Privacy Policy — Blue Hour Audio
This policy explains what our software — the Blue Hour Audio plug-ins Blue Melody, Blue Drummer, and Blue Slice (together, the "Software") — made by Blue Hour Audio LLC, trading as Blue Hour Audio ("we," "us," "our"), does and does not collect. We designed our Software to be privacy-respecting: your music stays on your computer unless you choose to use the optional Blue Melody AI described in Section 1.
For questions about this policy or your personal data, contact us at alex@bluehouraudio.us. Blue Hour Audio LLC is the controller of the limited personal data described below (other than payment and tax data, for which our Payment Provider is the controller — see Section 3).
1. Your audio and MIDI stay on your device
Blue Melody processes routed audio, the notes you enter or explicitly import, and — only if you turn it on — MIDI routed to it from your DAW, locally on your computer. It does not upload your audio, projects or compositions to Blue Hour Audio. Compositions and settings are saved in your DAW project or local application state. The FL Studio features (the FL companion script, Instrument Link, and copy and paste through the Windows clipboard) exchange notes with FL Studio on your computer only. Explicit export and recovery actions write MIDI files to your computer. These local files are under your control; they are not sent to our licensing or email providers. Experimental audio estimates are processed on the device, not in a cloud music-analysis service.
Blue Melody AI (optional). Blue Melody includes an optional AI assistant, Blue Melody AI, which stays off unless you turn it on in the Learn panel. Each time you use it, the following are sent over an encrypted connection to Blue Hour Audio's AI service: the question you type; the notes you have selected; basic settings such as key, tempo and level; up to six earlier questions and answers from the same session; and, if audio detection is on, a few summary measurements of the detected sound (such as pitch and brightness) — never a recording. Our AI service, which runs on Netlify, sends that content to OpenAI, L.L.C. to generate the answer, with response storage turned off, and returns the answer to you. OpenAI may keep API data for a limited period to monitor for abuse, under its own policies. No audio files, project files or other personal data are sent.
Your license key and activation ID are sent with each Blue Melody AI request and are used only to confirm that your subscription is active; the service does not store them in readable form. To apply the monthly usage allowance, we keep a monthly count of Blue Melody AI usage per subscription (the number of requests and the amount of text processed), not your questions, notes or the answers. To protect the licensing service from abuse, the AI service also keeps a short-lived count of license lookups per connection, keyed to a scrambled (hashed) form of your IP address. Where the EU or UK GDPR applies, we process this content to provide the feature you asked for (performance of our contract, GDPR Art. 6(1)(b)). You can turn Blue Melody AI off at any time; local lessons and the rest of the Software keep working without it.
2. License activation data
To verify a valid license, when you activate or the plug-in periodically validates your license, the Software sends the following to our payments and licensing provider, Lemon Squeezy (a Stripe company), or a successor provider we may use, over an encrypted connection to api.lemonsqueezy.com:
- the license key you entered; and
- the name of your computer, exactly as your operating system reports it (for example
STUDIO-PC). Lemon Squeezy stores this as the activation's "instance name" so that your seats can be counted, listed, and deactivated. On validation and deactivation we send the license key and the activation's instance ID (not the name again).
A note on your computer's name. Computer names often include a person's name (for example Jordan-PC). Where that is the case, the name is personal data about you. We use it only to label and manage your activation — never to profile you, and never for marketing. You can change your computer's name in your operating system's settings before activating if you would rather not share it.
This is the minimum needed to activate, validate, and let you deactivate a computer so you can move your license. Your license key, activation status, and expiry are also cached in a small local license file on your computer so the plug-in works offline for a grace period.
Why we are allowed to process it (legal bases). Where the EU or UK GDPR applies, we rely on: performance of our contract with you, to activate and maintain your license and enforce your seat limit (GDPR Art. 6(1)(b)); our legitimate interests in preventing license abuse and providing support (Art. 6(1)(f)); and compliance with a legal obligation, such as keeping tax and accounting records (Art. 6(1)(c)).
