Privacy policy.

1. Who is responsible

Stichting FomixMedia is the controller for personal data processed for this website and its accounts, software licences and services. AudioFlow and VideoFlow are product names. Our contact and registration details appear below. For privacy questions and requests, email info@fomixmedia.nl.

2. Data we process

Registration and account management involve your name and email and, if provided, organisation, phone number, address, country, company registration and VAT number. We store a secured password hash, account status and role. Two-factor authentication involves your chosen method and the necessary encrypted settings, temporary codes and protected recovery codes.

For licences we process the owner, product, licence ID, label, hardware identifier (HWID), validity, included features and change requests. Support involves ticket/contact details, messages and files you submit. Do not send passwords, private keys, payment card data or unnecessary personal data about other people.

For billing we process invoice details, amounts, payment status and references. Payments are processed through Mollie; our website does not store full card numbers or similar payment credentials. Registration also records the time, language and version of your acceptance of the terms, with your IP address if reliably available.

Security and activity records contain visited paths without query strings, time, action, outcome, account ID/email and role when signed in, browser information and a reliably available IP address. The activity log excludes passwords, tokens, licence codes and message contents.

3. Purposes and legal bases

We use account, licence, contact and support data to perform a contract or take steps at your request before entering into one. Billing and tax administration also serve legal obligations.

Securing the website, preventing fraud and abuse, investigating incidents and managing access rely on our legitimate interest in safe, reliable services. We limit data to what is needed and consider your interests. You may object to processing based on this ground.

We persist language and theme preferences only after your choice in the cookie notice. You can withdraw that choice at any time. Creating an account is not consent to advertising or newsletters; registration is not a marketing opt-in.

4. Form security and antispam

When enabled, Cloudflare Turnstile protects forms against automated abuse. Cloudflare processes technical browser, device and network data and security signals under its Turnstile privacy notice. The hidden honeypot only checks whether a bot filled a hidden form field.

When StopForumSpam is enabled, we check the public visitor IP and, if that option is enabled, the submitted email address with this service. When Project Honey Pot is enabled, we query the reputation of a public IPv4 address through http:BL. These integrations submit no new spam reports and send no passwords or message content.

A security check may automatically reject a form. This is not a final judgment about you. If you believe a block is incorrect, email info@fomixmedia.nl for human review. We do not use these checks for decisions with legal or similarly significant effects.

5. Recipients

Access is limited to staff and suppliers who need data for their task. These include hosting/database providers, email services, file storage and backup services, Mollie for payments and the security services described above where used. Where a supplier acts as our processor, we arrange safeguards for security, confidentiality and processing.

We do not sell your personal data. Data may be shared with advisers or competent authorities where necessary for a legal obligation, dispute or protection of rights. Recipients determining their own purposes, such as a payment provider, may be independent controllers for their processing.

6. Processing outside the EEA

Some suppliers may process data outside the European Economic Area. Such transfers require appropriate safeguards, such as a valid adequacy decision or European Commission standard contractual clauses, with additional measures where necessary. Contact us for information about the supplier, destination and applicable safeguards.

7. Retention

We retain account and licence data as needed for your account, licence rights, contractual performance and potential disputes. After termination we assess what can be erased and what remains necessary. Contact and support retention depends on resolving your question, the support relationship and potential claims; we retain no more data or for longer than needed for those purposes.

Core financial records, such as invoices, are generally retained for seven years under tax retention obligations; some records may have a different statutory period. Activity logs currently have a retention period of 90 days and are cleaned in batches during website activity.

A login challenge is valid for five minutes, a password reset link for sixty minutes, and temporary security codes for their own short validity period. Expired temporary records are cleaned during use. Backups may contain data until the relevant backup is replaced; retention obligations or necessary investigations may temporarily restrict erasure.

8. Security

Measures include role/ownership access controls, secured password hashes, encryption of sensitive settings, two-factor authentication and limits on repeated requests. Use a unique password, do not share your account and report security problems promptly. We handle breaches in accordance with applicable notification obligations.

9. Your rights

You may request access, correction, erasure, restriction or portability as provided by the GDPR. You may also object to processing based on legitimate interests and withdraw consent. Withdrawal does not affect the lawfulness of earlier processing. Legal retention obligations may require us to keep certain data.

Email your request to info@fomixmedia.nl, preferably from your account address. We may ask for additional information to verify your identity securely; do not send an unsolicited full copy of your identity document. We generally respond within one month. If a legally permitted extension is needed, we inform you of the reason and timing.

10. Questions and complaints

Contact us with complaints so we can investigate. You also have the right to complain to the Dutch Autoriteit Persoonsgegevens or the competent supervisory authority where you live, work or where the alleged infringement occurred.

11. Scope and changes

This policy covers the website and our account/services operations. Separate desktop products or external services you operate may be subject to additional agreements or product notices. Linked websites have their own policies. Relevant changes update the version date and are communicated where required; new consent purposes require a new choice.