Privacy notice
Who we are
Audiogen LTD, company ID (UIC) 206277198, registered office Yuri Gagarin Str., bl. 36, entr. V, fl. 2, ap. 53, 2304 Pernik, Bulgaria, trading as Tripet Audioware ("we"). We are the controller of the personal data described here. Contact for privacy questions: support@tripetaudioware.com. Our telephone number is in the imprint.
The Lumen plugin collects nothing
Lumen checks your licence key on your own computer. It does not connect to the internet, does not send usage data, and has no analytics. Your licence key file holds the name and e-mail address you bought it with, and stays on your computer. The Help button opens a page stored inside the plugin, and the problem-report button opens your e-mail program.
What we keep when you buy or ask for support
| Data | Where it comes from | Why (legal basis, GDPR Art. 6(1)) | How long |
|---|---|---|---|
| Name, e-mail address, country, order number, price, tax, coupon | The store you bought from (our reseller, see below) | Issue and deliver your licence key, replace it if you lose it, answer you: the contract with you, (b) | 5 years after your last order or support contact, then deleted. 5 years is the general limitation period for claims (Bulgarian Obligations and Contracts Act, Art. 110), so we can still answer or defend a claim until then |
| Your licence key, its issue date, whether it was revoked | We create it | Same; and our legitimate interest in recording refunds and revoked keys, (f) | Same |
| What you tell us in a support message, and our replies | You | Answer you: (b) | 5 years after the last message |
| Only if you open an account on this website: a copy of your orders (order number, date, amount, status) and licence keys, with your e-mail address, on our web host | We copy it from our own records, a few minutes after your first sign-in | So that your keys and orders are there when you sign in: (b) | As long as the account exists; deleted with it |
| Your account on this website, if you open one: e-mail address, the name you enter, when you signed up and last signed in, your support tickets | You | Show you your keys, orders and downloads and answer you: (b) | Until you delete the account (you can, on its Profile page), or 5 years after your last sign-in, when we delete it automatically; tickets are also copied to our support inbox and kept as support messages. Sign-in links expire after 20 minutes; a sign-in lasts until you close the browser (at most 12 hours), or 30 days if you ask to stay signed in |
| When you ask for a sign-in link: the e-mail address and your IP address | You | Stop the sign-in form being misused to send mail or guess links: our legitimate interest, (f) | 24 hours |
| When you look up which address an order was bought with: the order number you type and your IP address | You | Mail a sign-in link to the address on that order (never shown to you), and stop the form being misused: our legitimate interest, (f) | 24 hours |
| Machine or host name, only if you report an activation problem | You | Fix the problem: (b) | Until the problem is closed, then as above |
| Invoices and payout records for our sales to the store | Our bookkeeping | Legal duty to keep accounts, (c). These are business records and do not carry your name or e-mail | 10 years for accounting registers (Bulgarian Accountancy Act, Art. 12) |
We do not sell your data and do not use it for advertising profiles.
Who else sees it
- The store (merchant of record) that sold you Lumen, Paddle (Paddle.com Market Limited, 30 Old Bailey, London EC4M 7AU, United Kingdom; for buyers in the United States Paddle.com Inc., and in Canada Paddle.com (Canada) Ltd.). It is the seller and is a controller of your data in its own right: it takes your payment, handles tax and refunds under its own privacy notice (paddle.com/legal/privacy), and passes us the order details above so that we can deliver your licence. We are a separate controller of the copy it gives us; Paddle is responsible for the payment and tax data it collects, we for the order details we receive. Neither of us processes your data on behalf of the other.
- Our e-mail and website host, superhosting.bg (Bulgaria), which runs our mail server and our website and carries the mail we send and receive. If you open an account on our website, it also keeps the account, your support tickets and a copy of your orders and licence keys, so that you can see them when you sign in. It acts as our processor.
- Our accountant, an independent professional who keeps our books. It receives our invoices to the store and payout records, not your name or e-mail. If an accounting document ever does carry your details, the accountant is bound to confidentiality and acts on our instructions.
- Authorities, when the law requires it (for example tax authorities).
Where we got your data (GDPR Art. 14): from the store that sold you Lumen (and from you, when you write to us). This notice is linked in the licence e-mail, which is our first contact with you.
This website
The website has no analytics or advertising. Our web host keeps ordinary server logs (IP address, page, time) to run and secure the site, for a limited period set by the host, and then deletes them.
Your account. You can sign in on the account page to see your licence keys, orders and downloads and to ask us for support. There is no password: we e-mail you a link that signs you in. Signing in sets one cookie, ta_session, which keeps you signed in on that browser until you close it, or for 30 days if you tick "Keep me signed in", and is used for nothing else. Signing out removes it. If you don't sign in, it is never set. The account page shows the orders and keys we hold for the address you sign in with (we copy them to the website only once you have an account), and copies what you write under Support to our support inbox. On the Profile page you can download everything the account holds and delete the account. Deleting it removes the account, your sign-ins, your support tickets and the copy of your orders and keys from the website; your licence keys keep working. We keep our own order and key records and your support messages for the periods in the table above, because we need them to replace your key and to answer or defend a claim (GDPR Art. 17(3)(e)). If you want those erased too, write to us.
The store's checkout script is loaded only when you press the buy button: from then on the checkout is run by Paddle under its own privacy notice and may use cookies or similar storage in your browser. Apart from the sign-in cookie, this website stores nothing in your browser. You can look at what a site stores, and delete it, in your browser settings at any time.
How we protect it
Our records live on our own computer, protected by our account login; API keys are in the macOS Keychain. The copy behind website accounts is kept on our host, outside the public web folder; sign-in links and sign-ins are stored only as one-way hashes, and the site is reached only over HTTPS. We use an AI assistant to help run the business (build checks, release work, marketing). It is set up so that it cannot open our order records or your messages, and it is shown only counts and order numbers, never names or e-mail addresses. Only we can open your data. If a breach is likely to put your rights at high risk, we tell you without undue delay (GDPR Art. 34).
Outside the EU
Our e-mail and website host is in Bulgaria, and so is our accountant. Paddle.com Market Limited is in the United Kingdom, which the European Commission recognises as providing an adequate level of data protection. If you buy from the United States or Canada, Paddle.com Inc. (United States) or Paddle.com (Canada) Ltd. sells to you and collects your data there under Paddle's privacy notice; Canada is also recognised as adequate. We ourselves do not send your data outside the EU/EEA.
Your rights
You can ask us for access to your data, correction, erasure, restriction, a copy in a portable format, and you can object to processing based on our legitimate interests. Write to support@tripetaudioware.com; we answer within one month. We do not use automated decision-making or profiling. Erasure does not apply to records we must keep by law or need to defend a legal claim. If we processed data on your consent, you can withdraw it at any time. You can complain to the Bulgarian supervisory authority, the Commission for Personal Data Protection (CPDP), or to the authority in your own country.
Giving us your data is needed to receive and support a licence; without it we cannot issue a key.
Changes
We update this notice when what we do changes, and show the date here. Last updated: 16 October 2026.