We do not embed any analytics or telemetry SDK, and JUCE's usage reporting is disabled. The Software does not track how you use it.
3. Purchases
When you buy our Software, the checkout is operated by Lemon Squeezy as merchant of record (or a successor provider we may use). Lemon Squeezy collects the information needed to process payment (such as name, email, billing details, and applicable tax) and is the data controller for that transaction. We receive order and license records (e.g., your email and license status) to provide support and manage your license. See Lemon Squeezy's privacy policy at https://www.lemonsqueezy.com/privacy.
Trial reminders. A day before your free trial ends, we email the address on your order to remind you that the trial is about to convert. To do this we use your subscription ID, email address, trial-end time and cancellation status from Lemon Squeezy, and our email delivery provider, Resend, processes your email address and the reminder message to deliver it. We keep a record of each reminder so it is sent once, retried if delivery fails, and available if you contact support. We never send creative content or license keys to the email provider, and reminder data is used only for this transactional message, never for advertising.
4. The interface (WebView2)
Our interface is drawn using the Microsoft Edge WebView2 Runtime, a component of your Windows system. The interface itself is built into the plug-in and loads from your own computer — it does not fetch pages, fonts, scripts, or trackers from the internet. WebView2 is Microsoft software governed by Microsoft's own terms and privacy statement; we do not send it any of your data, though the runtime itself may collect diagnostic data under Microsoft's terms.
5. Support
If you email support, we receive whatever you send us (your message, email address, and any details you provide) and use it only to help you.
6. What we never do
- We never sell your personal data, and we never "share" it for cross-context behavioral advertising.
- We do not remotely access your creative files; local access is limited to the features you use as described in Section 1, and only Blue Melody AI, when you turn it on, sends anything about your music off your computer.
- We never serve ads or share your information with advertisers.
7. Data retention
We keep license and order records for as long as needed to provide the product, support you, and meet legal and accounting obligations — typically up to seven (7) years for tax and accounting records after your last transaction, or longer if the law requires. Blue Melody AI usage counts are kept per monthly period to apply the allowance; the questions, notes and answers themselves are not kept by our AI service. The local license cache is intentionally retained when you uninstall so reinstalling does not consume another activation. Successful deactivation clears its entitlement fields. You can remove the local cache manually after deactivation. Project state and exported MIDI files are not removed by uninstalling the plugin.
8. Your rights
Depending on where you live (for example, under the EU/UK GDPR or the California Consumer Privacy Act, as amended by the CPRA), you may have rights to:
- access the personal data we hold about you, and receive a copy;
- correct inaccurate data;
- delete your data;
- restrict or object to certain processing, and (where processing is based on consent) withdraw that consent;
- data portability; and
- for California residents, know, delete, and correct your data, and opt out of any "sale" or "sharing" (we do none) — and we will not discriminate against you for exercising these rights.
To exercise them, contact us at alex@bluehouraudio.us. For payment and tax data held by Lemon Squeezy as merchant of record, contact them directly. If you are in the EEA or UK and believe we have mishandled your data, you also have the right to lodge a complaint with your local data protection supervisory authority — though we would appreciate the chance to address your concern first.
9. International data transfers
We are based in the United States, and our providers (Lemon Squeezy / Stripe for payments and licensing, Resend for trial-reminder emails, and Netlify and OpenAI for Blue Melody AI) process data in the United States. If you are in the EEA, UK, or Switzerland, the limited personal data described above is transferred to the United States. Where required, we rely on appropriate safeguards for these transfers, such as the European Commission's Standard Contractual Clauses and/or certification under the EU-US Data Privacy Framework (and its UK and Swiss extensions). You can ask us for more information using the contact details above.
10. Children
Our Software is a professional creative tool and is not directed at children under 13 (or the age of digital consent in your country). We do not knowingly collect data from them.
11. Changes
We may update this policy; we'll change the "Last updated" date and, for material changes, note it at https://bluehouraudio.us.
12. Contact
Blue Hour Audio LLC, trading as Blue Hour Audio — alex@bluehouraudio.us — https://bluehouraudio.us