Skip to main content

Privacy Policy

How we handle your data. No legal maze, just straight talk.

Last updated: October 2026

The Short Version

We're two brothers in Oslo building audio software we wanted to use ourselves. We collect the minimum data needed to run the business: your email for purchases and support, payment info (handled by Lemon Squeezy as our Merchant of Record, not us), and basic analytics to see what's working on the site.

We don't sell your data. We don't spam you. We don't do anything sketchy with your information. That's the whole thing.

What We Collect

When You Buy Something

  • • Your email address (for order confirmation and backup download links)
  • • Payment information (handled by Lemon Squeezy as Merchant of Record, so we never see your card details)
  • • Billing address (required by payment processors for fraud prevention)
  • • Purchase history (so we can help with support requests)

When You Use the Plugin

  • • Machine identifier (a hash of hardware info, so we can't identify your actual hardware)
  • • License validation timestamps (when the plugin checks in)
  • • Plugin version (to know what features are available)

This is used to verify your license and prevent sharing. We also use how frequently the plugin checks in (a running count, no content) to decide which tips to send during your trial, for example whether to send install help or usage tips. Usage data is only linked to your license where the Usage Data section below says so. You can turn it off at any time.

Usage Data

IcePick sends usage data so we can find bugs and improve it. This includes things like which features are used, how long analysis takes, and when errors happen. It never sends audio, file names or project contents.

Some of this is anonymous and cannot be linked back to you. That part is on everywhere.

The rest is linked to your licence, so we can see how one person's use changes over time. That part is on by default, with a clear notice in the installer licence and an easy way to turn it off, in these countries only: United States, United Kingdom, Switzerland, Australia, New Zealand, Japan, Singapore, Mexico, the Philippines, South Africa, Kenya and Brazil.

In these countries, we rely on our legitimate interest in finding bugs and improving IcePick. You can object at any time by turning it off in IcePick under "Help improve IcePick".

Everywhere else, including Norway, the EU and EEA, and Canada, IcePick asks your permission first.

Which of the two applies is decided by your computer's region setting.

You can turn usage data off at any time in IcePick, under "Help improve IcePick".

On Windows, IcePick uses Microsoft DirectML to speed up analysis. DirectML may collect information about its use and send it to Microsoft, under Microsoft's own license terms and privacy statement.

Audio is only ever sent if you choose to contribute a take, under the Contribution Terms. For where files live on your computer and what IcePick connects to, see Good to know.

If You Choose to Contribute a Take

IcePick doesn't send audio. That's true no matter what else you've switched on above. None of it includes your audio. The only way that ever changes is if you go looking for it yourself. There's a "Contribute this take…" option in Settings that lets you send one vocal, along with its edits, to help train the detector.

It works like this: nothing leaves your machine until you pick a specific take and confirm you want to send it. Every single time. There's no toggle that quietly keeps sending takes after the first one, and no standing permission you grant once and forget about. One take, one confirmation, one upload.

To find a contribution again if you ever ask us to delete it, we store a one-way reference derived from your license, deliberately computed differently from anything in the usage data described above, so the two can't be lined up against each other. It exists so we can find your takes and delete them, and we don't use it for anything else. Linkable enough to delete. Never linked for insight.

This is why "no audio is ever collected" stays true for everyone who never touches this option. Contribution is kept entirely separate from everything else in this policy, by design, not by accident.

When You Start a Trial

  • • Your email address (to send your license key, download link, and a few tips during the trial)
  • • Machine identifier (one trial per computer)
  • • Your IP address and browser user-agent (to detect abuse like bulk fake-email signups)
  • • The country you started the trial from, saved with your trial, so we can see where trials come from and which countries go on to buy. Your browser doesn't send it: our CDN, CloudFront, works it out from your connection when your request reaches it and passes us a two-letter code like "US" or "DE". Nothing finer than the country, no region or city.

Trial emails: one welcome email with your license, plus 3–4 short tips during your 14 days. Unsubscribe link in every one. After your trial ends, we may email you once to ask why you didn't buy, and to read your answer if you reply. Reply "stop" and we won't email you again.

If you convert from a trial to a paid license, we link your trial machine identifier to your purchase so your existing activations and preferences carry over.

When You Contact Support

  • • Your email address and name
  • • Whatever you tell us in your message
  • • System info if you share it (helps us troubleshoot)

When You Visit the Site

  • • Basic analytics (which pages you visit, how long you stay)
  • • Device and browser info (to fix bugs and make the site work better)
  • • IP address (standard web stuff, helps prevent fraud)

We use Google Analytics 4 with IP anonymization and Consent Mode v2, so analytics cookies fire only after you opt in via the banner. No cross-site following, no ad personalization, no audience selling. See our Cookie Policy for the full list.

