PRIVACY POLICY

2TonAudio Software

Last Updated: March 2026

ZooSound Corporation, doing business as 2TonAudio ("we," "us," or "our"), is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information in connection with your use of our software products, including Alternator and Demuterizer (each, "the Software"). This policy applies to all users of our Software worldwide.

By using the Software, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, please do not use the Software.

---

1. WHAT WE COLLECT

We collect the absolute minimum data necessary to operate the Software's licensing and trial enforcement systems. Specifically:

a) License Key

Your license key is transmitted directly to our licensing provider, Lemon Squeezy, when you activate, verify, or deactivate the Software. This applies to both Alternator and Demuterizer. This communication is required to validate your purchase and manage activation slots.

b) Device Identifier (License Activation)

A unique hardware identifier (UUID) for your Mac is transmitted alongside your license key to Lemon Squeezy for the purpose of license activation. It is used solely to associate an activation with a specific device and to enforce the two-device activation limit. We do not use this identifier for tracking, advertising, or any other purpose.

c) Trial Machine Hash

For trial period enforcement, the Software generates a one-way cryptographic hash (HMAC-SHA256) of your Mac's hardware UUID and transmits it, along with your application identifier and a current timestamp, to our trial verification server at api.2tonapps.com over an encrypted HTTPS connection. This hash is mathematically irreversible — it cannot be used to reconstruct your actual hardware UUID. Our trial server stores only the hash value, your application identifier, the date your trial began, and the date of your most recent trial check. No name, email address, IP address, or other personal information is stored in the trial database. Trial verification results are cached locally in the macOS Keychain for up to twenty-four (24) hours; the Software contacts the trial server at most once per day per device.

d) Customer Email Address

When you activate the Software, Lemon Squeezy may return the email address associated with your license purchase. This email is stored locally on your device in the macOS Keychain and displayed in the Software's License window for your reference. We do not collect your email through the Software itself — it originates from the payment provider at the time of purchase.

e) Trial Start Date

The date you first launched the Software is stored locally on your device in the macOS Keychain as a fallback reference during the brief moment before the trial server responds. The trial clock itself is maintained server-side and is authoritative.

f) Additional Data — Alternator Only

If you use Alternator, the following additional data applies:

- ElevenLabs API Key: Your personal ElevenLabs API key is stored locally on your device in the macOS Keychain. It is transmitted to ElevenLabs (api.elevenlabs.io) in request headers solely to authenticate your requests to their service. It is never transmitted to 2TonAudio or Lemon Squeezy.

- Voice Recordings and Audio Samples: If you use Alternator's recording feature, audio captured from your microphone is stored locally on your device in the Alternator Library folder (~/Music/Alternator Library by default). This audio is not transmitted to 2TonAudio. When you use voice cloning features, your audio samples are transmitted to ElevenLabs via their API to perform the requested voice cloning operation.

- Text Input: When you use Alternator's text-to-speech synthesis feature, the text you enter is transmitted to ElevenLabs to generate synthesized audio. This text is not transmitted to 2TonAudio.

- Voice Metadata: When creating a voice clone, the name and description you provide for the voice are transmitted to ElevenLabs as part of the voice creation request.

- Generated Audio Files: Synthesized and converted audio files produced by Alternator are stored locally on your device in the Alternator Library folder. These files are not transmitted to 2TonAudio.

g) Additional Data — Demuterizer Only

If you use Demuterizer, the following applies:

- Pro Tools Session Data: Demuterizer communicates with a locally running Pro Tools instance via a local protocol (localhost). This communication never leaves your device and is not transmitted over any network. Session and mute data read from Pro Tools is processed in memory and is not stored, logged, or transmitted.

- Temporary Files: Demuterizer may read temporary session export files generated by Pro Tools on your local device. These files are processed in memory and deleted immediately after use. No session content is retained or transmitted.

---

2. WHAT WE DO NOT COLLECT

Our Software does not collect, transmit, or store:

- Crash logs or error reports

- System or hardware specifications (beyond the device UUID used for Lemon Squeezy activation and the one-way hash used for trial enforcement)

- IP addresses (your IP address is received by our trial server as part of standard HTTPS communication and is used transiently for rate limiting purposes only; it is not logged to any database or retained)

- Operating system version or application version

- Usage analytics, behavioral data, or telemetry

- Names, addresses, phone numbers, or other personal contact information

- Financial information such as payment card numbers, bank details, or billing addresses

- Cookies, advertising identifiers, or tracking pixels

- Location data

Demuterizer additionally does not collect, transmit, or store any Pro Tools session content, project names, track names, or audio files beyond immediate in-memory processing.

