Privacy Policy

Last updated: January 2, 2026

This Privacy Policy explains how Sunrise Software Oy ("we", "us", "our", "Company") collects, uses, and protects your personal data when you use MasterForge services. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and Finnish data protection laws.

            Key Point: Our audio mastering tools process files locally in your browser. Your audio files are never uploaded to our servers during normal use.
        

1. Data Controller Information

The data controller responsible for your personal data is:

Sunrise Software Oy
Business ID: 3588983-1
Finland
Email: privacy@masterforge.app

2. What Data We Collect

2.1 Data You Provide

Data Type	When Collected	Purpose
Email address	Account registration	Account management, communications
Name	Account registration (optional)	Personalization
Payment information	Subscription purchase	Payment processing (via Stripe)
Support inquiries	When you contact us	Customer support

2.2 Automatically Collected Data

Data Type	Purpose	Legal Basis
IP address	Security, fraud prevention	Legitimate interest
Browser type/version	Service optimization	Legitimate interest
Device information	Service compatibility	Legitimate interest
Usage statistics	Service improvement	Legitimate interest

2.3 Mastering Usage Logs

Service Usage Verification: We collect limited usage data when you use our mastering tools. This data is necessary for service verification and refund processing in accordance with EU Consumer Rights Directive.

Data Type	Purpose	Retention Period
Mastering action type (upload, process, download)	Service usage verification for refund eligibility	90 days
Preset name selected	Service quality and improvement	90 days
File name (metadata only)	User reference, support inquiries	90 days
File size	Service optimization, abuse prevention	90 days
Timestamp	Audit trail, support	90 days

Important: We do NOT store the actual audio content of your files. The file name is metadata only. All audio processing occurs locally in your browser.

This data is collected under GDPR Article 6(1)(b) (contract performance) as it is necessary to verify service usage for refund eligibility under EU consumer protection laws. After 90 days, this data is automatically deleted.

2.4 Data We Do NOT Collect

Your Audio Files: We do not collect, store, access, or process the audio files you master using our tools. All audio processing occurs locally in your web browser on your own device.

3. Legal Basis for Processing (GDPR Article 6)

We process your personal data based on the following legal grounds:

Contract Performance: Processing necessary to provide the Services you requested (account management, subscription services)
Legitimate Interest: Processing necessary for our legitimate business interests (security, analytics, service improvement)
Consent: Where you have given explicit consent (marketing communications)
Legal Obligation: Processing required by law (tax records, fraud prevention)

4. How We Use Your Data

We use your personal data to:

Provide and maintain our Services
Process payments and manage subscriptions
Send service-related communications
Respond to support requests
Improve our Services and develop new features
Prevent fraud and ensure security
Comply with legal obligations

5. Data Sharing and Transfers

5.1 Service Providers

We share data with trusted third-party service providers who assist in operating our Services:

Provider	Purpose	Location
Cloudflare	Website hosting, CDN, security	Global (EU data centers available)
Stripe	Payment processing	USA (EU-US Data Privacy Framework)

5.2 International Transfers

When data is transferred outside the EU/EEA, we ensure appropriate safeguards are in place:

EU-US Data Privacy Framework certification
Standard Contractual Clauses (SCCs)
Adequacy decisions by the European Commission

5.3 We Do NOT

Sell your personal data to third parties
Share your data for third-party marketing
Use your audio content for any purpose

6. Data Retention

We retain your personal data only as long as necessary:

Data Type	Retention Period
Account data	Duration of account + 30 days after deletion
Payment records	6 years (Finnish accounting law)
Support communications	2 years after resolution
Analytics data	26 months (anonymized after)

7. Your Rights Under GDPR

As a data subject, you have the following rights:

7.1 Right of Access (Article 15)

You can request a copy of all personal data we hold about you.

7.2 Right to Rectification (Article 16)

You can request correction of inaccurate personal data.

7.3 Right to Erasure (Article 17)

You can request deletion of your personal data ("right to be forgotten").

7.4 Right to Restrict Processing (Article 18)

You can request limitation of how we process your data.

7.5 Right to Data Portability (Article 20)

You can request your data in a machine-readable format.

7.6 Right to Object (Article 21)

You can object to processing based on legitimate interests.

7.7 Right to Withdraw Consent

Where processing is based on consent, you can withdraw it at any time.

To exercise your rights: Contact us at privacy@masterforge.app. We will respond within 30 days. You may also lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).

8. Cookies and Tracking

We use cookies and similar technologies to:

Essential cookies: Required for the Services to function (authentication, security)
Analytics cookies: Help us understand how you use the Services (with your consent)

You can manage cookie preferences in your browser settings. Disabling essential cookies may affect functionality.

9. Security Measures

We implement appropriate technical and organizational measures to protect your data:

HTTPS encryption for all data transmission
Secure authentication systems
Regular security assessments
Access controls and logging
Data minimization practices

10. Children's Privacy

Our Services are not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the Services. The "Last updated" date at the top indicates when the policy was last revised.

12. Contact Us

For privacy-related questions or to exercise your rights:

Sunrise Software Oy
Email: privacy@masterforge.app
Finland

Supervisory Authority:
Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto)
Website: tietosuoja.fi