1. Who we are
Sparks Audio AB (“Sparks Audio”, “ClipMap”, “we”, “us”, or “our”) is a limited company (aktiebolag) registered in Sweden under organisationsnummer 559450-1628, registered address Brännkyrkagatan 103, 117 26 Stockholm, Sweden. We develop ClipMap, a desktop application for film, television, and audio post-production.
We are the data controller for the personal data we process about you in connection with the Software and the Website.
Data protection contact: privacy@sparks.audio
We have assessed Article 37 of the GDPR and concluded we are not required to appoint a Data Protection Officer, as large-scale systematic monitoring is not part of our core activity.
If you have concerns about how we handle your data, you may complain to the Swedish supervisory authority:
Integritetsskyddsmyndigheten (IMY) Box 8114, 104 20 Stockholm, Sweden imy@imy.se · https://www.imy.se/
2. Online activation and license validation
ClipMap is supplied as an online edition that needs an internet connection to activate your license and to periodically re-validate it. The data involved is described in Section 3.1. If you would prefer not to have the Software perform online license checks, please do not purchase ClipMap.
3. What data we collect
3.1 License activation and validation
To activate and validate your license, including the periodic license checks, the Software sends to our licensing servers:
- License key: to identify and validate your license.
- Machine identifier: an anonymised, one-way value derived from your device, used only to enforce the per-license activation limit. It is not linked to identifiable hardware details and cannot be reversed to reveal them.
- Platform and application version: for example, “windows” or “macos” and the ClipMap version.
We associate your license key with the email address used at purchase (Section 3.2) so we can deliver and support your license.
3.2 Purchase and billing
When you buy a license we process your email address (to deliver your license key and order confirmation), billing country and VAT information (to apply the correct tax and meet accounting obligations), and transaction records (date, amount, currency, invoice data).
Stripe acts as our merchant of record. As the seller of record and an independent controller, Stripe processes your payment and billing data to take payment, calculate and remit tax, and issue your receipt and invoice (Section 7). We receive only limited order data, such as your email, country, order reference, and license key. Your full card details are entered directly into Stripe’s PCI DSS-certified systems; we never receive or store them.
3.3 Anonymous usage and reliability data
ClipMap collects anonymous diagnostic data so we can tell whether the Software is working correctly and fix problems with parsing, stability, and compatibility. This is on by default during Early Access. Because we rely on our legitimate interest in keeping ClipMap reliable (Section 4), you can object at any time by emailing privacy@sparks.audio and we will stop processing and delete the diagnostic data associated with your installation (Section 5).
The data cannot identify you:
- Install ID: a random identifier (UUID) generated on your device, with no link to your email, name, or license key.
- Event data: for example, application launches, session imports, export operations, and crashes.
- Technical data: operating system, application version, and platform.
- Feature usage: for example, which file formats are opened and counts such as the number of tracks or clips in a session.
It never includes your file names, session or project names, file paths, the audio or musical content of your sessions, your name, or your email address. Your IP address is used only transiently for rate limiting and is not stored.
3.4 Crash reports
If the Software hits an error, it writes a local crash log on your computer and sends us an anonymous “app crashed” event with the error type and technical context, but not your files or content, so we can fix defects. If you object to diagnostic data (Section 5), we stop processing these events too.
3.5 Optional diagnostic upload of unreadable .ptx files
If ClipMap cannot read one of your Pro Tools .ptx session files, you may choose to upload that file so we can diagnose and improve compatibility. This only happens when you start it. A .ptx file can contain confidential session structure and metadata, so upload only files you are comfortable sharing. Uploaded files are used solely to reproduce and fix the problem, are stored within the EU, and are deleted once resolved or after the retention period in Section 6, whichever comes first.
3.6 Website data
When you visit sparks.audio, our hosting provider records standard server logs (IP address, browser type, pages requested, timestamps), used only for security and performance monitoring and not cross-referenced with your license or purchase.
3.7 Support communications
If you contact support, we process the email address and name you provide and the contents of your inquiry, so we can help you.
3.8 Software update checks
The Software periodically checks for updates by sending your platform and application version; your license key authenticates the request and determines which build you are entitled to. You can disable automatic update checks in settings.
