Your audio stays yours.

Effective October 2026. This policy explains what personal data the Impact Studio website, store and license service handle, why, and the choices you have. It covers useimpactstudio.com and the license checks the Mac app makes.

Who is responsible

The controller of your personal data is David Yousefi Hashtyani, a sole proprietor (“we”, “us”), of 14 Jalan Hang Tuah 1/4, 81550 Gelang Patah, Johor, Malaysia. For any privacy question or request, email contact@dyaudiomx.com.

Polar Software, Inc. (“Polar”), the Merchant of Record for your purchase, handles your payment and billing details as a separate controller under the Polar Privacy Policy.

What Impact Studio keeps on your Mac

Generation, Reconstruction, audio analysis, editing and My Signature training run on your Mac. Impact Studio does not send your imported recordings, prompts and generated sounds, the sounds you add to My Signature or the specialists you train to us or to any online AI service. The license service never receives your audio or prompts. The My samples index, with the folders you add and the categories, tags, favorites and sync points you set, also stays on your Mac, and your sample files are read where they are, never uploaded. If you turn on Agent access, an AI app you connect can see some of this; see Agent access below.

Agent access

From Impact Studio 1.2 you can let AI apps and other programs on your Mac, such as your own scripts, create and export sounds through Agent access. It is off until you turn it on in Settings, and it accepts only apps on the same Mac. Agent access sends nothing to us. Sound files an app hands to Impact Studio, the sounds it makes and a short log of recent agent requests (which app, which action and when, never what was sent) stay on your Mac.

The AI app you connect is a third party, not part of Impact Studio. Whatever you or that app send to its provider, such as your requests, file names and folder paths, directions, results and any sound files the app reads, is handled under that provider’s terms and privacy policy. An app that runs its AI model on your Mac may send nothing at all. Check how an app handles your data before you connect it.

“Share my takes with agents” is on by default. While it is on, a connected app can also see the takes you made in the studio, your saved directions and the sound open in the instrument, with their names, folders, tags, settings and the text you typed. It can export those sounds and save changed versions of them as new takes; your originals never change. Turn it off in Settings › Agent access and agents see only the sounds agents made.

“Share my samples with agents” is off until you turn it on. While it is on, a connected app can search My samples, see each sample’s name, category, tags, folder and subfolder names and measurements, and place a sample in a cue sheet. It never sees where the files are on your Mac. With AI generation off, the sounds an app asks for are built from your samples whether this is on or not.

What we process and why

Purchase and license. When Polar confirms a purchase, it sends us the order. From it we keep the first and last name you enter at checkout, your email address, the order references and the amount and currency paid, together with the status of your license. We use them to issue your license, show its code on the thank-you page, show the owner’s name in the app, email and recover your license code, and handle refunds and payment disputes. Your name and email address are needed to issue a license; without them we cannot provide one. Your license code is stored encrypted and as a one-way hash.
Activation. Each Mac you activate adds a one-way hashed identifier for that Mac, a device label made of the Mac model and the last four characters of that hash (such as “MacBook Pro · 3f9a”, never your computer’s name), the activation date and when it last checked the license. The app also sends its version number. We use this to keep the two-Mac limit and to let you tell your Macs apart on the devices page.
Mac releases. When you release a Mac from the devices page, we record its hashed identifier and the time, to apply the limit on remote releases.
Security. To protect activation, license checks, recovery and the devices page from abuse, we count requests per IP address. The address is stored only as a keyed one-way hash, and these records are deleted after about two hours.
Email. License delivery and recovery emails are queued in encrypted form and sent from a no-reply address through our email provider. If you email us, we use your message and address to answer you.
Hosting. Like any website, our hosting provider processes technical request data, such as your IP address, browser type and the pages you request, to deliver the site and keep it secure.

We do not sell your personal data, use it for advertising or profiling, or send you marketing email.

Legal bases

Where the GDPR or the UK GDPR applies, we rely on:

contract, to issue, deliver, activate, check and recover your license and to answer your support requests;
legitimate interests, to prevent license sharing, fraud and abuse, keep the service secure, and establish or defend legal claims;
legal obligation, to keep the records that accounting and tax law require and to respond to lawful requests.

Under Malaysia’s Personal Data Protection Act 2010, we process your data only for the purposes above, which are directly related to your purchase and license.

Service providers

Polar (Polar Software, Inc., United States) runs checkout, payment, tax and receipts as Merchant of Record, and uses Stripe to process payments. We never see your full card details.
Vercel (Vercel Inc., United States) hosts the website and license service.
InsForge hosts our PostgreSQL database in the United States (us-east).
Resend (United States) sends license delivery and recovery emails.

These providers process your data only as needed to provide their services. When the app prepares its sound engine, it downloads the model files directly from Stability AI’s official repository on Hugging Face, and you download the installer from your purchase on Polar. Both receive ordinary connection information, such as your IP address, needed to deliver the files.

How long we keep it

License, order, activation and Mac release records: for as long as your license exists, so we can check, recover and support it, and afterwards only as long as accounting, tax or other legal obligations, or a pending legal claim, require.
Rate-limiting records: about two hours.
Your emails to us: as long as needed to answer you and to keep a record of support given for your license.

If you ask us to delete your data, we will delete or anonymize it unless the law requires us to keep it. Deleting your license record ends your license, because it can then no longer be checked or recovered.

International transfers

We are based in Malaysia, and our providers process data mainly in the United States. Where your country’s law requires it, these transfers rely on appropriate safeguards, such as Standard Contractual Clauses where our providers offer them, and they are made as Malaysia’s Personal Data Protection Act 2010 permits.

Your rights

Depending on where you live, including under the GDPR, the UK GDPR and Malaysia’s Personal Data Protection Act 2010, you can ask to access your personal data, correct it, delete it, restrict or object to its use, receive a copy in a portable format, or withdraw consent where we rely on it. Email contact@dyaudiomx.com from your purchase address, or tell us which address you bought with. We may ask you to confirm that the request is yours. We aim to reply within 21 days, and always within the time the law allows.

You can also complain to a data protection authority, such as the one where you live, the UK Information Commissioner’s Office or Malaysia’s Personal Data Protection Commissioner.

Cookies and tracking

This website sets no cookies and uses no analytics, advertising or tracking tools. Its fonts are served from the site itself. What you type on the support and devices pages goes only to our license service and is not stored in your browser. When you choose to buy, the site loads Polar’s checkout script from the jsDelivr network, which receives ordinary connection information such as your IP address, and opens Polar’s checkout over the page, or on Polar’s own site if it cannot load there. That checkout is run by Polar and may use its own cookies, as described in Polar’s policies. If we ever add analytics or other cookies, we will update this policy first and ask for your consent where the law requires.

Security

Connections to the website and license service are encrypted. License codes and queued emails are stored encrypted, Mac identifiers and IP addresses only as one-way hashes, and the database is private to the license service. Never post your license code publicly, and do not include private recordings or your full license code when you contact us.

Children

Impact Studio is not directed at children, and we do not knowingly collect personal data from children.

Changes

We may update this policy as Impact Studio changes. We will post the new version here with a new effective date.

Contact

David Yousefi Hashtyani (Impact Studio)
14 Jalan Hang Tuah 1/4, 81550 Gelang Patah, Johor, Malaysia
contact@dyaudiomx.com