---

3. HOW WE USE YOUR INFORMATION

The information transmitted through our licensing and trial infrastructure is used exclusively for:

- Activating and verifying your paid license (via Lemon Squeezy)

- Managing device activation slots (up to two per license)

- Processing deactivation requests

- Periodic license verification (Alternator verifies on each launch with a staleness threshold of approximately 30 days; Demuterizer verifies periodically with a 30-day interval and a 7-day grace period for temporary network interruptions)

- Enforcing the seven (7) day trial period on a per-device basis via our trial verification server

We do not use your information for marketing, advertising, profiling, or any purpose unrelated to license and trial administration.

Data transmitted to ElevenLabs by Alternator is used solely to perform the voice cloning, text-to-speech, and speech-to-speech conversion features you explicitly request. We do not control how ElevenLabs processes or retains data submitted to their service; please review ElevenLabs' Privacy Policy at https://elevenlabs.io/privacy for details.

---

4. WHERE YOUR DATA IS STORED

a) On Your Device

Your license key, activation instance identifier, customer email, last verification date, trial start date, trial verification cache, license status flags, and (for Alternator) your ElevenLabs API key are stored securely in the macOS Keychain on your local device. In a sandboxed application, this data is not accessible to other applications. Alternator additionally stores voice models, audio samples, voice templates, and generated audio files locally in the Alternator Library folder on your device.

b) Lemon Squeezy (Paid License Provider)

License activation records (license key, device identifier, activation instance) are stored by our licensing provider, Lemon Squeezy, on servers located in the United States. Both Alternator and Demuterizer communicate directly with Lemon Squeezy's License API over HTTPS. Lemon Squeezy manages activation tracking and enforcement of device limits on our behalf. Lemon Squeezy's handling of your data is governed by their privacy policy, available at https://www.lemonsqueezy.com/privacy.

c) 2TonAudio Trial Verification Server (api.2tonapps.com)

Trial period enforcement data is stored on a server operated by 2TonAudio, located in the United States. The trial database stores only the following fields per device per application: a one-way cryptographic hash of your hardware UUID (irreversible), your application identifier, the date your trial began, and the date of your most recent trial check. No name, email address, IP address, payment information, or other personal data is stored in this database. Data in the trial database is retained for the purpose of enforcing the trial period. You may request deletion of your trial record by contacting us at support@2TonAudio.com with your application name and approximate first-use date.

d) ElevenLabs (Alternator Only)

When you use Alternator's voice cloning or synthesis features, audio samples, text, and voice metadata are transmitted to and processed by ElevenLabs. ElevenLabs may retain voice models and related data on their servers in accordance with their own privacy policy and terms of service, available at https://elevenlabs.io/privacy. You are responsible for managing your own ElevenLabs account data, including deleting voice clones, through the ElevenLabs platform.

e) Payment Provider

Payments are processed by Lemon Squeezy (https://lemonsqueezy.com). We do not have access to your payment card information or billing details. Lemon Squeezy's handling of your payment data is governed by their privacy policy, available at https://www.lemonsqueezy.com/privacy.

---

5. DATA SHARING

We do not sell, rent, trade, or otherwise share your personal information with third parties, except:

- With Lemon Squeezy, as necessary to fulfill your purchase and manage license activations (both Alternator and Demuterizer communicate directly with Lemon Squeezy)

- With ElevenLabs, solely to perform voice cloning and synthesis features you explicitly initiate in Alternator using your own ElevenLabs account credentials

- If required by law, court order, or governmental regulation

- To protect the rights, property, or safety of 2TonAudio, our users, or others

---

6. DATA RETENTION

- License activation records (license key, device identifier, activation instance) are retained by Lemon Squeezy for as long as your device remains activated. Lemon Squeezy independently retains data in accordance with their privacy policy.

- Upon deactivation, the Software contacts Lemon Squeezy to release the activation slot and then clears local license data from your device. An active internet connection is required to complete deactivation. If you are offline, the Software will prompt you to connect before deactivating.

- Local Keychain data (license key, email, verification date, trial cache) is cleared from your device when you deactivate your license through the Software.

- The trial start date and cached trial verification result remain in your local Keychain and are used as a loading fallback until the trial server responds. These are not transmitted to any server.

- Trial records on our trial verification server (app identifier, device hash, first-seen date, last-check date) are retained for trial administration purposes. You may request deletion by contacting support@2TonAudio.com.

- Alternator Library files (voice models, audio samples, generated clips) are stored locally and remain on your device until you delete them. They are not subject to any server-side retention policy.

- If you wish to have all data associated with your license removed, contact us at support@2TonAudio.com and we will coordinate with Lemon Squeezy as needed.

---

7. DATA SECURITY

We take reasonable measures to protect the information involved in the licensing and trial enforcement process:

- All network communication between the Software and Lemon Squeezy, and between the Software and our trial verification server, uses HTTPS encryption.

