Privacy Policy.

XRB Audio, a trading name of XRealityBytes (United Kingdom) ·Last updated October 2026

What we collect and why

We store the minimum needed to run your account and licenses:

• Account: your name, email address, and avatar as provided by your sign-in provider (Google or Apple). We never see or store passwords.
• Orders: what you bought, when, and the Stripe transaction reference. Payment is processed entirely by Stripe — card details never touch our servers.
• Licenses and activations: your license keys and, per activated machine, a one-way SHA-256 fingerprint plus an optional machine name you choose. We never see raw hardware identifiers. Starting a free trial in the app or plug-in sends us a one-way hash of your Mac's hardware ID plus the app or plug-in version and the macOS version, and we keep a hash of the IP address the request came from, used only to limit abuse.
• Email: we send transactional email only (receipts, license delivery, release notes for products you own). No marketing without separate, explicit consent.
• Beta programme (only if you apply): what you tell us in your application — your role, the kind of work you'd test on, your macOS version and Mac, the hosts you use and anything else you add — plus which version of the evaluation agreement you accepted, and when. We use it to decide on your application and to run the programme: issuing keys, and emailing you about builds and expiry dates.

The legal bases under UK GDPR are performance of a contract (account, orders, licenses, transactional email, and the evaluation agreement if you join the beta programme) and legitimate interest (preventing license fraud, and reviewing beta applications).

Who processes it

We use a small set of processors to run the service: Vercel (hosting and downloads), our managed Postgres database provider, Stripe (payments), and Resend (transactional email). Each processes data only on our instructions. Some processors operate outside the UK/EEA under standard contractual clauses or an adequacy decision.

Cookies

We set essential cookies only: a session cookie when you sign in. There are no third-party ad trackers and no analytics cookies.

Retention

Account and license records are kept while your account exists, and order records for six years as required by UK tax law. Activation fingerprints are deleted when you deactivate a machine or delete your account. Free-trial records are the exception: they belong to no account, and we keep them so that a trial cannot be restarted on the same Mac. The IP hash in a trial record is only needed for 24 hours, and is deleted at our first daily clean-up after that. Beta applications are kept while you're in the programme and for 12 months after you leave or it ends, together with the record of which agreement version you accepted and when, in case we need to show what was agreed. Deleting your account deletes both.

Your rights

You may request access to, correction of, or deletion of your personal data, object to or restrict processing, and request portability. To exercise any right, email xrealitybytes@gmail.com. Deleting your account revokes active licenses — we'll confirm before proceeding. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk).

Who controls your data

• Trader: XRB Audio, a trading name of XRealityBytes (United Kingdom).
• Trading address: 124 Lodge Road, Bristol BS15 1LJ, United Kingdom
• Contact: xrealitybytes@gmail.com