privacy - Tritik

Privacy Policy

Last updated: 24 August 2026

This Privacy Policy explains how Tritik collects, uses, shares and protects personal data when you visit www.tritik.com (the “Website”), contact us, subscribe to our newsletter, obtain an educational discount, purchase or use a Tritik software product, or use related licence and update services.

Use of the Website and Products is also subject to the Tritik Terms of Use and End User Licence Agreement and the Cookie Policy.

1. Who is responsible for your data?

For the processing described in this policy, the data controller is:

Tritik — Charles Gondre
SIREN 804 538 288
route de Correo
05400 La Roche-des-Arnauds
France

Privacy enquiries and requests to exercise your rights should be sent to tritik@tritik.com.

2. Scope and roles

This policy covers processing controlled by Tritik. It does not replace the notices of third parties that independently determine how they process data.

Moonbase AS is Tritik’s authorised reseller and merchant of record. Moonbase is an independent controller for checkout, payment, tax, invoicing, customer-account and initial Product-delivery processing. Moonbase also provides licence-management and customer-portal services. Its processing is described in the Moonbase Privacy Policy. Tritik receives or can access the order and licence information needed to provide the Product, maintain the licence, support customers and meet legal obligations.

3. How we obtain personal data

We obtain personal data:

directly from you when you contact us, subscribe to the newsletter or submit educational-discount information;
from Moonbase when you place an order, create or use a customer account, download a Product or activate a licence;
automatically from browsers and devices when you use the Website, subject to your cookie choices; and
automatically from a Tritik Product when it performs an enabled update check.

You are not required to provide personal data merely to read most public pages. Some data is required to complete a purchase, deliver or validate a licence, respond to a request, provide an educational discount or send a newsletter. If required data is not provided, the relevant service may not be available.

4. Purchases, customer accounts and licences

Data processed. Depending on the order and your location, Moonbase may provide or make available your name, email address, billing address and country, company and VAT or tax details, purchased Product, price, currency, tax, order and invoice information, download history, licence identifier and status, activation information and activation IP address. Tritik does not receive or store full payment-card details.

Purposes. Tritik uses this information to deliver and maintain your Product licence, confirm entitlement, provide downloads and support, communicate about the order or Product, investigate licence misuse, manage disputes and refunds, maintain business records and comply with accounting, tax and other legal requirements.

Legal bases. Processing is necessary to perform the licence agreement and provide requested support; necessary to comply with legal obligations; and, for service security, dispute handling and prevention of licence abuse, necessary for Tritik’s legitimate interests in protecting its Products and business.

Recipients. Relevant information is available to Tritik, Moonbase and service providers that host or maintain the licence, support and business systems. Moonbase separately shares information with its own payment, tax, fraud-prevention and infrastructure providers under its privacy policy.

Retention. A minimal entitlement record—such as the licence identifier, associated invoice or order reference, Product, licence status and assigned user—is kept for the life of the licence so that Tritik can recognise and support it. Other contractual records are normally kept for the contractual relationship and up to five years after it ends where needed to establish, exercise or defend legal claims. Invoices, accounting records and supporting transaction documents are kept for ten years as required by applicable French rules. Moonbase applies its own retention periods to data it controls.

5. Product update checks and compatibility information

Tritik Products may occasionally connect to Tritik’s servers to determine whether an update is available.

Data processed. An update request may contain the connecting IP address, Product name and version, operating system and host application or DAW. The update check does not transmit audio, presets, filenames, project content or the contents of your work.

Purposes. Tritik uses this information to operate and secure the update service, identify the relevant Product and licence, provide appropriate update information, understand adoption of Product versions and produce compatibility statistics for supported operating systems and host applications.

Legal basis. This processing is based on Tritik’s legitimate interests in maintaining and securing its Products, informing users about available updates and understanding compatibility needs. Tritik has balanced those interests against the limited nature and frequency of the data collection. You may object by disabling automatic update checks in the Product; a manual “Check for Updates” action remains available.

Recipients. Raw requests are processed by Tritik and its Website or server-hosting providers. They are not sold or used for advertising.

Retention. Identifiable raw update-check records are retained for no more than 90 days. They are then deleted or irreversibly aggregated so that the resulting statistics no longer identify a person, licence or invoice.

6. Contact and product support

Data processed. When you contact Tritik, we process the name, email address, subject and message you provide. A support request may also include order or licence details, Product version, operating system, DAW, diagnostic information and any files or screenshots you choose to send.

