Privacy Policy

The Services are operated by ONWARD AUDIO LLC, a Texas limited liability company. Our website is www.onwardaudio.com. You can reach our privacy team at privacy@onwardaudio.com.

We collect only the categories of information listed below.

Account information.

When you create an account, our authentication provider (Supabase) stores your email address and a salted password hash, or — if you sign in with Google — the basic profile information that provider returns to us (name, email, profile picture URL).

Subscription and billing information.

Payments are processed by Stripe, Inc. We do not store full credit card numbers, CVCs, or bank account numbers. From Stripe we retain a customer ID, subscription status, plan tier, billing period dates, the last four digits of the payment method, and the country of the card issuer.

Service usage information.

To enforce monthly token budgets and prevent abuse, we record per-user usage events: timestamps, input/output token counts, plan tier at the time of the event, and an internal session identifier. We do not sell this data.

Mix consultation content.

When you use The Perfectionist console, the prompts and assistant responses for a session are stored in your account so you can return to them. Anthropic, PBC processes prompts and returns model output under its commercial terms; Anthropic does not train its public models on your prompts under those terms.

Satellite telemetry.

If you install the Perfectionist Satellite Audio Unit in Logic Pro and pair it with your account, the plugin posts compact JSON measurements to POST /api/satellite/telemetry. These measurements describe the signal — peak, RMS, crest factor, clipping count, stereo correlation, phase risk, spectral balance, frequency band levels, host name, track name, sample rate, channel count, and window length. The Satellite does not upload raw audio, project files, plugin presets, or chain state. The endpoint rejects payloads larger than 64 KB.

Technical information.

When you visit the website, our hosting provider (Vercel) logs the request IP address, request path, user agent, and HTTP status, in standard server logs for security and abuse-prevention purposes.

• To authenticate you and keep you signed in to your account.
• To deliver the Services — running consultations, computing token usage, enforcing plan limits, and storing your saved sessions.
• To process payments and provide receipts through Stripe.
• To improve, secure, and debug the Services, including rate-limiting, fraud prevention, and error monitoring.
• To communicate with you about your account, billing, security, and material changes to the Services. We do not send marketing email unless you specifically opt in.
• To comply with law and respond to lawful requests.

For users in jurisdictions that require it, we process personal information on the following bases: performance of the contract you enter into when you create an account (account, billing, service usage, satellite telemetry); our legitimate interest in operating, securing, and improving the Services (technical logs, abuse prevention); and your consent where required (non-essential cookies, if any are added later).

We do not sell personal information. We share it only with the service providers we rely on to run Onward Audio, and only as needed for them to provide their service:

• Supabase, Inc. — authentication and database hosting.
• Vercel, Inc. — web hosting, edge network, deployment logs.
• Stripe, Inc. — payment processing, subscription management, billing portal.
• Anthropic, PBC — large language model inference for The Perfectionist.
• Google LLC — only if you choose to sign in with Google; we receive basic profile info.

We may also disclose information when required by law, to protect the rights, property, or safety of Onward Audio, our users, or others, or in connection with a corporate transaction such as a merger or acquisition (with notice to you where appropriate).

We keep account information while your account is active. Usage events and satellite measurements are retained for up to 24 months to support analytics and billing dispute resolution. Stripe billing records are retained according to Stripe’s own retention policies and as required by tax and accounting law. You can ask us to delete your account at any time by emailing privacy@onwardaudio.com; we will delete it within 30 days, subject to any legal record-keeping obligation.

We use TLS for data in transit, salted hashing for passwords, row-level security in our database, and short-lived access tokens for sessions. Satellite account links are stored server-side as one-way hashes, and the private connection stays local to the plugin. No system is perfectly secure; you are responsible for keeping your Onward Audio account secure.

Depending on where you live, you may have the right to access, correct, delete, or port your personal information, or to object to or restrict certain processing. Texas residents have rights under the Texas Data Privacy and Security Act (TDPSA). California residents have rights under the California Consumer Privacy Act (CCPA/CPRA), including the right to know what we collect and the right to delete. We do not sell personal information and do not share it for cross-context behavioral advertising.

To exercise any of these rights, email privacy@onwardaudio.com from the address on your account. We will verify your request and respond within the timeframe required by applicable law.

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided information to us, contact privacy@onwardaudio.com and we will delete it.

The Services are operated from the United States. If you access them from outside the U.S., your information will be transferred to, stored, and processed in the U.S. and other countries where our service providers operate.

We may update this Privacy Policy from time to time. Material changes will be announced on the Services or by email. The “Effective” date at the top of this page indicates when the current version was published.