nClear Audio plugins
Legal

nClear audio plugins

Privacy Policy

Version 1.0 Effective date: 2026-07-30

1. Controller and scope

Individual Entrepreneur ILIA TSVETKOV, identification number 106402991, trading as nClear, is the controller of personal data processed for the nClear website, software delivery, licensing, activation and product support.

Address: Georgia, Tbilisi, Nadzaladevi district, Chargali street N79b, flat N408.

Privacy requests: [email protected].

Paddle separately processes buyer, payment and transaction data as authorised reseller and Merchant of Record under Paddle’s own privacy notice.

2. Data processed

Website and security

The website and infrastructure may process IP address, request time, requested page, referrer, User-Agent, response status, security/rate-limit events and error logs. Routine request/error logs use a short rolling schedule. Self-hosted Umami may record high-level page, referral, campaign, browser, device, operating-system, language, screen-size and approximate-geography information. nClear does not intentionally use analytics cookies for its product analytics.

Purchase and entitlement

For a Paddle purchase, nClear may receive the buyer’s email and name or business name, product, price, currency, transaction status and date, Paddle references, country/tax information made available to the supplier, and refund or dispute status. nClear stores the corresponding product entitlement and licence status.

nClear does not receive or store full payment-card details. Paddle and its payment partners process them.

Licensing and activation

nClear may process the product and plug-in version, platform and format, licence and entitlement references, activation status, a normalised machine token or hash, slot/replacement history, and security metadata needed to validate licence requests.

For offline activation, the portal processes the selected entitlement and uploaded .auth request to issue a signed machine-bound .lic. Raw activation files are used only for the requested operation and are not placed in general analytics or support logs.

Email and support

nClear processes the account or purchase email and transactional-message status to send purchase delivery, one-time account codes, activation notices and support replies. Creating a free-download link does not itself send an email.

If a user contacts support, nClear processes the message, contact details and technical information voluntarily supplied. The support form may accept up to three attachments. Attachments are stored with restricted private access and are scheduled for deletion 30 days after the support case closes, unless a documented active dispute, security incident or legal claim requires longer preservation. Do not upload passwords, payment-card data, private keys, government identifiers, confidential client material, unreleased audio/projects or other unnecessary sensitive information.

The submitted support email may be matched server-side to an existing paid entitlement. A match is marked paid_email_match and may help route the request; it does not prove that the sender controls the account. Account-specific or licensing-sensitive disclosure/action requires a one-time code or authenticated account session and is then marked verified_paid.

Telegram receives only a generic notification that a support request exists. The notification does not contain the sender name/email, message, attachment or attachment link, paid status, case/transaction/licence identifier, or other customer data.

What normal plug-in use does not send

Normal local audio processing does not intentionally send audio, DAW projects, presets, automation, MIDI, detected pitch or note data to nClear. nClear does not claim ownership of user audio and does not use customer audio or projects to train AI models without separate explicit agreement.

nClear processes data where necessary to:

  • perform the product contract: delivery, entitlement creation, activation, recovery and support;
  • comply with accounting, tax, consumer-protection and other legal obligations;
  • protect legitimate interests in service security, fulfilment evidence, licence-limit enforcement, fraud/chargeback prevention, troubleshooting, dispute handling and legal claims, where those interests are not overridden by the user’s rights;
  • act on consent for optional marketing or other processing that legally requires consent.

This Privacy Policy is a notice about processing, not a contract that the user is asked to accept. Required service, security and evidence processing relies on the applicable contract, legal-obligation or legitimate-interest basis. Purchasing or activating an nClear product is not consent to unrelated marketing. Marketing, if introduced, must use a separate opt-in and simple unsubscribe route.

4. Providers and recipients

The minimum necessary data may be processed by:

  • Paddle — transaction, tax, receipt, billing/refund and fraud handling;
  • Cloudflare — website delivery and network security;
  • Hetzner — website, licence service, database and backups;
  • Google Fonts — delivery of website font files and the associated network request metadata;
  • Brevo — purchase, one-time account codes, service email and related delivery/open/click statistics;
  • Zoho Mail — incoming and operational email;
  • self-hosted Umami — website analytics;
  • professional advisers, courts, regulators or authorities where reasonably necessary or legally required.

Where a provider acts as nClear's processor, nClear uses the provider's written service/data-processing terms and limits the processing instructions to the service being provided. Some recipients, including Paddle in its Merchant of Record role, may act as separate controllers for their own transaction, compliance or fraud purposes.

5. International processing

Some providers or subprocessors may process data outside Georgia. nClear documents the relevant provider entities, processing locations and lawful transfer basis.

For an international transfer, nClear uses a destination recognised by Georgian law as providing adequate safeguards or another lawful transfer ground and safeguard. Where Georgian law requires regulatory permission for an agreement-based transfer, nClear obtains that permission before relying on that transfer.

6. Retention

nClear keeps personal data only for as long as needed for delivery, licence continuity, support, security, accounting, disputes and legal obligations.

In particular:

  • transaction and accounting documents are retained for the legally required period, normally six years after the relevant accounting period;
  • entitlement, licence, activation and known-machine records are retained while needed to provide and prove the perpetual licence and enforce its computer limits, then only for applicable legal or claim periods;
  • one-time account codes become unusable after 15 minutes; related security records are retained only briefly for abuse prevention and troubleshooting;
  • ordinary web-server and error logs use short rolling retention unless an active incident or claim requires longer preservation;
  • source IP address and User-Agent attached to significant checkout, delivery, portal, licensing, support, refund/dispute or attributable operator events are retained for up to 365 days, then deleted or depersonalised unless a documented active dispute, fraud investigation, security incident or legal claim reasonably requires longer preservation;
  • support attachments are scheduled for deletion 30 days after the support case closes, unless a documented active dispute, security incident or legal claim requires longer preservation;
  • support, email-provider, analytics and backup data are otherwise deleted or minimised when their operational or legal purpose ends.

Deletion from immutable rolling backups may occur through the backup’s ordinary expiry rather than immediate item-level removal.

7. Rights

Depending on the applicable law, a person may request information about processing, access and a copy, correction, deletion, restriction, objection, portability where applicable, withdrawal of consent, and human review of an automated decision.

Send requests to [email protected]. nClear may request proportionate information to verify identity. Under Georgian law, the main information, access, correction and deletion requests are normally handled within 10 working days; an extension is used only where the applicable rule permits it.

A request may be limited where data must be kept for a valid licence, accounting/tax duty, security, fraud prevention or the establishment, exercise or defence of legal claims. nClear explains any lawful limitation.

A person may also complain to the competent Georgian data-protection supervisory authority or a competent court.

8. Security and automated licence checks

nClear uses reasonable measures appropriate to the service, including transport encryption, restricted access, signed licence files, machine tokens or hashes rather than intentionally collected raw hardware identifiers, rate limits, backups and security logging. Administrative access, disclosure, alteration and deletion operations involving personal data are recorded through ordinary database or system audit logs.

Automated licence validation may deny an individual activation or replacement request. The user may request human review through [email protected].

No online system is perfectly secure. Do not send passwords, full card details, private keys, readable OTPs or unnecessary confidential project material to support.

9. Children and changes

nClear audio plug-ins and related software are not directed to children. If nClear learns that a child supplied personal data without a valid basis, the data will be handled appropriately.

This policy may be updated when the product, providers, law or processing changes. The current version and effective date will be published. A material change will be communicated where required.

10. Contact