Privacy, plainly.

In short

The app runs offline and collects nothing. When you buy a licence we keep your name, email address, order reference and the production details, so we can deliver, reissue and support your licence and tell you about updates. Every update email has an unsubscribe. We do not sell or share your details. Card details go to Paddle and never reach us. Write to followspot@spotlightmaestro.com to see, correct or delete what we hold.

Who we are

Spotlight Maestro is made and sold by Gavan Swift, trading as Spotlight Maestro, in Melbourne, Australia. We are the data controller for the information described here. Contact: followspot@spotlightmaestro.com.

What we collect and where it comes from

When you buy a licence:

• From you at checkout: the production title, venue or tour name, number of followspots, an administrator username and an administrator password. The password is scrambled with a one-way hash the moment it arrives. Nobody, including us, can read it back. The order record is the only copy.
• From Paddle after payment: your name, email address, order reference, amount paid, currency and country. Paddle is our payment processor and merchant of record. Your card details go to Paddle and never reach us. Paddle’s privacy policy is at paddle.com/legal/privacy.

When you write to us: your email address and whatever you tell us.

When you use the website:

• Our web host keeps standard server logs that include your IP address, browser type and the pages you visit. We do not add analytics or tracking of our own.
• The download counter stores a short one-way hash made from your address, browser and the month. It cannot be turned back into your address.
• The checkout guard keeps a hash keyed to your address for ten minutes to stop abuse.
• The Paddle checkout window sets Paddle’s own cookies while it is open.

When you use the app: nothing. Spotlight Maestro runs on your own computers, works fully offline, sends no telemetry and never phones home. Show data stays on the computer that runs the show.

Why we use it

• To mint and deliver your licence, and to reissue it if it is lost or the details are wrong.
• To answer support questions and handle refunds.
• To email you when a new version of the app is released.
• To keep the business and tax records the law requires.
• To detect and stop fraud or abuse of the checkout.

For buyers in the EU and UK, our lawful bases are performance of our contract with you, our legitimate interest in supporting the product and keeping records, and our legal obligations. We make no automated decisions that significantly affect you.

Update emails

When a new version is out we email every licence holder with the release notes and a download link. Every one of these emails has an unsubscribe. Use it and we stop within five business days. Emails that deliver a licence, a reissue, a refund or a security notice are part of the service and continue even if you have unsubscribed from updates.

Who we share it with

• Paddle (United Kingdom and United States): processes your payment and holds the customer and transaction record. Paddle is the seller of record for your purchase.
• Vodien (Australia and Singapore): hosts the website and the mailbox that sends and receives our email, so copies of the emails we exchange with you sit on Vodien’s servers.
• The law, if a court or regulator requires it.

That is the whole list. We do not sell, rent or trade your details, and we do not give them to advertisers. We use AI writing tools to help draft update emails. Those tools receive the release notes only, never your name or email address.

Where it is kept and how it is protected

The licence register lives on a computer in Australia under our sole control. Its disk is encrypted, access needs a login, and it is backed up to encrypted storage. Passwords are stored only as one-way hashes. Card data is never held. The register is not reachable from the internet.

How long we keep it

• Licence records: for as long as the licence is in use, so we can reissue it and answer questions, then seven years for tax and business records.
• Support emails: two years after the last message.
• Server logs: rotated by our host. We keep no copy.
• Checkout guard hashes: ten minutes.

Your rights

Email followspot@spotlightmaestro.com to:

• see the personal information we hold about you;
• correct it;
• delete it. A deleted licence record cannot be reissued, so we will confirm that with you first and keep only the order reference our tax records need;
• stop update emails;
• ask a question or make a complaint about how we handle your information.

We answer within 30 days. If you are in the EU or UK you also have rights to restrict or object to processing and to receive a copy of your data in a portable form.

Complaints

Tell us first and we will try to put it right. If you are not satisfied you can complain to the Office of the Australian Information Commissioner at oaic.gov.au. Buyers in the EU or UK can also complain to their local data protection authority.

If something goes wrong

If your information is involved in a data breach that could cause you harm, we will tell you what happened, what we are doing about it and what you can do, as soon as we can and within 72 hours of finding out.

Changes

When this policy changes the date at the top moves. If a change matters to existing licence holders we will email them.