Privacy.

Your email address, because it is how a licence is looked up, how a key is delivered, and the only way to sign in. Your order — its id, dates and amounts — as our merchant of record reports it. We never see or store your card details.

For each machine you activate: the machine name macOS reports, the macOS version, and the dates it checked in. The machine name is usually a real person's name— “Rupendar's MacBook Pro” — which is why it is treated as personal data and shown to nobody but you.

We do not store your measurements, your audio or your room. Captures and corrections stay on your Mac and are never uploaded.

Our servers run on Cloudflare, which logs the IP address of requests it serves as part of running the network. We use IP addresses only in the aggregate, to rate limit abuse.

To perform our contract with you: a licence you bought has to be deliverable, recoverable and enforceable, and each of those needs the data above. Beyond that, a legitimate interest in preventing licence abuse — the rate limits and the seat rules — and a legal interest in keeping the records tax and accounting law requires.

The schedule, by what it is:

• magic_tokens — sign-in links, stored hashed, never in the clear. A link expires 15 minutes after it is sent and is single-use; the row itself is deleted 7 days after it expires.
• licenses — for the life of the licence and then as long as tax and accounting law requires the order record.
• activations — while the seat is in use; an ended activation keeps its dates as the transfer record.
• emails_sent — the delivery ledger, 90 days.
• webhook events — 90 days, as the record that a payment was processed once.
• rate-limit counters — 2 days.

Cloudflare — hosting, the database and network logs. Polar — our merchant of record: it takes the payment, holds the billing details and handles tax. Resend — the service that delivers our email. Each receives only what its job needs.

You can ask us to erase your personal data. We cannot delete the licence row itself — that row is what keeps a licence you paid for working — so instead we pseudonymize: your email address is replaced with a permanently unreachable placeholder, every machine name and macOS version on the licence is cleared, and what remains is the irreversible hash of the key, the order id and the dates we keep under contract.

This cannot be undone, and it takes things with it. After erasure we can never send you a sign-in link again, never email your key again, and never resume a cancelled rent-to-own plan for you — resuming matches on your email address, and there will no longer be one. Your installed copies keep working; the account behind them becomes unreachable, to us as much as to you. Ask only when you mean it, and consider getting your key emailed to yourself first.

One carve-out: a backup taken before your request still contains the old values until it ages out on its own schedule. We do not restore backups to bring erased data back.

You can ask for a copy of what we hold, ask us to correct it, ask us to erase it, or object to how we use it. Write to support@clearroom.studio from the address on the licence, or tell us the order it belongs to. We answer within 30 days.

This is version 2026-08, published alongside the terms. When it is replaced, this version stays published at /privacy/2026-08. Dated copies appear when a version is superseded; there are none yet.