- Local license, trial cache, and API key data is stored in the macOS Keychain, which is encrypted by the operating system and restricted to the application that created it (when sandboxed).

- Hardware identifiers are never transmitted in raw form to our trial server. Only a one-way HMAC-SHA256 hash is transmitted, which cannot be reversed to obtain the original hardware UUID.

- Our trial verification server implements rate limiting per IP address and per device hash to prevent abuse.

- Timestamps are validated server-side; requests with timestamps older than five (5) minutes are rejected to prevent replay attacks.

No method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

---

8. YOUR RIGHTS

Depending on your jurisdiction, you may have the following rights:

a) California Residents (CCPA/CPRA)

Under the California Consumer Privacy Act and the California Privacy Rights Act, you have the right to:

- Know what personal information we collect and how it is used

- Request deletion of your personal information

- Opt out of the sale of your personal information (we do not sell personal information)

- Non-discrimination for exercising your privacy rights

Categories of personal information we collect: identifiers (device UUID transmitted to Lemon Squeezy; a one-way hash of device UUID transmitted to our trial server; license key; email address associated with purchase). Alternator users additionally provide audio content and text input that is transmitted to ElevenLabs as described above. We do not collect sensitive personal information as defined by the CCPA/CPRA beyond what is described in this policy.

To exercise your rights, contact us at support@2TonAudio.com. We will respond to verifiable requests within 45 days.

b) United Kingdom and European Economic Area Residents (UK GDPR / EU GDPR)

If you are located in the UK or EEA, the legal basis for processing your data is the performance of a contract (your license agreement). You have the right to:

- Access the personal data we hold about you

- Rectification of inaccurate data

- Erasure of your data ("right to be forgotten")

- Restriction of processing

- Data portability

- Object to processing

- Lodge a complaint with your local data protection authority

To exercise any of these rights, contact us at support@2TonAudio.com. We will respond within 30 days. Because license activation data is held by Lemon Squeezy, we will coordinate with them as necessary to fulfill your request. Trial enforcement records held on our own server can be deleted upon verified request.

c) All Users

Regardless of your location, you may:

- Deactivate your license at any time through the Software (requires internet connection), which clears local Keychain data and removes your device activation from Lemon Squeezy's records

- Request information about what data is associated with your license or trial record

- Request deletion of your data by contacting us, and we will coordinate with Lemon Squeezy as needed and delete any trial records on our own server

- Contact us with any privacy-related questions or concerns

---

9. MICROPHONE ACCESS (ALTERNATOR ONLY)

Alternator may request access to your device's microphone on launch or before recording features are used. Microphone access is required only for in-app audio recording functionality. If you do not use recording features, microphone access is not exercised. Recorded audio is stored locally on your device and is not transmitted to 2TonAudio. You may revoke microphone access at any time in macOS System Settings > Privacy & Security > Microphone.

---

10. CHILDREN'S PRIVACY

Our Software is not directed at children under the age of 18. We do not knowingly collect personal information from anyone under 18 years of age. If we become aware that we have collected data from a child under 18, we will take steps to delete that information promptly.

---

11. INTERNATIONAL DATA TRANSFERS

License data may be transferred to and processed in the United States. For both Alternator and Demuterizer, your license key and device identifier are sent directly to Lemon Squeezy's servers in the United States. Trial enforcement data (device hash, application identifier, and timestamps) is sent to our trial verification server, also located in the United States. Alternator users who use ElevenLabs features should also be aware that ElevenLabs may process data in the United States or other jurisdictions. By using the Software, you consent to these transfers. We ensure that appropriate safeguards are in place to protect your data in accordance with applicable law.

---

12. THIRD-PARTY SERVICE DISCLAIMER

Our Software may integrate with or depend on third-party services including ElevenLabs and Lemon Squeezy. We are not responsible for the privacy practices of any third party. We encourage you to review the privacy policies of any third-party services you use in connection with our Software.

---

13. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. Changes will be posted at https://2tonaudio.com/privacy with an updated "Last Updated" date. If we make material changes, we will make reasonable efforts to notify you through the Software or via the email associated with your license. Your continued use of the Software after any changes constitutes acceptance of the updated Privacy Policy.

---

14. CONTACT US

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

ZooSound Corporation, doing business as 2TonAudio

Email: support@2TonAudio.com

Website: https://2tonaudio.com

---

Pro Tools® is a registered trademark of Avid Technology, Inc. ElevenLabs® is a trademark of ElevenLabs, Inc. 2TonAudio is not affiliated with or endorsed by Avid Technology, Inc. or ElevenLabs, Inc.

© 2026 ZooSound Corporation d/b/a 2TonAudio. All rights reserved.