Apollo View Modular - Eurorack Modules

Apollo View Modular

Privacy Policy

Last updated: 2 October 2026

Who We Are

Apollo View Modular Ltd ("we", "us", "our") is the data controller for the personal data described in this policy. We are registered in England and Wales, company number 14030670, and with the UK Information Commissioner's Office, registration number ZC265048.

This policy covers our website, our plugin shop and customer portal, our newsletter, and the emails you send us. It applies under the UK General Data Protection Regulation and the Data Protection Act 2018 and, for customers in the European Union, the EU General Data Protection Regulation. Eurorack modules bought from our dealers are covered by each dealer's own privacy policy, not this one.

What We Collect, Why, and on What Basis

Browsing the website

Our host, Vercel, keeps short-lived server logs (including your IP address and browser details) to run and secure the site, and Vercel Web Analytics counts page views and performance without cookies or anything that identifies you. Our lawful basis is our legitimate interest in running a working, secure website.

Cookies and similar technologies

Cookiebot (by Usercentrics) shows the cookie banner and remembers your choices. Beyond the cookies the site needs to work, we use:

  • Google Analytics (statistics): to understand how visitors use the site. Analytics cookies are set only if you accept statistics cookies. Until you do, Google Analytics receives cookie-free signals (such as a page view) that it uses in aggregate to model visits; they carry no cookie identifier.
  • Meta Pixel (marketing): loads only if you accept marketing cookies. It tells Meta which pages you viewed and when you download a demo, add a plugin to your cart, start a checkout or buy, so we can measure and improve our adverts on Facebook and Instagram.
  • YouTube: embedded videos load only when you press play. They then play through YouTube's privacy-enhanced player, which may set cookies under Google's own privacy policy.

Our lawful basis for statistics and marketing cookies is your consent, which you can change at any time through the Cookie Preferences link at the bottom of every page.

Buying a plugin

Paddle (Paddle.com Market Limited) is the Merchant of Record for our plugins: Paddle sells the plugin to you, takes your payment and handles tax, as a controller in its own right under its privacy policy. We never see or store your card details or billing address. Paddle passes us:

  • Your email address, to deliver your licence key and identify your licences;
  • Order details: the transaction ID, the product, the amount and the currency;
  • Whether you ticked the box to hear about news and offers.

We then generate your licence key and send it by email. Our lawful basis is the performance of our contract with you: we cannot deliver or support your licence without these details.

If you accepted marketing cookies before checking out, we also send Meta a record of the purchase through Meta's Conversions API: the order value, the product and an encoded (SHA-256 hashed) form of your email address, so Meta can count the sale towards our adverts. We do this only with your marketing consent, and never for a free plugin.

The customer portal

You sign in to the portal with a link we email to you, so there is no password to store. Each link works once and expires after 10 minutes; signing in creates a session that expires on its own. We use your email address and the session to show your licences and downloads. Our lawful basis is the performance of our contract with you.

The newsletter and marketing emails

We send news and offers only if you ask for them: by ticking the box at checkout, or by signing up on our newsletter page and confirming through the link we email you. Our lawful basis is your consent. Every marketing email has an unsubscribe link that works straight away. Licence, download and update emails about plugins you own are not marketing and continue either way.

Contacting us

When you use our contact form we collect your name, email address and message, and email you a copy. When you email us directly, or send a bug report or feature request from inside a plugin (which opens an email in your own mail app, with the plugin version, host, sample rate and buffer size filled in for you to review), we receive whatever you send. We use it only to answer you and to support and improve our products. Bug reports and feature requests are copied, with your message, into our private issue tracker on GitHub through Zapier, so we can track the fix. Our lawful basis is our legitimate interest in answering you and fixing our products.

What the plugins themselves send

Nothing. Our plugins activate offline from your licence key and do not send us any data about you or how you use them. "Check for Update" simply opens our website in your browser.

Who Processes Your Data for Us

These companies process personal data on our behalf, under contract, only to provide their service to us:

  • Supabase: our database, sign-in and downloads (licences, orders, contact-form enquiries and marketing preferences), hosted in the EU (Ireland).
  • Resend: sends our emails (licence keys, sign-in links, enquiry confirmations, newsletter confirmations and, if you opted in, marketing emails).
  • IONOS: hosts our email inboxes, where your emails to us and our copies of contact-form messages arrive.
  • Vercel: hosts the website and provides cookie-free Web Analytics.
  • Usercentrics (Cookiebot): the cookie banner and your consent record.
  • Google: Google Analytics, and YouTube for videos you choose to play.
  • Zapier and GitHub: carry bug reports and feature requests from our inbox into our private issue tracker.

Meta Platforms Ireland Limited receives the Meta Pixel and Conversions API data described above. For collecting and sending that data, Meta and we are jointly responsible under Meta's Controller Addendum; what Meta then does with it is governed by Meta's own privacy policy.

We do not sell or rent your personal data. We disclose it otherwise only if the law requires us to.

International Transfers

Our database is in the EU. Some of the companies above (including Vercel, Resend, Google, Meta, Zapier and GitHub) are based in, or process data in, the United States. Where personal data leaves the UK or the EU, it is protected by an adequacy decision (such as the EU-US Data Privacy Framework and its UK Extension) or by standard contractual clauses and the UK's International Data Transfer Addendum.

How Long We Keep It

  • Licences and orders: for as long as your licence exists, so you can always download your plugins and recover your key. If you ask us to delete your data, we remove it, keeping only the transaction records the law requires for accounting.
  • Contact-form enquiries: deleted automatically after 18 months. Emails in our inbox are kept for as long as they help us support you, and deleted on request.
  • Newsletter sign-ups: an unconfirmed sign-up is deleted after 30 days. Once you unsubscribe, we keep only a record of your email address and the date, so we never email you marketing again.
  • Sign-in links and sessions: links expire after 10 minutes; sessions expire on their own.
  • Server logs, analytics and advertising data: for the periods set by Vercel, Google and Meta in their own policies.

How We Protect It

  • Encrypted connections (HTTPS) everywhere.
  • Licence keys signed with modern cryptography, so they cannot be forged.
  • Database access restricted by row-level security.
  • Installers in private storage, downloaded through time-limited links.

No method of transmission or storage is completely secure, but we take these steps to keep your data safe.

Your Rights

You have the right to:

  • Access the personal data we hold about you;
  • Correct anything inaccurate or incomplete;
  • Erase your data, subject to what the law requires us to keep;
  • Restrict or object to our use of it, including any use based on our legitimate interests;
  • Port your data: receive it in a structured, machine-readable format;
  • Withdraw consent at any time, through the unsubscribe link or Cookie Preferences, without affecting what we did before.

Email us at info@apolloviewmodular.com and we will reply within one month. If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office at ico.org.uk or, in the EU, to the data protection authority where you live. We would appreciate the chance to put things right first.

Children

Our website and products are not aimed at children, and we do not knowingly collect data from anyone under 13.

Links to Other Websites

Our site links to other websites, such as YouTube, Paddle and our dealers. Their own privacy policies apply there.

Changes to This Policy

When we change this policy we will post the new version here and update the date at the top.

Contact Us

For any question about this policy or your data, email info@apolloviewmodular.com or write to us at our registered office above.