Privacy Policy

Last updated: 23 April 2026

1. Introduction

Sarmays ("we", "us", "our") operates the Sarmays website and the ChampBox audio plugin product. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website, use our products, or subscribe to our newsletter.

We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and other applicable data protection laws.

2. Data Controller

The data controller responsible for your personal data is Sarmays. For any data protection inquiries, please contact us at: contact@sarmays.com

3. Data We Collect

We may collect the following categories of personal data:

  • Account Data: Email address, username, full name when you create an account.
  • License Data: License keys, activation records, hardware identifiers for license validation.
  • Newsletter Data: Email address and consent record when you subscribe to our newsletter.
  • Usage Data: IP address, browser type, pages visited, and timestamps collected automatically via server logs.
  • Cookie Data: See our Cookie Policy for details.

4. Legal Basis for Processing (GDPR Art. 6)

We process your personal data based on the following legal grounds:

  • Consent (Art. 6(1)(a)): Newsletter subscription and marketing communications. You may withdraw consent at any time.
  • Contract Performance (Art. 6(1)(b)): Account creation, license management, and product delivery.
  • Legitimate Interest (Art. 6(1)(f)): Website analytics, security, and fraud prevention.
  • Legal Obligation (Art. 6(1)(c)): Tax and accounting records as required by law.

5. How We Use Your Data

  • To create and manage your user account.
  • To issue, activate, and validate software licenses.
  • To send newsletter emails about product updates and development news (with your explicit consent).
  • To respond to your support inquiries.
  • To improve our website and products.
  • To comply with legal obligations.

6. Newsletter & Email Marketing

Our newsletter is managed via Mailchimp (The Rocket Science Group LLC), which acts as our data processor. When you subscribe, your email address is transferred to Mailchimp for the purpose of sending email communications. Mailchimp is certified under the EU-U.S. Data Privacy Framework.

You can unsubscribe at any time by clicking the "unsubscribe" link in any email we send, or by contacting us directly. Upon unsubscription, your data will be deleted from our mailing list.

7. Data Sharing & Third Parties

We do not sell your personal data. We may share data with:

  • Mailchimp: Email newsletter delivery (data processor).
  • Hosting Providers: Server infrastructure for operating the website and license service.
  • Legal Authorities: When required by applicable law.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy. Account data is retained while your account is active. Newsletter data is deleted upon unsubscription. License data is retained for the duration of your license validity plus any legally required retention period.

9. Your Rights Under GDPR

You have the following rights regarding your personal data:

  • Right of Access (Art. 15): Request a copy of your personal data.
  • Right to Rectification (Art. 16): Request correction of inaccurate data.
  • Right to Erasure (Art. 17): Request deletion of your personal data.
  • Right to Restriction (Art. 18): Request restriction of processing.
  • Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format.
  • Right to Object (Art. 21): Object to processing based on legitimate interest.
  • Right to Withdraw Consent (Art. 7(3)): Withdraw consent at any time without affecting lawfulness of prior processing.

To exercise any of these rights, contact us at contact@sarmays.com. We will respond within 30 days.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS/HTTPS), secure password hashing, and access controls. However, no method of transmission over the internet is 100% secure.

11. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States (Mailchimp). Where such transfers occur, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or adequacy decisions.

12. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children.

13. Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.

15. Contact Us

For any questions about this Privacy Policy or your personal data, contact us at:
contact@sarmays.com