Privacy Policy
Last updated: 10 October 2026. Automation Station is the internal marketing platform Korneff Audio uses to run its email marketing, social media, customer analytics and market research. This policy explains what personal data it processes, where that data comes from, why we use it, who it is shared with, and the choices and rights you have.
Controller: Korneff Audio, New York, USA. Privacy questions and requests: support@korneffaudio.com.
1. Who uses Automation Station
Automation Station is not a public service. Only authorized Korneff Audio staff have accounts. If you are a customer, a subscriber, or someone who interacts with our Facebook Page or Instagram account, you don't use the app directly, but it may hold data about you as described below.
2. Data we process
Staff accounts. Name, email address, role, a one-way hash of the password (bcrypt), and sign-in activity.
Customers and subscribers. Synced from our online store (WordPress/WooCommerce) and email list (FluentCRM):
- name, email address, and the address and order details you gave when you bought from us;
- products and licenses you purchased, and your subscription and list membership;
- email engagement (opens, clicks, bounces, complaints and unsubscribes) for messages we send;
- notes and tags our staff add, for example after a support conversation.
Business data from Facebook and Instagram. When a staff member connects our Facebook Page, Instagram business account or ad account through Facebook Login or Instagram Login, we receive and store:
- that staff member's app-scoped Facebook or Instagram user ID and name, and the access token Meta issues;
- the Pages, Instagram accounts and ad accounts they gave us access to, and the permissions granted;
- ad campaign, ad performance and post performance metrics, and aggregated audience insights (no individual users);
- comments on our own posts (commenter name, username, profile picture and the comment text), so our team can read and reply to them;
- messages people send to our Facebook Page, Instagram account or WhatsApp business number, plus the page-scoped ID and the public profile name and picture Meta provides, so we can answer them and run automated replies.
Website analytics. Events from our website (for example page views, add-to-cart and purchase), sent to the Meta Pixel and Conversions API, may include IP address, browser user agent and, for purchases, hashed contact details as Meta requires. Google Analytics and Search Console data is aggregated.
Public market research. We monitor public discussions about audio software on forums and social sites (for example Reddit, Gearspace and KVR Audio). This includes the public username, post text and link. We also track competitors' public marketing (websites, public social posts, public ads and newsletters they send us). This is business information and is not used to profile individuals.
3. How we use it
- To send the newsletters and order-related emails you signed up for, and to honor unsubscribes.
- To answer comments and messages sent to our Page and Instagram account.
- To measure and improve our marketing and advertising, and to plan product releases.
- To provide customer support and manage licenses.
- To keep the platform secure and comply with legal obligations.
We do not sell personal data, and we do not use data from Facebook or Instagram for any purpose other than operating our own Page, Instagram account and ads as described here.
4. Service providers
Data is processed for us by providers that act on our instructions:
- Meta Platforms (Facebook, Instagram, WhatsApp, Pixel and Conversions API);
- Amazon Web Services (email delivery through SES, and file storage on S3);
- Google (Analytics, Search Console, Ads);
- Anthropic (AI text analysis and drafting) and our own self-hosted AI model;
- our WordPress/WooCommerce store host, and a self-hosted Nextcloud file server.
Automation Station itself runs on servers we operate.
5. Retention
We keep personal data only as long as we need it for the purposes above:
- Customer and subscriber records: while you are a customer or subscriber, or until you ask us to delete them.
- Unsubscribes and suppressions: kept so we never email you again, even after other data is deleted.
- Messages, comments and website analytics events: for as long as they are useful for support and measuring our marketing, or until you ask us to delete them.
- Facebook and Instagram access tokens: until the account is disconnected, the token expires, or you remove the app.
6. Your rights and choices
You can ask to access, correct, export or delete your personal data, or object to our use of it, by emailing support@korneffaudio.com. Every marketing email has an unsubscribe link. Depending on where you live (for example the EU/UK under the GDPR, or California under the CCPA/CPRA), you may have additional rights, including the right to complain to your data protection authority.
To delete data we received through Facebook or Instagram, see Data deletion.
7. Security
Access is limited to authorized staff with role-based permissions. Passwords are hashed, connections are encrypted in transit (HTTPS), and access tokens are never shown back in the interface.
8. Children
Our products and this platform are not directed to children under 13, and we do not knowingly collect their data.
9. International transfers
We are based in the United States. If you are elsewhere, your data is transferred to and processed in the US. Where the law requires, we rely on appropriate safeguards such as Standard Contractual Clauses.
10. Changes
We will update this page when our practices change, and revise the date at the top.
11. Contact
Korneff Audio: support@korneffaudio.com