Who controls your data
Fugue controls the personal data used to operate this website, accounts, digital-product delivery and optional analytics. For privacy requests, email hello@byfugue.com.
Data we collect
- Account information such as your name, email address and verification state.
- Purchase, order, refund, license and download records.
- Security information such as IP address, user-agent, error and audit events.
- Transaction email delivery events from Resend.
- Payment and payment-status information processed by Stripe; Fugue does not store full card numbers.
- If you accept analytics cookies, Google Analytics receives information about page visits, interactions, device and browser characteristics, referral source and approximate location. We do not send your Fugue account name or email address to Google Analytics.
Why we use it
- To create and secure your account, fulfil an order, deliver products, manage licenses and support downloads. We do this because it is necessary to perform our contract with you or take steps at your request before a contract.
- To process payments, refunds, fraud checks and company, tax and accounting records. We do this to comply with legal obligations and to protect our legal rights.
- To send verification, account and transactional service emails. This is necessary to perform our contract and to keep your account secure.
- To secure, troubleshoot and improve the reliability of the service. We rely on our legitimate interests in preventing fraud, protecting the service and resolving technical issues, balanced against your rights.
- With your consent, to measure visits and understand how people use the storefront so we can improve navigation, content and product pages.
Service providers and transfers
Payments for Fugue are collected through a Stripe account operated by CLOUPT LTD. Stripe and the account operator receive the transaction information needed to process payments, refunds, fraud checks and payment administration. This payment role does not make CLOUPT LTD the controller of Fugue website or analytics data. Resend sends transactional account and service emails. Cloudflare provides hosting, database, security and edge infrastructure. If you accept analytics, Google Analytics processes website usage data for us. We use these providers as processors or independent controllers where they determine their own processing purposes, and only share the information needed for the relevant service.
Our providers may process information outside the UK. Where a restricted transfer applies, we use the provider's data-processing terms and applicable UK adequacy regulations or other appropriate safeguards, such as the UK International Data Transfer Addendum or approved contractual clauses. We do not promise that data is stored in any particular country or region.
Cookies
We use strictly necessary cookies for account authentication, security and your cookie preference. They operate without optional consent because the service cannot provide those features reliably without them. The cookie preference is stored for 180 days.
Google Analytics cookies are optional and remain disabled until you select “Accept analytics”. We use Google Analytics measurement ID G-6XDW3B0DGH for audience and page-usage statistics, with advertising storage and personalisation disabled. You can reject analytics initially or reopen “Cookie settings” on any page to withdraw consent. Withdrawing consent stops future analytics collection and removes accessible Google Analytics cookies from this site.
Retention
Account information is retained while your account is active. Expired sessions and verification, password-reset and download tokens are deleted 30 days after expiry. Abandoned checkout data and campaign reservations are deleted 30 days after creation; completed checkout personal data is minimised after 90 days while the order record remains. Customer notes and audit or security records are deleted after six months unless needed for an active investigation. Order, payment and acceptance records are retained for seven years from the order date to meet accounting and legal obligations. Analytics retention is controlled in the Google Analytics property and optional cookies remain subject to your browser controls. We may anonymise records sooner where identifying information is no longer needed.
Your rights
Depending on where you live, you may request access, correction, deletion, restriction, objection or portability of personal data. You may also complain to your local data protection authority. Contact hello@byfugue.com; we may need to verify your identity before completing a request. Deletion requests are reviewed manually. Once approved, an owner removes account and library access and anonymises personal data that must remain in financial records.
Security and incidents
We use access controls, encrypted transport, secure session cookies and provider security controls to protect account and purchase data. No online service is risk-free. If we identify a breach that requires notice, we will follow applicable notification rules and contact affected users where required.
Changes to this policy
We may update this policy when the product, providers or applicable law changes. The effective date at the top of this page will change with each material revision.