Privacy Policy

This Privacy Policy explains how MiGiC Music AB (Org.nr 559035-2067, Sturkö, Sweden) — the data controller — collects, uses, and protects your personal data, and the rights you have under the EU General Data Protection Regulation (GDPR). Questions or requests: [email protected].

1. What we collect

• Account & order details — name, email address, billing address, country, and (if given) company name.
• License data — the Hardware ID you provide and the licenses issued to you.
• Purchase records — products bought, amounts, receipt/invoice numbers, and transaction IDs.
• Payment data — handled by our payment provider; we receive a transaction reference and payment method type, not your full card number.
• Technical data — the IP address associated with a purchase, used for fraud prevention and tax records.

2. Why we use it, and our legal basis

• To fulfil your purchase — issuing licenses, sending receipts, providing account access (legal basis: performance of a contract).
• To meet legal obligations — keeping invoices and tax records (legal basis: legal obligation).
• To provide support and re-issue licenses (legal basis: contract / legitimate interests).
• To prevent fraud and abuse — including reCAPTCHA and IP logging at checkout (legal basis: legitimate interests).

We do not sell your personal data, and we do not use it for third-party advertising.

3. Who processes your data

We share data only with the service providers needed to run the shop, acting as our processors:

• Braintree (a PayPal service) — payment processing.
• SendGrid — sending your receipts, invoices, and account emails.
• Google reCAPTCHA — checkout fraud protection.

Some providers may process data outside the EU/EEA; where they do, appropriate safeguards (such as the EU Standard Contractual Clauses) apply.

4. How long we keep it

We keep purchase and invoice records for as long as required by Swedish accounting and tax law (currently seven years). Account and license data is kept while your account is active so you can re-download your licenses; you can ask us to delete it subject to those legal retention obligations.

5. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased, where no legal retention obligation applies;
• restrict or object to certain processing;
• receive your data in a portable format.

To exercise any of these, email [email protected]. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY), or your local supervisory authority.

6. Cookies

We use only the cookies necessary for the site and checkout to function — for example, keeping you signed in to your account and enabling fraud protection. We do not use advertising or cross-site tracking cookies.

7. Changes

We may update this policy from time to time; the current version is always the one published here, dated above. Related: our Terms & Conditions.