3.9 “Spot to Pro Tools” (local only)
If you use the optional “Spot to Pro Tools” feature, ClipMap communicates locally with a copy of Avid Pro Tools running on the same computer. This happens on your machine only; we do not receive your session data, and ClipMap does not send it to Avid or any cloud service.
3.10 Marketing communications
If you opt in, we may send occasional product news about ClipMap to the email address you provide. We send these only with your consent, never sell your email address, and include an unsubscribe link in every message. Service and transactional messages about your purchase, license, and support are sent regardless, as they are necessary to provide what you bought.
4. Why we process your data and our legal basis
| Processing activity | Purpose | Legal basis (GDPR) |
|---|---|---|
| License activation and delivery | Provide and activate the software you purchased | Performance of a contract, Art. 6(1)(b) |
| Periodic online license validation | Confirm your license remains valid and prevent unlicensed use | Art. 6(1)(b) and our legitimate interest in preventing unlicensed use, Art. 6(1)(f) |
| Purchase, billing, and order confirmation | Take payment and deliver what you purchased | Performance of a contract, Art. 6(1)(b) |
| Anonymous usage and reliability data, including crash reports | Confirm ClipMap works correctly and find and fix defects | Our legitimate interest in maintaining and improving the reliability of the Software, Art. 6(1)(f) |
| Optional diagnostic .ptx upload | Reproduce and fix a file-compatibility problem you report | Your consent, Art. 6(1)(a), given by choosing to upload |
| Website server logs | Keep the Website secure and working | Legitimate interest in security and availability, Art. 6(1)(f) |
| Support communications | Provide support under your license | Performance of a contract, Art. 6(1)(b) |
| Software update checks | Deliver updates you are entitled to | Performance of a contract, Art. 6(1)(b) |
| Tax, invoicing, and accounting records | Comply with Swedish accounting and tax law | Legal obligation, Art. 6(1)(c) |
| Marketing emails about ClipMap (if you opt in) | Send product news you asked for | Your consent, Art. 6(1)(a); withdraw any time via the unsubscribe link |
| ”Spot to Pro Tools” feature | Send clips/timecode to your local Pro Tools at your request | Operates locally on your device; no personal data is processed by us |
Your control over diagnostic data. Diagnostic data is on by default during Early Access. Because we rely on legitimate interest, you have the right to object to this processing under Article 21 at any time by emailing privacy@sparks.audio (Sections 5 and 9).
5. Diagnostic data, your control
ClipMap’s anonymous diagnostic data is on by default during Early Access. Because it relies on our legitimate interest (Section 4), you can object at any time by emailing privacy@sparks.audio; we will then stop processing your diagnostic data.
Because the data is keyed only to a random install ID, we can delete everything tied to your installation on request — email privacy@sparks.audio and we will remove it.
We aggregate events into daily counts (for example, “342 sessions opened today”); raw events are deleted on the schedule in Section 6, and aggregated statistics contain no individual identifiers.
6. How long we keep your data
| Data type | Retention period | Reason |
|---|---|---|
| Raw telemetry events | 90 days | Deleted automatically by a scheduled process |
| Aggregated telemetry statistics | 2 years | Trend analysis; no individual identifiers |
| License, purchase, and accounting records | Duration of the license + 7 years | Swedish Bookkeeping Act (bokföringslagen, SFS 1999:1078) |
| Optional diagnostic .ptx uploads | Until resolved, or 180 days, whichever is sooner | Reproduce and fix the reported problem |
| Website server logs | 30 days | Security and performance monitoring |
| Support communications | 2 years after resolution | Handling related or recurring issues |
| Records of data-subject requests | 3 years | Demonstrating compliance |
7. Who we share your data with
We share personal data only with providers that help us operate ClipMap and sell licences, each under appropriate agreements and only for the purposes in this policy. Most act as our processors. Stripe, as merchant of record, acts as an independent controller for the payment, tax, and invoicing parts of your purchase, under its own privacy policy.
