VECTRA & Genesis and Audionerdz — Privacy Policy (Datenschutzerklärung)
Last updated: 24 July 2026
This Privacy Policy explains how personal data is processed when you use the VECTRA software synthesizer and, in particular, its Genesis feature. It is incorporated into the VECTRA End User License Agreement (EULA).
1. Controller
Samuel Zimmermann, trading as “Parandroid” (sole proprietor / Einzelunternehmer) Emmausstr. 7, 04318 Leipzig, Germany
Contact for privacy matters:
We have not appointed a Data Protection Officer, as we are not legally required to do so. If this changes, the contact details will be published here.
2. Overview — what this covers
VECTRA processes personal data in two distinct contexts:
- (A) Licensing & activation — to deliver the product and enforce your licence.
- (B) Genesis usage data (“Interaction Data”) — to operate and improve the Genesis feature and to train the models that power it.
We design for data minimisation and pseudonymity: Genesis data is tied to a pseudonymous identifier and your licence entitlement, not to your name.
3. What we process, why, and on what legal basis
3.1 Licensing & activation data
Data: licence key, edition/entitlement, device and activation identifiers, machine-fingerprint hashes, activation timestamps, and licensing operational events. Licensing operational events record the technical progress of licensing operations — for example that an activation or sign-in was started, completed or failed, that a trial was granted or found ineligible, that a licence was issued, refreshed or verified, and that a device was authorised or released. These events are linked to a pseudonymous installation identifier and, where you are signed in, to your account.
Purpose: to deliver the licensed software, to activate, verify, refresh and release licences, to diagnose and correct faults in the licensing and activation process, and to prevent abuse and unauthorised use.
Legal basis: Art. 6(1)(b) GDPR (performance of the contract — this processing is necessary to provide and maintain the licence you hold) and Art. 6(1)(f) GDPR (our legitimate interest in the security, reliability and correct functioning of our licensing system and in protecting our products against misuse).
We do not use licensing operational events to profile you, and they do not affect your licence, your tier, or any feature available to you.
3.2 Genesis Interaction Data
When you use Genesis, the Software transmits the following pseudonymous data:
- the text prompt you enter;
- the generated candidate presets and their parameters;
- your preview, accept, and save events;
- your parameter refinements (the edits you make to a generated sound) and the final saved parameter state;
- technical metadata: plugin version, plugin format, platform, OS version, a pseudonymous identifier, and your licence entitlement context.
Purpose: to operate, secure, debug, and improve Genesis, and to train and develop the machine-learning models that power Genesis and related VECTRA products.
Legal basis: Art. 6(1)(b) GDPR (the data processing is integral to providing the online Genesis feature you request) and Art. 6(1)(f) GDPR (our legitimate interest in improving and training our products), balanced against your interests. Because using Genesis requires this processing, you may stop it at any time by disabling Genesis participation in the Software, which locks the Genesis feature (see Section 6).
3.3 What we do NOT collect through Genesis
We do not intentionally collect: saved preset names, raw audio, local file paths, operating-system usernames, email addresses, licence keys, or raw hardware identifiers within Genesis Interaction Data.
4. Recipients and processors
Personal data may be processed on our behalf by service providers acting as processors under Art. 28 GDPR.
Our website, licensing API and databases are hosted by Namecheap, Inc., on infrastructure located in Amsterdam, Netherlands.
Payments are processed by Stripe Payments Europe, Ltd. (Ireland) and PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg). When you pay, the payment provider receives the data necessary to process your transaction and acts as an independent controller for that processing under its own privacy policy.
We do not sell personal data. We do not share personal data with third parties other than processors acting on our documented instructions, or where we are required to do so by law.
5. International transfers
Personal data processed through our website, licensing API and databases is stored and processed on servers located in Amsterdam, Netherlands, within the European Economic Area.
Our hosting provider, Namecheap, Inc., is a company established in the United States. Where personal data is accessed from outside the EEA by a processor, such transfers are safeguarded by appropriate measures under Chapter V GDPR, including the European Commission’s Standard Contractual Clauses.
If we change hosting provider or processing location, this section will be updated before the change takes effect.
6. Withdrawal and the effect on training data
You can stop Genesis data processing at any time by disabling Genesis participation in the Software. This locks Genesis and halts further uploads from your installation. Withdrawal is prospective: it does not affect the lawfulness of processing already performed. You may request erasure of your raw Interaction Data (see Section 7). However, data that has already been aggregated or anonymised — for example, incorporated into a trained model so that it can no longer be attributed to you — is no longer personal data and cannot be individually removed from such models.
7. Your rights
Under the GDPR you have the right to: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), and objection (Art. 21, including objection to processing based on legitimate interest). Where we rely on consent for any processing, you may withdraw it at any time without affecting prior processing.
To exercise these rights, contact . Because Genesis data is pseudonymous, we may ask you to provide the pseudonymous identifier or licence context needed to locate your data; if we cannot identify you from the data we hold, Art. 11 GDPR may apply.
You also have the right to lodge a complaint with a data protection supervisory authority. The authority competent for us is the Saxon Data Protection Commissioner (Die Sächsische Datenschutzbeauftragte), Dresden, Germany. You may also contact the supervisory authority of your own place of residence.
8. Retention
Account and licence records: retained for as long as you hold a licence or an account with us, and thereafter for as long as required to meet our statutory obligations. Records relating to purchases and accounting are retained for the statutory periods under German commercial and tax law (up to ten years).
Licensing operational events (Section 3.1): retained for a maximum of 180 days, after which they are deleted or irreversibly aggregated into statistics that no longer relate to an identifiable person.
Genesis Interaction Data (Section 3.2): raw Interaction Data is retained for a maximum of 24 months, after which it is deleted or anonymised. Data that has been incorporated into trained models in a form that can no longer be attributed to an individual is no longer personal data and is not subject to this period.
Aggregated and anonymised statistics contain no personal data and are retained without a fixed limit.
9. Automated decision-making
Genesis generates sounds from your prompts; this does not produce legal or similarly significant effects concerning you within the meaning of Art. 22 GDPR. We do not carry out such automated decision-making.
10. Security
We apply reasonable technical and organisational measures to protect personal data, including pseudonymisation, transport encryption, and access controls.
11. Children
The Software is not directed to children. We do not knowingly process the personal data of children.
12. Changes
We may update this Policy. Material changes will be announced by appropriate means (e.g. on our website or in-app). The “Last updated” date reflects the current version.
Return Policy: AudioNerdz Academy
Merchandise: Our merchandise is crafted on a buy-to-order basis, ensuring a personalized touch for each customer. As such, we can only process refunds for items with defects or substantial issues. While we don’t have a blanket refund policy due to the nature of our production process, your satisfaction is paramount. Should there be any significant problems, we’ll bear the responsibility and issue a refund.
Digital Products: Digital products, once delivered, are non-refundable. To guarantee the quality of our offerings, we provide ample free content and demo versions. We encourage you to explore these before making a purchase.
Course Registrations: Fees for course registrations are refundable up to four weeks before the scheduled workshop start date. In the event of a cancellation on our part, we assure a 100% refund of registration fees or any other payments made.
At AudioNerdz Academy, we prioritize your satisfaction and aim to provide transparency about our refund policies. If you have any queries or concerns, feel free to reach out to our customer support team.