Privacy notice

This notice describes what Astral Audio actually does with your information today: what this site collects, what we keep when you buy Astral Adapt, and what the plugin sends when you activate it. These documents were reviewed with legal counsel as of August 4, 2026. This review does not constitute a guarantee of compliance in every jurisdiction. The commercial amendments to this document were reviewed with legal counsel as of August 11, 2026.

Who is responsible

Astral Audio LLC, Connecticut, United States, is responsible for the information described here. You can reach us at general@astralaudioai.com. Postal address: 11 Sherwood Farm Ln, Greenwich, CT 06831, United States.

Who this site is for

The email signup form is intended for people aged 18 or over. Please do not submit information about anyone else, or on behalf of someone who has not asked you to.

When we approach someone about the product

Separately from the email signup, we keep records about people we have approached directly — guitarists, creators and potential partners — about testing or featuring Astral Adapt. This section describes only those records, and only people we contacted first. If you signed up through the form on this site, this section does not apply to you and the rest of this notice does.

For each person we record their name, email address, the social platform and handle we contacted them through, the dates we contacted and invited them, the status of that invitation, and internal notes we write about them — our own working comments, such as why we approached them or what has already been discussed.

This information comes from publicly visible profiles or from what the person tells us directly. We do not buy contact lists. We use it only to carry out and keep track of that outreach, and we do not use it to send marketing email unless the person signs up for that themselves.

Who else sees these records: nobody outside Astral Audio, other than Cloudflare, which hosts the database they are stored in. They are not sent to our email provider unless the person signs up for email themselves, and they are never sold or shared for advertising or for anyone else’s marketing.

We create these records by hand. No form on this site creates one.

We keep them until the outreach is finished and we no longer need them, or until the person asks us to delete them, whichever is sooner. Deletion on request is done by hand and includes the internal notes — contact us and we will remove the record.

What we collect

Required: your email address. Submitting the signup form subscribes you to guitar-tone tips, Astral demos and occasional product news.

Optional, when requested: your first name, DAW, operating system, guitar or pickup type, tone description and interest in beta testing. These details are not required for the email signup.

Recorded automatically: the signup consent wording version and timestamp, signup source, subscription and suppression status, and email scheduling, delivery and retry records. Historical records may also include confirmation timestamps and counts from our previous confirmation-based signup flow.

Your IP address is used at the moment you submit the form, to rate-limit abuse and to run the anti-bot check described below. It is not written to our database. For rate limiting it is converted into an irreversible keyed hash; for the anti-bot check it is passed to Cloudflare as part of verification.

When you browse this site

We measure how the site is used, and we do it without identifying you. For each page you open we record the page address, the campaign parameters in the link you followed if it had any, the website you came from — its address only, never the specific page or anything you searched for — the country your request arrives from, and whether you are on a phone, a tablet or a computer.

There is no cookie and no advertising pixel, and the only analytics script is Cloudflare Web Analytics, described below. We do not store your IP address, we do not keep the identifying details your browser sends about itself, and we make no attempt to recognise you between visits or to follow you to other websites. Nothing recorded while you browse can be traced back to a person, including by us: a second visit from your browser is indistinguishable from a first visit by someone else.

We use it to understand which pages people read, whether the links we publish and pay for actually bring anyone here, and how many people go on to open the purchase page. If you follow a link we advertised, the campaign name is carried in the links on the page so we can tell that a purchase started from it — carried in the address of the link itself, not stored on your device. If you go on to checkout, that link’s campaign tags — its source, medium and campaign name, and nothing else — are passed to Stripe with your checkout, so we can see which of our links led to a purchase. Anything in them that looks like an email address or a long number is left out. If you buy, the tags stay attached to that order record, which also holds your purchase email; they are not used to identify you anywhere else.

Cloudflare Web Analytics. Cloudflare, which hosts this site, also counts page views for us with a small script it adds to each page. It records the page you open, the page that linked you here, the type of browser, operating system and device you use, the country your request arrives from, and how quickly the page loaded. It sets no cookie and stores nothing on your device, and Cloudflare states that it does not fingerprint visitors or use this data to follow you across other websites. We see only totals in Cloudflare’s dashboard, never a record of an individual visit.

This describes the website only. There is no analytics, telemetry or crash reporting in the plugin, which is unchanged and described in full further down this page.

Why we use it

To deliver the emails you sign up for, prevent duplicate or unwanted sends, and act on unsubscribe or deletion requests. If you separately express interest in beta testing, supplied setup details help us select a representative group.

One-step email signup

Submitting the form with its subscription notice subscribes you and starts the welcome sequence; no separate confirmation email is sent. This does not verify ownership of the address. Only enter your own email. Existing pending records from the previous flow are not automatically subscribed, and existing opt-outs are not reset by a repeat signup. You can unsubscribe using the link in any marketing email.

Who processes it for us

Cloudflare hosts this site and stores signup records in Cloudflare D1. Cloudflare Turnstile performs the anti-bot check on the email signup form and on the licence resend form on our setup page, which involves sending your IP address and a verification token to Cloudflare. To stop those forms being abused, Cloudflare also counts recent requests against a coded form of your IP address and, on the resend form, of the email address you typed. Cloudflare receives only the coded form, never the address itself, and the counts last about a minute. Cloudflare Web Analytics measures page views and loading speed, as described under “When you browse this site”.

Resend sends our email. We check for an existing opted-out contact before accepting a new subscription. New one-step subscriptions are maintained in our database, without resetting Resend audience or topic preferences. Historical confirmed subscriptions may also have a Resend contact, audience membership and topic preference.

These providers process the information to provide those services to us. We do not sell your personal information, and we do not share it for advertising or for anyone else’s marketing.