Purposes and legal bases. We use the data to respond, diagnose problems, provide licence and Product support, maintain the security and reliability of Products, and keep a record of the resolution. Processing is necessary to perform the licence agreement or take steps at your request and is also based on our legitimate interest in operating an effective support service and improving Products.

Recipients. Messages are available to Tritik and the providers used to host the Website and email or support systems. Google processes anti-abuse information when reCAPTCHA is enabled for the contact form, as described below.

Retention. Contact and support records are normally kept for three years after the request is closed or our last substantive interaction. A record may be retained longer where reasonably necessary for an ongoing dispute, a legal obligation or the establishment, exercise or defence of legal claims.

7. Educational discounts

Data processed. To assess eligibility for an educational discount, Tritik may process your name, email address, requested Product and a current student or faculty ID image. The image may show information such as your photograph, institution, status and validity date. You should conceal information that is not needed to demonstrate current student or faculty status.

Purposes and legal bases. We use the information only to verify eligibility, issue and protect a personal discount code and prevent repeated or fraudulent use. Processing is necessary to take steps at your request before granting the discounted purchase and is based on Tritik’s legitimate interest in administering the discount fairly.

Recipients. The information is reviewed by Tritik and may pass through Tritik’s email and hosting providers. It is not provided to Moonbase until you use the resulting discount code at checkout; the ID image itself is not sent to Moonbase by Tritik.

Retention. The ID image is deleted within 30 days after verification. A minimal record of the verification decision, date, email address and issued discount code may be kept for three years to administer the programme and prevent abuse.

Data processed. If you subscribe, Tritik and Mailchimp process your email address, optional name, subscription date, consent and unsubscribe status. If you consent to newsletter engagement measurement, Mailchimp may also record delivery, opening and link-click information, together with related technical data such as time, IP address, browser or device information.

Purposes and legal basis. The data is used to manage subscriptions, send Tritik news, Product information and offers, measure newsletter engagement and improve communications. The legal basis is your consent. You can withdraw it at any time by using the unsubscribe or preference link in an email or by contacting Tritik. Withdrawal does not affect processing that occurred before withdrawal.

Recipient. Mailchimp, a service of Intuit Inc., processes the mailing list and campaign data on Tritik’s behalf. See the Mailchimp Privacy Statement.

Retention. Subscription data is kept until you unsubscribe or for no more than three years after your last interaction with Tritik, whichever occurs first. Limited evidence of consent, withdrawal and suppression status may be kept for as long as reasonably necessary to demonstrate compliance and ensure that an opt-out continues to be respected.

9. Website hosting, logs and security

Data processed. When you request a page or file, our servers may record IP address, date and time, requested URL, response status, referrer, browser and device information and security events.

Purposes and legal basis. These logs are used to deliver the Website, diagnose errors, maintain availability, detect attacks and misuse and protect the Website and its users. Processing is based on Tritik’s legitimate interests in operating a reliable and secure service.

Recipients. Tritik’s Website and content are hosted using InMotion Hosting and related technical providers. See the InMotion Hosting Privacy Policy. Information may also be available to technical contractors only where needed to maintain or secure the service.

Retention. Security and server logs controlled by Tritik are retained for no more than twelve months, unless a specific event requires longer retention for investigation or legal claims.

10. Analytics

Data processed. If you consent to analytics, Google Analytics 4 and Google Tag Manager may process online identifiers, IP-derived location, device and browser information, referring pages, pages viewed, interactions, dates and times. Tritik does not use this data to make decisions producing legal or similarly significant effects about you.

Purposes and legal basis. Analytics helps Tritik measure Website use, diagnose navigation and performance issues and improve content. The legal basis is your consent. Analytics tags must not load until you consent, and you may withdraw consent at any time through Cookie Settings.

Recipient and retention. Google processes analytics data for Tritik. See the Google Privacy Policy. Identifiable GA4 analytics data available to Tritik is retained for no more than fourteen months. Aggregate reports that no longer identify visitors may be kept longer.

11. Google reCAPTCHA

Data processed. When you consent to and use a form protected by Google reCAPTCHA, Google may process IP address, browser and device data, referring URL, date and time, mouse or keyboard interactions and other information needed to distinguish legitimate users from automated abuse.

