2800 E. Enterprise Ave Ste 333, Appleton, WI 54913, United States. We are the data controller for everything described here.
Reach a human at owner@luminousworksllc.com.
| What | Where it comes from | Why we need it | How long we keep it |
|---|---|---|---|
| Email address | You, at checkout, via Stripe | To send you your licence key, and to answer you if you write to us | For as long as your licence exists |
| Licence key | Generated by us on purchase | It is the index to your entitlement — which product, which tier, how many seats | For as long as your licence exists |
| Machine fingerprint | Computed on your computer at activation | To count seats, so a one-seat licence installs on one machine | Until you deactivate that machine — then deleted immediately |
| Purchase reference | Stripe | To match a payment to a licence, and to stop a retried payment notification from issuing you a second licence | Seven years (US tax record-keeping) |
| Tier, seat count, issue date, update entitlement | Set by us on purchase | To know what you are entitled to without asking you | For as long as your licence exists |
| Activation timestamps | Recorded when you activate | Support — so we can see what happened when something goes wrong | Until you deactivate that machine |
| IP address | Your network connection | Transient rate-limiting only. An activation endpoint without a rate limit is a machine for guessing licence keys | Not written to our licence database. Held briefly in edge logs, then discarded |
Our lawful basis for all of the above is performance of our contract with you — we cannot sell you a licence and honour it without these — except for the IP address used in rate-limiting, which rests on our legitimate interest in not having our licence service brute-forced.
This is the field people are right to ask about, so here is exactly what it is. When you
activate, your computer computes a SHA-256 hash of two stable hardware and
installation identifiers — on Windows, the MachineGuid and the system volume
serial number. Only that hash is sent to us. It has three properties worth stating plainly:
This list is as much a part of the design as the one above.
Three processors, and no others.
We do not use Google Analytics or any equivalent. We have never sold or shared personal data, and we do not intend to build a business in which that would be worth doing.
The store sets only what is needed to carry a purchase through checkout — a session cookie and whatever Stripe Checkout requires to process your payment securely. There are no advertising cookies, no analytics cookies and no cross-site trackers, which is why you are not being asked to dismiss a consent banner.
If you are in the EEA or the UK, you have the right to access your data, correct it, erase it, restrict or object to our processing of it, receive a portable copy, and lodge a complaint with your supervisory authority. If you are in California, you have the right to know, delete and correct, and to opt out of sale or sharing — which is already moot, because we do neither. You are also protected against being treated worse for exercising any of it.
If you live somewhere that grants you none of these, write to us anyway: we honour the same requests regardless of where you live. It is less work than deciding who qualifies.
Email owner@luminousworksllc.com from the address you purchased with. We will respond within 30 days.
One honest warning. Erasing your licence record destroys your ability to reactivate, to move a seat to a new machine, or to prove you bought anything — and we cannot undo it, because the record will be gone. If you ask us to erase it, we will tell you this first and wait for you to confirm.
We are a United States company and your data is processed in the United States and across Cloudflare's global network. Where personal data is transferred out of the EEA or the UK, that transfer is covered by the Standard Contractual Clauses maintained by the processors named in section 4.
All traffic to our licence service is over TLS. Licences are signed with an Ed25519 key whose private half is held only in the licence service's secret store and has never existed on a personal machine — the software you install carries the public half, which can verify a licence but cannot create one. The machine fingerprint is stored as a hash, so a copy of our activation table would not reveal a customer's hardware identifiers.
No system is perfect. If you believe you have found a vulnerability in ours, write to owner@luminousworksllc.com and we will take it seriously and credit you if you want the credit.
Our products are professional audio tools and are not directed at children under 16. We do not knowingly collect personal data from them. If you believe a child has given us data, write to us and we will delete it.
This page carries a version number and an effective date, both at the top. If we change it materially, we will email everyone holding a current licence rather than quietly reissuing the page.
Luminous.Works LLC
A Wisconsin limited liability company · WI LLC ID L088081
2800 E. Enterprise Ave Ste 333, Appleton, WI 54913, United States
owner@luminousworksllc.com