Stripe processes payments if you buy Astral Adapt. We never receive or store your full card details.

Where it is processed

Cloudflare and Resend operate globally, so your information may be processed on servers outside your country, including in the United States. If you are outside the United States and would prefer we delete your record, email us and we will.

How long we keep it

Retained until unsubscribe or a deletion request; otherwise deleted after 24 months of inactivity Deletion on request is carried out by us by hand; there is no automated purge running today, so please contact us rather than assuming a record has aged out.

Security, and its limits

Confirmation and unsubscribe tokens are validated against keyed hashes and scoped by purpose. A pending email retry also temporarily stores its rendered email, including the unsubscribe link, so retries can send an identical request. That rendered copy is cleared when the send reaches a terminal state. The site does not keep raw IP addresses, anti-bot tokens or raw form submissions in its ordinary logs, and its analytics events are constructed to exclude your answers and identifiers.

No website can promise perfect security, and we do not. If you believe your information has been exposed, tell us at support@astralaudioai.com.

Your choices

Every email we send you — guitar-tone tips, Astral demos and occasional product news — carries an unsubscribe link, and mail apps that support one-click unsubscribe will work too. Unsubscribing stops the email and marks your record as unsubscribed; it does not delete the record.

To see what we hold about you, correct it, or have it deleted entirely, email general@astralaudioai.com. We will also act on complaints reported through your mail provider.

When you buy Astral Adapt

If you purchase Astral Adapt, we collect and keep:

• Your purchase email address, which identifies your licence and receives your licence key.
• Payment references from Stripe — customer, session, and payment identifiers — so we can reconcile payments, refunds, and disputes. We never receive or store your full card details. Stripe processes your payment under its own privacy policy.
• The versions of our legal documents that applied to your purchase, and the time your purchase was made, so we can show which terms you agreed to.
• The campaign tags of the link you arrived from, if it had any — its source, medium and campaign name, as described under “When you browse this site” — kept with your order at Stripe.

We keep this for the life of your licence and for a further period afterwards to meet tax and accounting obligations.

When you activate the plugin

Activating Astral Adapt sends us:

• Your purchase email address, which identifies the licence being activated. It is the same address you bought with.
• Your licence key, which authorises the activation.
• A device identifier. This is calculated on your computer by combining a hardware identifier with a code specific to Astral, then hashing the result. The underlying hardware identifier never leaves your computer, and we never receive it. The scoping code means the value is meaningful only to Astral and cannot be matched against another company’s records. This identifier is pseudonymous, not anonymous — it is stable and tied to one computer, so we treat it as personal information.
• Which product, platform and plugin version you are activating, for support and compatibility.
• Activation and renewal timestamps, to manage your activation slots and detect abuse.

When your licence renews or you deactivate

Renewal and deactivation do not send your email address and do not send your licence key. Both identify your computer using the device identifier above and the signed licence certificate already stored on it, along with which product it is for. A renewal additionally sends the platform and plugin version, and a short request identifier — so that if the request has to be retried, we issue one certificate rather than several.

We use all of this only to issue and renew your licence, keep activations within the limit you purchased, help you when you contact support, and investigate fraud or payment disputes.

What the plugin does not send

Your audio and the descriptions you type never leave your computer. Generate, Refine and Adapt run entirely on your machine. Astral Adapt does not upload audio, does not send your prompts to us or to anyone else, and does not use a hosted AI service to build a tone. There is no analytics, telemetry or crash reporting in the plugin.

Licensing is the only reason the plugin contacts the network at all. Its requests carry your licence details, the device identifier, and technical fields identifying the product and version — and nothing describing what you play, what you type, or what you make. No audio, and no part of a tone description, is ever included in them.

Your licence key

We do not store your licence key. We keep only a verification value and its last four characters, so we can confirm a key is valid without being able to reproduce it.

While a licence email is waiting to be delivered, your key and email address are held encrypted. Each copy is permanently deleted 30 days after the email it belongs to is confirmed delivered. After that we can no longer re-send your original key — recovering a lost licence means issuing a replacement, and your previous key stops working.

Asking for your key again. Within 30 days of your first licence email, you can ask for it again using the form on our setup page. The email address you type is used only to look up a licence, and we do not store it. If it matches an active licence, we send the same key again, only to the address on that licence, and record that a resend happened, without the address or the key. Sending it again holds a new encrypted copy, deleted 30 days after that email is confirmed delivered. The form gives the same reply whether or not the address has a licence.

How long we keep licensing information

• Licence and payment records — for the life of the licence, and afterwards as required for tax and accounting.
• Activation records — for the life of the activation. When you deactivate a computer the record is kept but marked deactivated, because we need it to account for your slots and to defend payment disputes. We will clear a device name on request.
• Security and audit events — 24 months.

Your choices for licensing information

You can ask us to delete your information. Where you do, we anonymise your licence record and clear any device names. We must keep your licence verification value and Stripe payment references to meet tax obligations and defend payment disputes, so those are retained. Contact licensing@astralaudioai.com.

Which document covers feedback and testimonials

If you take part in the beta, what happens to feedback you send us — including whether we may quote you by name — is governed by the Beta Agreement, not by this notice. That is deliberate: the Beta Agreement is the document you accept in order to join the beta, and it is where those permissions are set out.

This notice governs everything else described in it: the email signup, website measurement, purchases, plugin activation, licence resend requests, and the outreach records above. Where both documents could apply to the same person, the Beta Agreement governs beta participation and feedback, and this notice governs the rest.

Changes

We will update this notice as the product develops, and the date above will change when we do. Each signup records which version you agreed to. If a change materially affects how we use information you already gave us, we will contact confirmed subscribers rather than relying on this page alone.