Privacy Policy.
XRB Audio, a trading division of XRealityBytes (United Kingdom) · Last updated July 2026
What we collect and why
We store the minimum needed to run your account and licenses:
- Account: your name, email address, and avatar as provided by your sign-in provider (Google or Apple). We never see or store passwords.
- Orders: what you bought, when, and the Stripe transaction reference. Payment is processed entirely by Stripe — card details never touch our servers.
- Licenses and activations: your license keys and, per activated machine, a one-way SHA-256 fingerprint plus an optional machine name you choose. We never see raw hardware identifiers.
- Email: we send transactional email only (receipts, license delivery, release notes for products you own). No marketing without separate, explicit consent.
The legal bases under UK GDPR are performance of a contract (account, orders, licenses, transactional email) and legitimate interest (preventing license fraud).
Who processes it
We use a small set of processors to run the service: Vercel (hosting and downloads), our managed Postgres database provider, Stripe (payments), and Resend (transactional email). Each processes data only on our instructions. Some processors operate outside the UK/EEA under standard contractual clauses or an adequacy decision.
Cookies
We set essential cookies only: a session cookie when you sign in. There are no third-party ad trackers and no analytics cookies.
Retention
Account and license records are kept while your account exists, and order records for six years as required by UK tax law. Activation fingerprints are deleted when you deactivate a machine or delete your account.
Your rights
You may request access to, correction of, or deletion of your personal data, object to or restrict processing, and request portability. To exercise any right, email xrealitybytes@gmail.com. Deleting your account revokes active licenses — we'll confirm before proceeding. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk).