Privacy Policy

Effective December 20, 2023

We take your privacy very seriously. This Privacy Policy describes the privacy practices of Native Instruments USA, Inc., formerly known as iZotope, Inc. (together with our affiliates, “Native Instruments USA”, “we”, “us” or “our”) and how we handle personal information that we collect through our websites (the “Sites”), our products or services (the “Services”), as well as through social media, our marketing activities, and other activities described in this Privacy Policy. This Privacy Policy also describes your choices and rights with respect to your personal information.

See the “State law privacy rights notice” section below for important information about your personal information and rights under applicable state privacy laws.

See the “European Economic Area and United Kingdom privacy notice” section below for important information about your personal information and rights under applicable law in Europe and the United Kingdom.

Personal information we collect

Information you provide to us. The specific personal information that we collect will depend on how you use the Sites and which Services you use and features you choose to interact with. All mediums of personal information collection described in this Privacy Policy may not be relevant to your relationship with Native Instruments USA..  Personal information you may provide to us through the Sites, Services, and otherwise includes:    

• Account data that you provide to create an account on the Sites or Services, including your name, email, password, address, and phone number.
• Profile data that you choose to add to your profile on the Sites or Services, such as your name, location (e.g., city, country), company, website URL, biographical details, and profile photo.
• Communications that we exchange with you, including when you contact us with questions or feedback.
• Payment and transactional data needed to complete your orders on or through the Sites and Services (including name, email, address, payment card information, billing information), and your transaction history and serial numbers.
• Marketing preference data, such as your preferences for receiving our marketing and other communications.
• User-generated audio content that you upload, generate, transmit, or otherwise make available through the Services, as well as associated metadata. Metadata includes information on how, when, where, and by whom audio content was created or collected, and how that content has been formatted or edited.
• User persona data, such as basic demographic information as well as how you identify as a music producer, audio engineer, etc., the types of projects you work on, and other information about how you may prefer to use the Services, which may be provided through surveying or deduced through the Services.
• Other data not specifically listed here, which we will use as described in this Privacy Policy or as otherwise disclosed at the time of collection.

Third-party sources. We may collect personal information about you from other sources.  These sources may include:

• Retail partners, such as partners we bundle our products with or rent-to-own platforms you may use to install Native Instruments USA's iZotope-branded products.
• Audio libraries, such as commercially available online markets to license sound files
• Public sources, such as social media accounts when you choose to post or communicate with us through such platforms.

Automatic data collection. We, our service providers, and our business partners may automatically log information about you, your computer or mobile device, and your interaction over time with the Sites and Services, our communications and other online interactions, such as:

• Device data, such as your computer’s or mobile device’s operating system type and version, manufacturer and model, browser type, screen resolution, CPU usage, device type (e.g., phone, tablet), IP address, unique identifiers (including identifiers used for advertising purposes), language based on site specifications, mobile device carrier, and general location information, such as city, state, country, geographic area, or time zone.
• Digital audio workstation data, such as workstation name, format, and version.
• Online activity, such as pages, screens, or features on the Sites or Services you viewed, how long you spent on a page, screen, or feature, access times, and duration of access, information about your activity on a page, screen, or feature, navigation paths between pages, screens, or features, the website you visited before browsing our Sites, or whether you have opened our marketing emails or clicked links within them.

Cookies. Some of our automatic data collection is facilitated by cookies and similar technologies.  For more information, see our Cookie Notice.

How we use your personal information

We use your personal information for the following purposes or as otherwise described at the time of collection:

Service delivery. We use your personal information to:

• provide, operate, and improve the Sites, Services, and our business;
• establish and maintain your account and user profile on the Sites and Services;
• communicate with you about the Services, including by sending announcements, updates, security alerts, and support and administrative messages;
• understand your needs and interests, and personalize your experience with the Services and our communications; and
• provide support for the Services, and respond to your requests, questions, and feedback.

Research and development. We may use your personal information, including audio content, for research and development purposes to analyze and improve the Sites, Services, and our business.  As part of some of these activities, we may create aggregated, de-identified, or other anonymous data from personal information we collect.  We make personal information into anonymous data by removing information that makes the data personally identifiable to you. We may use anonymous data and share it with third parties for our lawful business purposes, including to analyze and improve the Sites and Services, and to promote our business.  

