Privacy Policy

Last updated: 18 October 2026

This Privacy Policy explains how Foryou AB processes
personal data in connection with the Kardango website, trial, purchases,
licenses, downloads, training, customer support and related
services.

Foryou AB is the controller for the processing described in this
policy unless another organisation is identified as independently
responsible for a particular service.

Company registration number: 556254-5300
Registered address: Sankt Mickelsgatan 188, 129 44 Hägersten,
Sweden
Privacy contact: support@kardango.com

1. Personal data we process

Depending on how you interact with Kardango, we may process:

• Identity and contact data: name, email address,
  company name, billing address and country;
• Transaction and subscription data: product, price,
  currency, payment status, invoice number, renewal date, cancellation
  status and customer-portal activity;
• Tax information: customer type, country and VAT or
  other tax-registration number;
• Trial and license data: trial start and end dates,
  license status, entitlement and download history;
• Technical data: IP address, browser, operating
  system, device type, timestamps and diagnostic or security logs;
• Training data: videos viewed and engagement
  information supplied through our video-hosting provider;
• Support data: messages, attachments and
  troubleshooting information you send to us; and
• Cookie and preference data: consent choices and
  information collected through cookies or similar technologies.

We do not receive or store your full payment-card number. Payment
information is handled by Stripe and its Link service.

At launch, Kardango does not use central device activation and does
not send hardware identifiers, installation IDs, REAPER versions or
activation telemetry to Foryou. The two-computer limit is a contractual
license condition. License information needed by the installed product
is stored locally on the user’s computer. If central activation or
additional telemetry is introduced later, this policy will be updated
before that processing begins.

2. How and why we use personal
data

We process personal data to:

• provide and administer trials, licenses, downloads, training and
  support;
• create and manage customer and subscription records;
• process payments, invoices, taxes, renewals, cancellations and
  refunds;
• authenticate access and prevent fraud, abuse and unauthorised
  sharing;
• diagnose errors, maintain security and improve compatibility;
• understand how setup and training materials are used and improve
  them;
• communicate service information, updates and legally required
  renewal notices;
• respond to questions, complaints and rights requests; and
• comply with accounting, tax, consumer-protection and other legal
  obligations.

We do not sell personal data.

3. Legal bases

We rely on the following legal bases under the GDPR:

• Performance of a contract: to provide a trial or
  paid Kardango license, downloads, training, billing and support;
• Legal obligation: for accounting, tax,
  fraud-prevention and consumer-law records and responses;
• Legitimate interests: to secure the Service,
  prevent misuse, improve setup and training, maintain business records
  and communicate relevant service information, balanced against your
  rights; and
• Consent: for non-essential cookies, optional
  analytics or marketing where consent is required. You may withdraw
  consent at any time without affecting earlier lawful processing.

4. Payments and Stripe

Checkout, payment, invoicing, subscription management and the
customer portal are provided through Stripe and may use Stripe’s Link
service. Stripe receives information such as your contact details,
billing address, tax information, payment method and transaction
data.

Stripe may process some data as our service provider and some data
for its own regulatory, security and payment-network purposes. Stripe’s
own privacy notices apply to processing for which Stripe is
independently responsible.

5. Video training and Wistia

We use Wistia to host setup and training videos. When you view a
video, Wistia may process technical identifiers, IP address, device and
browser information, viewing progress and engagement events. We use this
information to provide the training, troubleshoot access and improve the
clarity and usefulness of the material.

Where required, non-essential Wistia analytics will not be activated
until you have made the relevant cookie choice.

6. Other recipients and
service providers

We may share necessary personal data with providers that support
Kardango, including:

• payment, billing, tax and fraud-prevention providers, including
  Stripe and Link;
• video hosting and analytics providers, including Wistia;
• website, file-download and infrastructure hosting providers;
• email and customer-support providers;
• professional advisers, accountants and auditors; and
• authorities or other recipients where disclosure is required by law
  or necessary to establish, exercise or defend legal claims.

Providers acting on our behalf may process data only for agreed
purposes and under appropriate contractual safeguards.

7. International transfers

Some providers may process personal data outside the EU/EEA. Where
this occurs, we use an applicable legal transfer mechanism, such as an
adequacy decision, the EU–U.S. Data Privacy Framework for participating
organisations, or the European Commission’s Standard Contractual Clauses
together with supplementary safeguards where required.

You may contact us for more information about the safeguards relevant
to your data.

8. Retention

We retain personal data only for as long as necessary for the
relevant purpose:

• customer and subscription records are retained while the
  relationship is active and for two years after the latest subscription
  or customer activity, unless a longer period is needed for a legal
  claim;
• support requests and related correspondence are normally retained
  for three years after the support case is closed;
• invoice, transaction and accounting records are generally retained
  through the seventh year after the end of the relevant financial year,
  as required by Swedish accounting rules;
• trial, entitlement and download records are normally retained for
  two years after the latest activity to operate the Service and prevent
  repeated trial abuse;
• website security and diagnostic logs are normally retained for no
  more than 12 months;
• Wistia training and engagement analytics are normally retained for
  no more than 24 months;
• marketing data is retained until you unsubscribe or withdraw
  consent, unless another legal basis applies; and
• cookie-consent choices are normally retained for 12 months.
  Individual cookie durations are shown in the website’s cookie
  settings.

When data is no longer required, we delete or anonymise it.

9. Cookies and similar
technologies

The Kardango website may use:

• necessary technologies for security, checkout,
  subscription management and user choices;
• functional technologies for video playback and site
  features; and
• analytics technologies to understand website and
  training usage.

Where consent is required, optional technologies are disabled until
you choose to allow them. You can change your choices through the
website’s cookie settings.

A separate Cookie Policy or cookie-settings panel will identify the
technologies actually used, their providers, purposes and durations.

10. Your rights

Subject to applicable law, you may have the right to:

• obtain information about and access your personal data;
• correct inaccurate or incomplete data;
• request deletion;
• request restriction of processing;
• object to processing based on legitimate interests;
• receive certain data in a portable format;
• withdraw consent at any time; and
• complain to a data-protection authority.

In Sweden, the supervisory authority is
Integritetsskyddsmyndigheten (IMY). You may contact us
first so that we can address your request or concern.

We may need to verify your identity before completing a rights
request.

11. Security

We use reasonable technical and organisational measures designed to
protect personal data against accidental or unlawful loss, alteration,
disclosure or access. No online system can be guaranteed completely
secure, so you should also protect your email account, devices and
customer-portal access.

12. Children

Kardango is a professional audio-production tool and is not directed
to children. We do not knowingly collect personal data from children in
circumstances where parental consent is legally required. If you believe
a child has provided personal data improperly, please contact us.

13. Changes to this policy

We may update this Privacy Policy when our Service, providers or
legal obligations change. The current version will be published on the
Kardango website with its effective date. We will provide additional
notice of material changes where appropriate.

14. Contact

For privacy questions or to exercise your rights, contact:

Foryou AB
Company registration number: 556254-5300
Address: Sankt Mickelsgatan 188, 129 44 Hägersten,
Sweden
Email: support@kardango.com