Your sound stays with you.

Who is responsible

The controller of your personal data is David Yousefi Hashtyani, a sole proprietor (“we”, “us”), of 14 Jalan Hang Tuah 1/4, 81550 Gelang Patah, Johor, Malaysia. For any privacy question or request, email contact@dyaudiomx.com.

When you buy Riser Studio, the payment provider named at checkout handles your payment and billing details as a separate controller, under its own privacy policy.

Your audio and projects

Riser Studio makes, plays and exports sound locally on Mac and Windows. Imported recordings, prepared sources, presets, exports and the standalone last-session snapshot are stored in locations on your computer that you control. The audio engine has no AI generation service. It does not send these files to our licensing service or collect audio for model training.

The current instrument has no usage-analytics or automatic crash-reporting service. Files you intentionally send to support, share with collaborators or place in cloud-synchronised folders are separate from the app’s licensing connection.

Personal keys and activation

Current private beta. Signed beta keys are checked on your computer and work offline until their expiry. To issue one, we use the name and device request you choose to send us. The request identifies Riser Studio, its request version and a product-specific hash derived from your computer’s device identifier. The app displays the name signed into your key. A device hash is a persistent identifier for licensing, not anonymous data; the request does not contain your original hardware identifier or audio files.

Purchase-code service. This service is prepared but is not live in the current beta. Once configured, entering a purchase code sends that code, the product identifier, device hash and a short Mac/Windows device label to our service over HTTPS. Validation and deactivation send the signed licence, which includes the licensed name, licence and device identifiers, issue details and any expiry. Managed licences validate at startup and periodically. Network requests also expose technical connection data such as an IP address to the service host.

We use this information to issue and verify your licence, enforce the two-computer allowance, release an activation, recover a code and handle revoked or refunded purchases. A valid, unexpired stored licence remains usable during a network outage. Local activation information is kept outside presets and DAW projects, so sharing a sound does not share your key.

This website

The current website code adds no analytics, advertising or tracking cookies. Fonts, images and listening examples are served from the site; your browser may cache these files normally. Playback starts only when you choose it, nothing is recorded or uploaded, and the site does not ask for your microphone. Following an external link or opening checkout takes you to that provider’s service and privacy policy.

Like any website, our hosting provider processes technical request data, such as your IP address, browser type and the pages you request, to deliver the site and keep it secure.

What we process and why

• Email. If you write to us, including to ask to be notified when Riser Studio is available, we use your address and message to reply and, if you asked, to tell you when it is available.
• Purchases. When purchasing opens, checkout, payment, tax and receipts are handled by the payment provider named at checkout. We never see your full card details. The provider shares with us what we need to deliver and support your purchase, such as your name, email address, country, order reference and the amount paid. We use it to deliver Riser Studio, answer support requests and handle refunds and payment disputes.
• Licensing. The activation information described above, together with the order-to-licence record and activation or revocation status. If you request purchase-code recovery, we use your purchase email address to deliver it.
• Hosting. The technical request data described above, to deliver the site and keep it secure.

We do not sell your personal data, use it for advertising or profiling, or send you marketing email beyond the availability note you ask for.

Legal bases

Where the GDPR or the UK GDPR applies, we rely on:

• contract, to deliver, activate and support your licence and to answer purchase-related requests;
• consent, to tell you when Riser Studio is available, if you asked us to; you can withdraw it at any time by telling us;
• legitimate interests, to keep the website and licensing service secure, prevent fraud and licence abuse, and establish or defend legal claims;
• legal obligation, to keep the records that accounting and tax law require and to respond to lawful requests.

Under Malaysia’s Personal Data Protection Act 2010, we process your data only for the purposes above.

Service providers

• Hosting provider, which serves this website and, when deployed, the licensing service.
• Payment provider, named at checkout, which runs checkout, payment, tax and receipts once purchasing opens, and may use its own payment processor.
• Email provider, which holds our mailbox and delivers replies and, when purchasing opens, licence and recovery messages.

Providers receive the information needed for their role. The payment provider’s own privacy policy also explains processing it performs as a separate controller. We will identify the actual checkout and licence-delivery providers before purchasing opens.

How long we keep it

• Emails asking to be notified: until we have sent the availability note, or sooner if you ask us to stop.
• Purchase records: for as long as we support your licence, and afterwards only as long as accounting, tax or other legal obligations, or a pending legal claim, require.
• Activation records: while needed to provide and manage your licence, and afterwards only where needed for fraud prevention, legal obligations or a pending claim. Local activation data remains on your computer until removed; deactivation does not automatically erase a purchase record.
• Other emails to us: as long as needed to answer you and keep a record of support given.

If you ask us to delete your data, we will delete or anonymise it unless the law requires us to keep it.

International transfers

We are based in Malaysia, and our providers may process data in other countries, including the United States. International transfers must meet applicable data-protection requirements, including any required contractual safeguards. The production licensing host and delivery providers are not yet configured; their locations and transfer arrangements will be confirmed before that service opens.

Your rights

Depending on where you live, including under the GDPR, the UK GDPR and Malaysia’s Personal Data Protection Act 2010, you can ask to access your personal data, correct it, delete it, restrict or object to its use, receive a copy in a portable format, or withdraw consent where we rely on it. Email contact@dyaudiomx.com. We may ask you to confirm that the request is yours. We aim to reply within 21 days, and always within the time the law allows.

You can also complain to a data protection authority, such as the one where you live, the UK Information Commissioner’s Office or Malaysia’s Personal Data Protection Commissioner.

Security

Production website and activation connections use HTTPS. Activation keys are signed, and only verification keys are included in the instrument; personal keys should still be kept private. Please do not send full licence keys, private recordings or payment-card details in an ordinary support message. If we need a project to reproduce a fault, we will ask you to choose what to share.

Children

Riser Studio is not directed at children, and we do not knowingly collect personal data from children.

Changes

We may update this policy as Riser Studio changes. We will explain material changes before adding new collection, such as analytics or automatic crash reporting, and identify the production licensing providers before that service opens. The current version and its date will remain available here.

Contact