Marketing and advertising. We, our service providers, and our third-party advertising partners may collect and use your personal information for the following marketing and advertising purposes:

• Direct marketing. We may customize and send you direct marketing communications, such as newsletters, loyalty offers, and raffle opportunities, as permitted by law.  You may opt-out of our marketing communications as described in the Opt-out of marketing communications section below.  
• Interest-based advertising. We may engage third-party advertisers or advertising companies to display ads on our Sites, Services, and other online services. These companies may use cookies and similar technologies to collect information about your interaction (including the data described in the automatic data collection section above) over time across the Sites, Services, our communications and other online services, and use that information to serve online ads that they think will interest you.  This is called interest-based advertising. We may also share names, emails, state and country, transaction history information, and the device identifiers of our users with these companies to facilitate interest-based advertising to those or similar users on other online platforms. You can learn more about your choices for limiting interest-based advertising in the Your choices section of our Cookie Notice. 

Compliance and protection. We may use your personal information to:

• comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas or requests from government authorities;
• protect our, your or others’ rights, privacy, safety, or property (including by making and defending legal claims); 
• audit our internal processes for compliance with legal and contractual requirements and internal policies; 
• enforce the terms and conditions that govern the Sites and Services; and 
• prevent, identify, investigate, and deter fraudulent, harmful, unauthorized, unethical, or illegal activity, including cyberattacks and identity theft.  

Retention. We retain personal information where we have an ongoing legitimate business need to do so (for example, to provide you with a product or service you have requested; to comply with applicable legal, tax or accounting requirements; to establish or defend legal claims; or for fraud prevention). Whether the retention period is sufficient to fulfill such purposes is the primary criteria for determining the duration of the retention period. When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will store your personal information and isolate it from any further processing until deletion is possible. 

How we share your personal information

We may share your personal information with the parties below, with other third parties with your consent, and as otherwise described in this Privacy Policy or at the time of collection.

Service providers. Companies and individuals that provide services on our behalf or help us operate the Sites, Services, or our business (such as hosting, information technology, customer support, email delivery, marketing, and analytics, among other functions) to facilitate the provisioning of such services.

Payment processors. Any payment card information you use to make a purchase on the Sites is collected and processed directly by our payment processors.

Advertising partners. Third-party advertisers and advertising companies for the interest-based advertising purposes described above. Advertisers whose ads are posted on our Sites and Services may be able to infer information about you when you click on those ads (e.g., that you are interested in music production).

Other users and the public. Your first name and the first initial of your last name along with the title and content of your product review may be visible to the public if you choose to submit a review on our Sites.

Professional advisors. Professional advisors, such as lawyers, auditors, bankers, and insurers, where necessary in the course of the professional services that they render to us.

Authorities and others. Law enforcement, government authorities, and private parties, as we believe in good faith to be necessary or appropriate for the purposes described above.

Affiliates. Our corporate parent, subsidiaries, and affiliates, for purposes consistent with this Privacy Policy.

Business transferees. Acquirers and other relevant participants in business transactions (or negotiations for such transactions) involving a corporate divestiture, merger, consolidation, acquisition, reorganization, sale or other disposition of all or any portion of the business or assets of, or equity interests in, Native Instruments USA or our affiliates (including, in connection with a bankruptcy or similar proceedings).

Your choices

You have the following choices with respect to your personal information. Depending on the nature of the choice you would like to exercise, we may need to verify your identity before honoring your request.

Access or update your information. If you have registered for an account on the Sites or Services with us, you may review and update account information by logging into the account. 

Delete your data. You may request to delete the personal information you have provided through the Sites or Services by submitting a request through our personal data rights request form.  

Delete your iZotope account.  You may request to delete your Native Instruments USA account by submitting a request through our personal data rights request form.  

Revoking your consent.  If we have asked for your consent to collect, use, or share your personal information, you can revoke it either in the relevant privacy settings in the Services or by submitting a request through our personal data rights request form. If, notwithstanding the choices available to you as described in this “Your choices” section, you wish to revoke your authorization for Native Instruments USA to handle your personal information as described in this Privacy Policy, you may do so by requesting that we delete your account and the personal information that you have provided through the Sites and Services by submitting a request through our personal data rights request form. We will process such requests within a reasonably prompt timeframe after receipt and your revocation will become effective once processing is complete, until which time we will continue to handle your personal information as described in this Privacy Policy.  

Opt-out of marketing communications.  You may opt-out of marketing-related emails by following the opt-out or unsubscribe instructions at the bottom of the email, or by submitting a request through our personal data rights request form.  You may continue to receive service-related and other non-marketing emails.  

Cookies. For information about cookies employed by the Sites and Services and how to control them, see our Cookie Notice. 

Do Not Track.  Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit.  We currently do not respond to “Do Not Track” or similar signals except where we expressly indicate otherwise.  To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com.

