Privacy Policy & Hardware Telemetry
At Plot Audio, we take your privacy and system security with utmost seriousness. This policy transparently details how your account data, hardware telemetry, and token allowances are processed.
1. Hardware Identifiers & Anti-Abuse Binding
To provide a frictionless 14-day free trial without requiring upfront credit card verification, the Plot Audio desktop client performs a non-reversible cryptographic hash (SHA-256) of your local machine hardware configuration upon login:
- Graphics Processing Unit (GPU) Identifier: The primary display adapter device descriptor to identify the render subsystem.
- Motherboard BIOS Product String: Baseboard manufacturer and product identifiers.
- Operating System Machine GUID: Windows installation MachineGuid and Product ID.
2. Account Data & Authentication
When you register, we collect your email address, chosen username, and password hash (encrypted via bcrypt). We use this information to:
- Authenticate your desktop DAW client and web dashboard access.
- Deliver transactional emails including verification OTPs, security alerts, and subscription receipts.
- Track and meter your AI Co-Producer token quotas across 5-hour rolling windows and weekly allowances.
3. Payment Information & Stripe Processing
All credit card and payment processing is handled directly by Stripe, a PCI-DSS Level 1 certified payment processor. Plot Audio servers never view, store, or transmit your raw credit card number or CVV code. We only store your Stripe Customer ID and Subscription Status to activate features.
4. Client Security & Anti-Tamper Telemetry
Plot Audio incorporates client-side anti-tampering defenses to safeguard intellectual property and protect against malicious DLL injection or memory corruption. Telemetry sent between the client and server is encrypted using TLS 1.3.