The short version
- We collect only what we need to run the Service: your email, the files you upload, job and purchase records, and basic technical logs.
- Your audio is processed on our own server, never used to train models, and deleted after 7 days.
- Payments are handled by Whop; we never see full card numbers.
- No analytics or advertising trackers. One sign-in cookie only.
- We do not sell or share personal data. You can access, export, correct or delete your data at any time.
This summary is for convenience. The full text below is what applies.
1. Who is responsible for your data
ZEN CHAN LLC, a New Mexico limited liability company (business ID 0008136362) ("we", "us") is the data controller for personal data processed through LufsReady (lufsready.com). Contact us about privacy at contact@lufsready.com or by post:
8206 Louisiana Blvd NE, Ste A #11004
Albuquerque, NM 87113
United States
This policy explains what we collect, why, who we share it with, how long we keep it and the rights you have, including under the EU and UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act as amended by the CPRA (CCPA).
2. Data we collect
| Category | Examples | Source |
|---|---|---|
| Account data | Email address, password hash (never the password itself), email confirmation status, account creation and sign-in times | You |
| Audio content | Files you upload, the mastered files we produce, waveform images and measurement reports | You / generated by the Service |
| Usage data | Jobs you run (file name, duration, preset, settings, status), minute balance and ledger entries, API key names and last-use times | Generated by the Service |
| Purchase data | Order ID, pack, amount, currency, date, the email used at checkout, refund or dispute status. We do not receive full card numbers. | Whop |
| Communications | Messages you send through the contact form or by email, and our replies | You |
| Technical data | IP address, browser user agent, request logs, session cookie | Your device |
Free browser tools (such as the LUFS meter and ACX check) analyze files locally in your browser. Those files are not uploaded to us and we collect nothing about their contents.
We do not knowingly collect special categories of personal data. Voice recordings can identify a person; we process them only to provide the mastering you request.
3. How we use data and our legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Creating and securing your account, processing and delivering your files, keeping your minute balance, responding to support requests | Performance of our contract with you (Art. 6(1)(b)) |
| Processing payments, issuing refunds, keeping accounting and tax records | Contract (Art. 6(1)(b)) and legal obligation (Art. 6(1)(c)) |
| Sending transactional emails (confirmations, password resets, receipts of minutes, job notifications you request) | Contract (Art. 6(1)(b)) |
| Preventing fraud and abuse, rate limiting, protecting the Service, enforcing our terms | Legitimate interests in running a secure service (Art. 6(1)(f)) |
| Improving reliability using aggregated, non-content operational data (for example, error rates and processing times) | Legitimate interests (Art. 6(1)(f)) |
We do not use your audio to train machine-learning models, we do not sell personal data, we do not share it for cross-context behavioral advertising, and we do not use automated decision-making that produces legal or similarly significant effects. We do not send marketing emails.
4. Cookies and local storage
We use one strictly necessary cookie to keep you signed in (HttpOnly, Secure, valid up to 30 days). Your light/dark theme choice is saved in your browser's local storage. We do not use analytics cookies, advertising cookies or third-party trackers, so we do not show a cookie consent banner. On the checkout page, Whop may set cookies needed to process the payment securely; see Whop's privacy policy.
5. Who we share data with
We share personal data only with the service providers below, which process it on our behalf under contracts that require confidentiality and appropriate security, and only for the purposes described:
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Hostinger International Ltd. | Application hosting, audio processing and storage, database and backups | All data described in this policy, including uploaded audio while it is retained | European Union (France) |
| Cloudflare, Inc. | DNS for our domain, network security, and routing of email sent to our addresses | IP address and technical request data; the content of emails you send to us | United States (global network) |
| Resend, Inc. | Delivery of transactional email (account confirmation, password resets, receipts of minutes, support replies) | Email address, email content | United States |
| Whop, Inc. | Payment processing: checkout, card processing, fraud prevention and receipts | Email address, payment card details (entered directly with Whop; we never see full card numbers), billing country, purchase amount | United States |
We may also disclose data if required by law or valid legal process, to protect the rights, safety or property of our users or the public, or as part of a merger or sale of the business, in which case this policy continues to apply to your data.
6. International transfers
ZEN CHAN LLC is based in the United States, and our providers operate in the locations listed above. When personal data from the European Economic Area, the United Kingdom or Switzerland is transferred to a country without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum) or the provider's certification under the EU-U.S. Data Privacy Framework where available.
7. How long we keep data
| Data | Retention |
|---|---|
| Uploaded audio, mastered files and waveform images | 7 days after upload, or sooner if you delete them |
| Job records and measurement reports (no audio) | 90 days |
| Account data and minute ledger | While your account is open; removed within 30 days after you close it |
| Orders, refunds and related records | 7 years, to meet tax and accounting obligations |
| Contact-form messages and support emails | 12 months |
| Server logs (IP address, user agent) | Up to 30 days |
| Backups | Overwritten on a rolling basis within 30 days |
8. Security
We use HTTPS for all traffic, hash passwords with scrypt, store only hashes of session tokens and API keys, restrict access to files to their owner, and delete audio on a short schedule. No system is perfectly secure; if a breach affects your personal data we will notify you and the relevant authorities as the law requires. More detail is on our security page.
9. Your rights
Everyone can ask us to access, correct, export or delete their personal data, and can delete files and close the account directly from the dashboard.
EEA, UK and Swiss residents also have the right to restrict or object to processing based on legitimate interests, the right to data portability, and the right to lodge a complaint with their local data protection authority.
California residents have the right to know what personal information we collect, use and disclose; to delete it; to correct it; and to opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined in the CCPA, and we do not use sensitive personal information for purposes that require a right to limit. We will not discriminate against you for exercising your rights. You may use an authorized agent; we may ask the agent for proof of authorization and verify your identity.
How to exercise your rights: email contact@lufsready.com from the address on your account (or tell us how to verify you). We respond within one month (GDPR) or 45 days (CCPA), and may extend as the law allows. We honor Global Privacy Control signals, although we do not engage in the activities they opt you out of.
10. Children
The Service is not directed to children under 16 and requires users to be adults. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.
11. Changes to this policy
We will post any changes on this page and update the date above. If changes are material, we will notify account holders by email before they take effect.
12. Contact
ZEN CHAN LLC, 8206 Louisiana Blvd NE, Ste A #11004, Albuquerque, NM 87113, United States. Email: contact@lufsready.com.
Contact ZEN CHAN LLC
| Company | ZEN CHAN LLC, a New Mexico limited liability company |
|---|---|
| New Mexico business ID | 0008136362 |
| Service | LufsReady, lufsready.com |
| contact@lufsready.com | |
| Phone | +1 (719) 512-8733 |
| Mailing address | 8206 Louisiana Blvd NE, Ste A #11004 Albuquerque, NM 87113 United States |
| Response time | Within one business day (Monday to Friday) |