Legal rights.  You may have certain legal rights with respect to your personal information.  See the State law privacy rights notice or the European Economic Area and United Kingdom privacy notice for information about the rights available to individuals in those locations. If you would like to exercise other legal rights not described in this Privacy Policy, please contact us at privacy-boston@native-instruments.com.  

Declining to provide information. We need to collect personal information to provide certain Services.  If you do not provide the information we identify as required or mandatory, we may not be able to provide those Services.

Other sites and services

The Sites and Services may contain links to websites, mobile applications, resources, and other online services operated by third parties. In addition, our content may be integrated into web pages or other online services that are not associated with us. These links and integrations are not an endorsement of, or representation that we are affiliated with, any third party. Native Instruments USA has no control over these websites, mobile applications, or online services operated by third parties, and is not responsible for their content or their security and privacy practices. We advise you to read the privacy policies of those websites, mobile applications, and other online services thoroughly, so that you are aware of the manner in which they will use your personal information.

Security

We employ a number of technical, organizational and physical safeguards designed to protect the personal information we collect.  However, security risk is inherent in all Internet and information technologies, and, as such, we cannot guarantee the security of your personal information.

International Data Transfer

We are headquartered in the United States, have affiliates with offices in Germany and the United Kingdom, and we may use service providers that operate in other countries. Your personal information may be transferred to the United States, Germany, the United Kingdom, or other locations where privacy laws may not be as protective as those in your state, province, or country. We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

Children

The Sites and Services are not intended for use by children under 16 years of age. If we learn that we have collected personal information through the Sites and Services from a child under 16 without the consent of the child’s parent or guardian, as required by law, we will delete it.

Changes to this Privacy Policy

We reserve the right to modify this Privacy Policy at any time. If we make material changes to this Privacy Policy, we will notify you by updating the date of this Privacy Policy and posting it on the Sites and Services. If required by law, we will also provide notification of changes in another way that we believe is reasonably likely to reach you, such as via email or another manner through the Sites and Services.  Any modifications to this Privacy Policy will be effective upon our posting the modified version (or as otherwise indicated at the time of posting). In all cases, your use of the Sites and Services after the effective date of any modified Privacy Policy indicates your acceptance of the modified Privacy Policy.

Contact Information

We welcome your comments or questions about this Privacy Policy. You may contact us at izotope.com/support or at our mailing address of Native Instruments USA, Inc., 2 Avenue de Lafayette, Boston, MA 02111.

European Economic Area and United Kingdom privacy notice

The information provided in this section applies only to individuals in the European Economic Area, United Kingdom and Switzerland, which we refer to in this notice collectively as “Europe”.

Personal information. References to “personal information” in this Privacy Policy are equivalent to “pers

onal data” governed by European data protection legislation. 

Controller. Native Instruments USA is the controller of your personal information covered by this Privacy Policy for purposes of European data protection legislation.  

Data Protection Officer.  Our data protection officer can be reached at boston-legal@native-instruments.com or at the contact details above.

United Kingdom Representative. Native Instruments UK Ltd. Registered office address at: Squire Patton Boggs (UK) Llp (ref: Csu), Rutland House, 148 Edmund Street, Birmingham, B3 2JR, United Kingdom. Contact at: privacy-london@native-instruments.com

Legal bases for processing. We use your personal information only as permitted by law. Our legal bases for processing the personal information described in this Privacy Policy are described in the table below.

Use for new purposes. We may use your personal information for reasons not described in this Privacy Policy where permitted by law and the reason is compatible with the purpose for which we collected it. If we need to use your personal information for an unrelated purpose, we will notify you and explain the applicable legal basis.

Sensitive personal information. If you provide us with any sensitive personal information when you use the Services, you must consent to our processing and use of such sensitive personal information in accordance with this Privacy Policy. If you do not consent to our processing and use of such sensitive personal information, you must not submit such sensitive personal information through our Services. Sensitive information includes information related to racial or ethnic origin, political opinions, religion or other beliefs, health, biometrics or genetic characteristics, criminal background or trade union membership.

Your rights. European data protection laws give you certain rights regarding your personal information. If you are located in Europe, you may ask us to take the following actions in relation to your personal information that we hold:

• Access. Provide you with information about our processing of your personal information and give you access to your personal information.
• Correct.  Update or correct inaccuracies in your personal information.
• Delete. Delete your personal information.
• Transfer. Transfer a machine-readable copy of your personal information to you or a third party of your choice.
• Restrict. Restrict the processing of your personal information.
• Object. Object to our reliance on our legitimate interests as the basis of our processing of your personal information that impacts your rights.

