Privacy Policy

Last updated: 6 October 2026

This Privacy Policy explains how Creature Creative LTD, trading as Creature Audio(“we”, “us”, “our”), collects and uses personal data when you use our website, create an account, or use our software, including Monster Switch, Monster Switch CONNECT and Monster Review (the “Services”). We are the data controller for the purposes of the UK GDPR and the Data Protection Act 2018.

Company: Creature Creative LTD, registered in England and Wales, company number [COMPANY NUMBER]. Registered address: [REGISTERED ADDRESS]. Contact: jasonelliott17@gmail.com.

1. What we collect

  • Account data — your email address and authentication details when you create a Creature Audio account.
  • Licence data — licence keys, activation/deactivation records, and the machine fingerprints of devices you activate the software on.
  • Purchase data — order references, product and subscription status. Payment card details are handled by our payment provider (see below); we do not see or store your full card number.
  • Support data — the contents of any emails or messages you send us.
  • Monster Review data — when you use a Monster Review project (review.creatureaudio.com), the name and initials you enter, and the notes, replies, timecodes, approvals and difficulty ratings you add. These are stored in that project and are visible to its owner (the studio or mixer) and to everyone else with access to it. If a project has a password, we store only a scrambled (hashed) version of it. Audio files are never uploaded: they play from your own device.
  • Technical/usage data — IP address, browser type, and basic logs generated when you use the website or the CONNECT relay, used for security and to operate the service.

2. How we use it, and our legal bases

  • To provide the Services (accounts, licensing, downloads, CONNECT remote sessions, Monster Review projects) — legal basis: performance of a contract. For people invited to a Monster Review project without an account, we process their notes on behalf of the studio that runs the project — legitimate interests.
  • To take payment and manage subscriptions — performance of a contract.
  • To provide support and respond to you — legitimate interests / contract.
  • To secure and maintain the Services and prevent abuse — legitimate interests.
  • To send you service or transactional emails (e.g. licence and account notices) — contract. We will only send marketing email if you opt in, and you can unsubscribe at any time — consent.

3. Who we share it with (processors)

We do not sell your personal data. We share it with service providers who process it on our behalf:

  • Lemon Squeezy — our payment provider and merchant of record; processes checkout, payment and subscription data.
  • Supabase — database and authentication hosting for accounts, licences and Monster Review projects.
  • Vercel — hosting for this website and portal.
  • Hetzner — server hosting for the Monster Switch CONNECT relay and the Monster Review web app.

Some providers may process data outside the UK/EEA. Where they do, we rely on appropriate safeguards such as the UK International Data Transfer Agreement / Addendum or an adequacy decision.

4. How long we keep it

We keep account, licence and purchase records for as long as you have an account and for a reasonable period afterwards to meet legal, accounting and tax obligations. You can ask us to delete your account at any time (see your rights below); some records may be retained where we are legally required to keep them.

Monster Review notes are kept for as long as the project exists. Its owner can edit, archive or delete them. If you added notes to someone else’s project and want them removed, ask the studio, or email us and we’ll help.

5. Your rights

Under UK data protection law you have the right to:

  • access the personal data we hold about you;
  • have inaccurate data corrected;
  • have your data erased in certain circumstances;
  • restrict or object to certain processing;
  • data portability;
  • withdraw consent where we rely on it.

To exercise any of these, email jasonelliott17@gmail.com. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.

6. Cookies

We use only cookies and similar storage that are strictly necessary to run the website and keep you signed in. Monster Review also uses your browser’s local storage to remember, on that device only, the name and initials you entered, that you agreed to the beta terms, and a project’s password if it has one, so you don’t have to re-enter them. Clearing your browser data removes them. We do not use advertising or third-party tracking cookies. If this changes we will update this policy and, where required, ask for your consent.

7. Changes

We may update this policy from time to time. We will post the updated version here and change the “last updated” date above.