Privacy Policy

Last updated: September 28, 2026

Who we are

tomatovox records ("we", "us") operates this website and sells the "Simple Bass & Chords — 50 Songs MIDI Pack" digital product. This page explains what personal data we collect when you use this site, why we collect it, and what rights you have over it. For any privacy question, contact us at tomatovox.support@gmail.com.

What we collect

We collect only the personal data needed to deliver your purchase and to answer your support requests. Through the Support form, you choose to submit:

• Your name — so we know who we're speaking with.
• Your email address — to reply to your request and, if needed, resend your MIDI file.
• Purchase ID (optional) and your DAW's name — to help us diagnose drag-and-drop or delivery issues.
• The message you write in the form.

When you buy, we receive from Paddle only what we need to deliver your download:

• Your purchase ID (transaction ID) and purchase status — to confirm your payment and issue your download link.

We do not use analytics or advertising trackers on this website, and simply browsing this site does not send us any personal data. However, the video embedded on our Home page is provided by YouTube (Google), which may set its own cookies under its own privacy policy. The Purchase page loads Paddle's checkout script (Paddle.js), which may use its own cookies to run the checkout, under Paddle's privacy notice.

How we use it

We use your purchase ID solely to confirm your purchase and issue your download link. We use the information you submit through the Support form solely to respond to your support request — for example, to resend a MIDI file, check a drag-and-drop issue, or process a refund. We never send marketing emails. We do not sell, rent, or share your personal data with third parties for marketing purposes, and we do not use it for anything beyond delivering your purchase and answering your request.

Who processes it

Your Support form submission is delivered to us using FormSubmit.co, a third-party form-processing service that forwards submissions to our support inbox by email. FormSubmit.co acts as a data processor for this purpose. We recommend reviewing FormSubmit's own privacy policy for details on how it handles data in transit.

Purchases are processed by Paddle.com, which acts as the Merchant of Record and handles payment-related personal data as an independent data controller under its own privacy notice.

To deliver your download, your purchase ID is checked with Paddle by our download server, which runs on Cloudflare. Cloudflare acts as a data processor for this purpose only.

How long we keep it

We keep support request data only for as long as needed to resolve your request and keep a reasonable record in case follow-up is needed (for example, if the same issue resurfaces). We don't keep it indefinitely, and we don't build marketing lists from it.

Your rights (GDPR & beyond)

If you're located in the European Union, United Kingdom, or another region with similar data protection laws, you have the right to:

• Ask what personal data we hold about you, and get a copy of it (access).
• Ask us to correct inaccurate data (rectification).
• Ask us to delete data we no longer need to keep (erasure).
• Object to, or ask us to restrict, how we use your data.
• Lodge a complaint with your local data protection authority if you feel we've mishandled your data.

To exercise any of these rights, email us at tomatovox.support@gmail.com. We'll do our best to respond within a reasonable time, though please allow for delays due to time zone differences.

Changes to this policy

If this policy changes, we'll update this page and revise the "Last updated" date at the top.