Purposes and legal bases. Tritik uses reCAPTCHA to prevent spam, fraud and automated attacks. Loading Google’s optional technology is based on your consent; Tritik’s use of the resulting assessment to secure the form is also supported by its legitimate interest in preventing abuse.

Recipient and retention. Google is the recipient of reCAPTCHA data and applies its own retention practices under the Google Privacy Policy and Google Terms of Service. Tritik retains its own related form-security logs for no more than twelve months unless an incident requires further investigation.

12. YouTube embeds

Data processed and purpose. Product and information pages may contain videos hosted by YouTube. If you consent to an embed and play or load it, YouTube may receive your IP address, device and browser data, page URL, playback activity and identifiers or account information if you are signed in to YouTube. The purpose is to display the requested video.

Legal basis. The embed loads only with your consent, which you may withdraw through Cookie Settings.

Recipient and retention. YouTube is a Google service and processes data under the Google Privacy Policy. Google determines the retention of data it independently controls. Tritik does not receive your Google account credentials or control those retention periods.

13. Cookies and similar technologies

The Website uses strictly necessary storage and, with your consent, optional analytics and third-party technologies. Details, purposes, providers and durations are provided in the Cookie Policy. You can accept, reject or change optional choices at any time through Cookie Settings.

The Product update request described in Section 5 is a direct Product-to-server communication and is not a Website cookie.

14. Recipients and disclosures

Tritik does not sell personal data. We disclose only the information reasonably necessary to:

the providers identified in this policy;
professional advisers, insurers, auditors or authorities where necessary to meet legal obligations or establish, exercise or defend legal claims;
a successor in connection with a genuine reorganisation, sale or transfer of Tritik’s business, subject to appropriate confidentiality and data-protection safeguards; or
another recipient where you request or consent to the disclosure.

Providers acting on Tritik’s instructions may use data only to provide their contracted services, subject to applicable data-protection terms.

15. International transfers

Tritik is located in France. Moonbase states that its principal data storage is in Ireland and that Moonbase LLC processes data needed for payments made in the United States. Other providers, including InMotion Hosting, Google, Intuit/Mailchimp and their sub-processors, may process data outside France or the European Economic Area.

Where a transfer is not covered by an adequacy decision, it must be made under another lawful transfer mechanism, such as European Commission Standard Contractual Clauses, with supplementary safeguards where required. The providers’ linked notices contain further information about their locations and the mechanisms applicable to their processing.

16. Security

Tritik applies reasonable technical and organisational measures appropriate to the nature and risk of the processing. Measures include encrypted transmission, access controls, minimisation, limited retention and use of service providers with security commitments. No Internet transmission or storage system is completely secure, so absolute security cannot be guaranteed.

Please contact us promptly if you believe that a Tritik account, licence or communication has been compromised.

17. Automated decision-making

Tritik does not use personal data to make solely automated decisions that produce legal or similarly significant effects about you. Moonbase and other independent providers describe any automated fraud-prevention or account decisions for which they are responsible in their own notices.

18. Your data-protection rights

Subject to the conditions and exceptions in applicable law, you may:

request access to and a copy of your personal data;
request correction of inaccurate or incomplete data;
request deletion of data;
request restriction of processing;
object to processing based on legitimate interests, including update-check processing;
receive data you provided in a structured, commonly used and machine-readable format and request portability where applicable; and
withdraw consent at any time for future processing.

Send requests to tritik@tritik.com. We may need to verify your identity and clarify your request. We normally respond within one month, subject to extensions permitted by law.

You may lodge a complaint with the French data-protection authority, the Commission Nationale de l’Informatique et des Libertés (CNIL), through www.cnil.fr, or with the competent authority where you live or work.

Moonbase is responsible for requests concerning processing it controls. Its privacy contact is stated in the Moonbase Privacy Policy.

19. Children

The Website and Products are not directed to children, and persons under 18 may not purchase Products or submit personal data to Tritik. If you believe a child has provided personal data, contact us so that we can investigate and delete it where appropriate.

21. Changes to this policy

We may update this policy to reflect changes in law, our Products, processing or service providers. The updated policy will be posted on this page with a revised “Last updated” date. Where a change materially affects processing based on consent, we will request new consent where required.

22. Contact

For questions, objections or rights requests, contact:

Tritik — Charles Gondre
route de Correo
05400 La Roche-des-Arnauds
France
tritik@tritik.com