| Provider | Purpose | Data shared | Location |
|---|---|---|---|
| Stripe (Stripe Payments Europe, Ltd. and affiliates) | Merchant of record: payment, tax, invoicing, order management (independent controller for the purchase) | Email, name, billing country, payment details (entered directly with Stripe) | EU (Ireland) with US affiliate |
| Supabase, Inc. | Hosting of the licensing database, telemetry database, and diagnostic-upload storage | License/validation data; anonymous telemetry; any diagnostic .ptx files you upload | EU (Frankfurt, Germany) |
| Amazon Web Services (AWS) | Website hosting, CDN for downloads and updates, license-key email delivery | Website access logs; download/update requests; license-key emails | EU origin; global CDN edge delivery |
We do not sell, rent, or trade your personal data, and we do not use it for advertising. We may disclose data if required by law or a valid request from a competent authority. In a merger, acquisition, or sale of assets, we may transfer data as part of that transaction, subject to this policy.
8. International data transfers
We are based in Sweden and keep data within the EU/EEA wherever possible. Where a transfer outside the EU/EEA occurs, we rely on appropriate safeguards:
| Transfer | Destination | Safeguard |
|---|---|---|
| Stripe payment processing | United States (Stripe affiliates) | EU-US Data Privacy Framework and/or EU Standard Contractual Clauses |
| AWS content-delivery edge locations | Global | AWS Data Processing Addendum incorporating Standard Contractual Clauses |
| Supabase | EU (Frankfurt) | Data remains in the EU; no third-country transfer |
You may request a copy of the relevant safeguards by emailing privacy@sparks.audio.
9. Your rights
Subject to the conditions and exceptions in the GDPR, you have the following rights:
| Right | What it means | How to exercise it |
|---|---|---|
| Access (Art. 15) | Get a copy of the personal data we hold about you | Email privacy@sparks.audio |
| Rectification (Art. 16) | Have inaccurate data corrected | Email privacy@sparks.audio |
| Erasure (Art. 17) | Have your personal data deleted | Email privacy@sparks.audio |
| Restriction (Art. 18) | Ask us to limit how we use your data | Email privacy@sparks.audio |
| Data portability (Art. 20) | Receive certain data in a structured, machine-readable format | Email privacy@sparks.audio |
| Object (Art. 21) | Object to processing based on legitimate interest (diagnostic data, website security logging) | Email privacy@sparks.audio |
| Withdraw consent (Art. 7(3)) | Withdraw consent you gave (a diagnostic .ptx upload, or marketing emails) | Email privacy@sparks.audio; marketing: unsubscribe link |
We respond within one month. If your request is complex we may extend by up to two further months and will tell you. Requests are free unless manifestly unfounded or excessive. If you are unhappy with our handling, you may complain to IMY (Section 1).
10. How we keep your data secure
- Encryption in transit: all communication between the Software and our servers uses TLS/HTTPS.
- Access controls: database access is restricted, and our telemetry store uses row-level security.
- Data minimisation: telemetry carries no personal identifiers and no stored IP addresses; the license fingerprint is one-way hashed.
- Server-side validation: our telemetry endpoint accepts only an allowlist of known events and drops anything else.
- Payment security: card processing is handled by Stripe (PCI DSS Level 1); we never receive your full card number.
11. Children’s data
ClipMap is professional software for adults. It is not directed at children, and we do not knowingly collect personal data from children under 13 (the digital age of consent in Sweden under Chapter 2, Section 4 of lag (2018:218)). If you believe a child has provided us with personal data, contact privacy@sparks.audio and we will delete it.
12. Automated decision-making
We do not carry out automated decision-making or profiling that produces legal effects or similarly significantly affects you within the meaning of Article 22 of the GDPR.
13. Changes to this Privacy Policy
We may update this policy to reflect changes in our practices or legal requirements. We will notify you of material changes at least 30 days before they take effect, through a notice in the Software, an update on sparks.audio/privacy-policy, and/or email. The “Last updated” date above shows when it was last revised.
14. Contact us
Sparks Audio AB Brännkyrkagatan 103, 117 26 Stockholm, Sweden Data protection: privacy@sparks.audio · General: info@sparks.audio Website: https://sparks.audio/privacy-policy
For data-subject requests, email privacy@sparks.audio with the subject line “Data Subject Request.”
End of Privacy Policy.