Separately, and whether or not you accept the banner, we count how far visitors get through the buying steps: landed, saw the price, saw the free-trial offer, clicked buy or rent to own, went to checkout, bought, or started a free trial. This runs on our own server, sets no cookie, and stores no IP address and no browser fingerprint. All it records is a random number your browser makes up for the tab you're in, which is thrown away when you close the tab and which we delete after 30 minutes either way, plus whether your screen is phone-sized or larger (just that one word, not the screen's size or what device it is), plus the country you're visiting from. Your browser doesn't send the country: our CDN, CloudFront, works it out when your request reaches it and passes us a two-letter code like "US" or "DE". We never store your IP address for it, and we get nothing finer than the country, no region or city. It can't be linked to you, to a previous visit, or to anything you do on any other site. Before those rows are deleted we add one to a daily total for each step, to a second daily total for each step split by the same rough traffic source (Instagram, X, Threads, TikTok, a search engine, the buy buttons inside IcePick, or direct), to a third split by phone or larger screen, and to a fourth split by country, still plain numbers with nothing else attached, so we can see the shape of the funnel over time, by channel, by device and by country. It exists so we can tell whether the site is working, and which countries to advertise in and how to price for them, without handing Google more than we already do.

Newsletter (If You Sign Up)

  • • Your email address
  • • Whether you opened emails (so we know if anyone's reading)

Every newsletter email includes a one-click unsubscribe link in the footer. You can also email support@arcticlabsaudio.com with "Unsubscribe" in the subject. We send maybe one email a month, if that.

What We Actually Do With This

  • • To send you what you bought: Plugin downloads, license keys, and updates
  • • To validate your license: Verify you own the plugin and manage machine activations
  • • To provide support: Answer your questions, troubleshoot issues, process refunds
  • • To improve the product: Understand what features people use, what bugs need fixing
  • • To send occasional updates: New features, bug fixes, new products (only if you opted in)
  • • To prevent fraud: Rate limiting and trial abuse prevention

Who Else Sees Your Data

Third Parties We Work With

  • • Lemon Squeezy (LemonSqueezy Inc., USA): Our Merchant of Record. Handles payment processing, billing, sales tax/VAT collection, and the legal sale of the license. They see your name, email, billing address, and payment info. We don't. Cross-border transfers from the EU/EEA rely on Standard Contractual Clauses. Their privacy policy.
  • • Postmark (ActiveCampaign LLC, USA): Sends transactional emails: purchase confirmations, license keys, download links, support replies. They process email content for delivery only. Cross-border transfers from the EU/EEA rely on Standard Contractual Clauses.
  • • Amazon Web Services (AWS, USA, us-east-1 region): Hosts our website and backend infrastructure (CloudFront, S3, Lambda, RDS). Cross-border transfers from the EU/EEA rely on AWS's EU Standard Contractual Clauses and Data Processing Addendum.
  • • Microsoft 365 (Microsoft Corporation, USA): Hosts our support mailbox, support@arcticlabsaudio.com. Emails you send us, and our replies and occasional personal emails to you, are stored there. Cross-border transfers from the EU/EEA rely on Microsoft's Standard Contractual Clauses and Data Protection Addendum.
  • • Anthropic (Anthropic PBC, USA): When you email or message us, the text of your message is sent to Anthropic's Claude to suggest a draft reply. One of us reads every message and writes or edits the reply ourselves. Anthropic does not use this content to train its models. Cross-border transfers from the EU/EEA rely on Standard Contractual Clauses.

Who We Don't Share With

We don't sell, rent, or trade your data. Ever. No advertisers, no data brokers, no "partners" who want to spam you.

The only exception is if we're legally compelled to share something: a court order, valid law enforcement request, or regulatory investigation. We'll notify affected users unless prohibited by law.

Your Rights

If you're in the EU/EEA, GDPR gives you the following rights over your personal data:

  • • Access: Ask what data we have about you (Art. 15)
  • • Rectification: Fix inaccurate data (Art. 16)
  • • Erasure ("right to be forgotten"): Have your data deleted, except records we're legally required to retain (e.g., purchase records for Norwegian bookkeeping) (Art. 17)
  • • Restriction of processing: Pause our use of your data while a dispute is resolved (Art. 18)
  • • Data portability: Receive a copy of your data in a machine-readable format (Art. 20)
  • • Object: Object to certain types of processing, including direct marketing (Art. 21)
  • • Withdraw consent: Withdraw consent for analytics, marketing, or other consent-based processing at any time (e.g., via the cookie settings in our footer)

Email support@arcticlabsaudio.com for any of these requests. We respond within 30 days (the GDPR maximum); usually much faster.