You may submit these requests by submitting a request through our personal data rights request form or our postal address provided above. We may request specific information from you to help us confirm your identity and process your request. Applicable law may require or permit us to decline your request. If we decline your request, we will tell you why, subject to legal restrictions. If you would like to submit a complaint about our use of your personal information or our response to your requests regarding your personal information, you may contact us or submit a complaint to the data protection regulator in your jurisdiction. You can find your data protection regulator at https://edpb.europa.eu/about-edpb/board/members_en.

Cross-border data transfer. If we transfer your personal information from Europe to another country such that we are required to apply appropriate safeguards to your personal information under European data protection laws, we will do so.  Please contact us for further information about any such transfers or the specific safeguards applied.

State law privacy rights notice

Except as otherwise provided, this section applies to residents of states with privacy laws applicable to us that grant their residents the rights described below.

For purposes of this section, “personal information” has the meaning given to “personal data”, “personal information” or similar terms under the applicable privacy laws of the state in which you reside. Please note that not all rights listed below may be afforded to all users and that if you are not a resident of the relevant states, you may not be able to exercise these rights. In addition, we may not be able to process your request if you do not provide us with sufficient detail to allow us to confirm your identity or understand and respond to it.

In some cases, we may provide a different privacy notice to certain categories of residents of these states, such as job applicants, in which case that notice will apply with respect to the activities it describes instead of this section.

Your privacy rights. You have the rights listed below. However, these rights are not absolute and in certain cases, we may decline your request as permitted by law.

• Information/know.  You can request whether we have collected your personal information, and in certain cases, information about how we use and share it. For example, if you are a California resident, you can request information for the past 12 months about the categories of personal Information that we have collected; the categories of sources from which we collected personal information; the business or commercial purpose for collecting, sharing and/or selling personal information; the categories of any personal information that we sold or disclosed for a business purpose; and the categories of any third parties with whom personal information was sold, shared, or disclosed for a business purpose.
• Access. You can request a copy of the personal information that we have collected about you.
• Correction. You can request that we correct inaccurate personal information that we have collected from you.
• Deletion.  You can request that we delete your personal information. Please note that once we process a deletion request, we will be unable to provide any online or digital services to you or support for past products or services that you may have purchased.
• Opt-out of tracking for targeted advertising purposes. You can opt-out of certain tracking activities for targeted advertising (also known as interest-based advertising) purposes.
• Nondiscrimination.  You are entitled to exercise the rights described above free from discrimination as prohibited by applicable privacy laws.

Exercise your rights.

Right to information/know, access, correction, and deletion. You may submit requests to exercise these rights by:

• Writing to Native Instruments USA, Inc., Attention: Legal Department, 2 Avenue de Lafayette, Boston, MA 02111
• Submitting a request through our personal data rights request form

Right to opt-out of tracking for targeted advertising purposes. While we do not sell personal information for money, like many companies, we use services that help deliver interest-based ads to you, as we have described above. Applicable privacy laws may classify our use of some of these services as “sharing” your personal information with advertising partners that provide the services, from which you have the right to opt-out of tracking for targeted advertising purposes here: Do Not Share My Personal Information. Your request to opt-out will apply only to the browser and the device from which you submit the request. You can also broadcast the Global Privacy Control (GPC) to opt-out for each participating browser system that you use. Learn more at the Global Privacy Control website.

Verification of identity. We may need to verify your identity in order to process your information/know, access, correction, or deletion requests, and reserve the right to confirm your residency. To verify your identity, we may require authentication into your Service or Site account if you have one, government identification, email or telephone confirmations, a declaration under penalty of perjury, or other information, where permitted by law.

Authorized agents. Your authorized agent may be able to make a request on your behalf. However, we may need to verify your authorized agent’s identity and authority to act on your behalf. We may require a copy of a valid power of attorney given to your authorized agent pursuant to applicable law. If you have not provided your agent with such a power of attorney, we may ask you to take additional steps permitted by law to verify your identity and confirm that you have given the authorized agent permission to submit the request.

Additional information for California residents.

• Sales. We do not “sell” personal information as defined by the CCPA and have not sold personal information in the preceding 12 months.   
• Sensitive personal information. We do not use or disclose sensitive personal information for purposes that California residents have a right to limit under the CCPA.
• Personal information that we collect, use and disclose. The table below describes our personal information practices by reference to the categories in the “Personal information we collect” section above and the categories described in the CCPA (Cal. Civ. Code Section 1798.140(v)) and describes our practices currently and during the 12 months preceding the effective date of this Privacy Policy. Information you voluntarily provide to us, such as in free-form webforms, may contain other categories of personal information not described below.