If you're not happy with how we handle a request, you can also lodge a complaint with your local data protection authority. For Norway, that's Datatilsynet.

Children's Privacy

IcePick is a professional audio production tool intended for adults. We do not knowingly collect personal data from anyone under 16 (the age of digital consent under GDPR Article 8 in most EU member states, including Norway) or under 13 (US COPPA).

If you are under the age of digital consent in your country, please have a parent or guardian review this policy and consent on your behalf before purchasing, starting a trial, or signing up for emails.

If we learn we've collected data from a child below the applicable age threshold without verified parental consent, we'll delete it. Contact support@arcticlabsaudio.com if you believe this has happened.

How We Protect Your Data

  • • HTTPS encryption for all site traffic
  • • Payment processing through Lemon Squeezy (PCI-compliant Merchant of Record)
  • • Regular security updates and backups
  • • Access to customer data is limited to the two of us

No system is 100% secure, but we take reasonable precautions and use reputable services.

The GDPR Stuff (If You're in Europe)

If you're in the EU/EEA, here's why we're allowed to process your data:

  • • Purchase data: We need this to send you what you bought (legal term: contract fulfillment)
  • • License validation: Confirming you own the plugin (legal term: contract performance)
  • • Analytics cookies: Only after you opt in via the cookie banner (legal term: consent)
  • • Anonymous funnel counting: Knowing whether the site works and which countries visitors come from, with no cookie, no IP and a random id we delete after 30 minutes (legal term: legitimate interests)
  • • Anonymous plugin data: Knowing which DAWs and systems to build for, and making the detector more accurate, with no license key, no machine id and a random id that dies with the session (legal term: legitimate interests)
  • • Identified plugin data: In the countries where it is on by default, finding bugs and improving IcePick (legal term: legitimate interests). In the EU, EEA and every other country where IcePick asks first, only if you turn it on in the plugin (legal term: consent)
  • • Take contribution: Only when you pick a specific take and confirm sending it, every time (legal term: consent)
  • • Marketing emails: Only if you said yes (legal term: consent)
  • • Trial records: Preventing repeat free trials and other abuse, and helping you if you contact us later (legal term: legitimate interest)
  • • Trial email personalization: We use how frequently the plugin checks in with our server (a count we keep server-side to prevent license abuse) to decide which tips to send during your trial, for example whether to send install help or usage tips. This is based on data already collected under "contract performance." (legal term: legitimate interest)

How Long We Keep Your Data

  • • Purchase records: 5 years, as required by Norwegian bookkeeping law (Bokføringsloven §13). After this period, records are anonymized or deleted.
  • • License data: As long as your license is active
  • • Trial data: Up to 3 years after your trial ends. After that we delete it, or keep only a scrambled fingerprint of your email so the same address can't start another free trial.
  • • Analytics: 24 months
  • • Support emails: Until you ask me to delete them
  • • Contributed takes: We keep contributed takes for as long as they are needed to train and improve our models. You can ask us to delete a take at any time by emailing support@arcticlabsaudio.com.

Want your data deleted? Email us and we'll remove everything, including any take you've contributed, except purchase records we're legally required to keep for tax purposes.

Cookies

We use a few cookies to make the site work properly:

  • • Essential cookies: Keep you logged in, remember your cart
  • • Analytics cookies: Help us understand what's working (privacy-focused, no tracking across sites)

No advertising cookies, no social media tracking. See our Cookie Policy for details.

Changes to This Policy

If we change how we handle your data, we'll update this page and note the date at the top. For major changes, we'll email customers directly.

We're not planning to change anything fundamental. This is a small operation and we like keeping things simple.

11 October 2026: trial data is now kept for up to 3 years after a trial ends (it was 90 days), to prevent repeat free trials.

Questions?

If you have questions about how we handle your data, just ask. We're a small team, not a legal department, so you'll get a straight answer.

Data Controller: Arctic Saga AS (operator of Arctic Labs Audio)

Org. nr. NO 918 915 443 MVA · von Øtkens vei 12, 1169 Oslo, Norway

Privacy contact: support@arcticlabsaudio.com