Privacy Policy

DMXpressions™ is a professional, browser-based DMX lighting console operated by Theatrically Jerry LLC ("we", "us", "our"). Questions? Email theatricallyjerry@dmxpressions.com.

We collect only what is necessary to operate the service:

• Your email address and encrypted password (stored by Supabase).
• Your license tier and license-key redemption records (key used, date redeemed).
• Show data and console configuration you choose to save to the cloud.
• Basic account metadata (such as your last sign-in timestamp).

We do not sell your data, serve third-party advertising, or build advertising profiles.

DMXpressions™ is an offline-capable Progressive Web App. The following stay on your device and are not transmitted to us unless you explicitly save a show to the cloud:

• Your shows, patch, scenes, cues, effects, and preferences (browser local storage / IndexedDB).
• The application code and assets cached by the service worker for offline use.
• Session and UI state (for example, your Show Lock setting and last-opened page).

You can clear this at any time via your browser's site-data controls.

To function as a lighting console, DMXpressions™ may request access to certain device capabilities. These are used only while you actively use the related feature, are processed locally in your browser, and are never recorded or transmitted to us:

• Microphone — used by the AudioLens and beat/BPM detection to react to live sound. Audio is analyzed in real time and never stored or uploaded.
• MIDI devices (Web MIDI) — used to map MIDI controllers and surfaces to console functions.
• USB / serial devices (WebUSB / Web Serial) — used for direct USB-DMX output to supported interfaces on compatible desktop browsers.
• Local network — used by the optional output bridge to send DMX output (up to 128 universes of input and output) on your own network.

You may decline or revoke any of these permissions in your browser at any time; the rest of the console will continue to work.

We rely on the following third-party services. Their privacy policies govern how they handle your data:

• Supabase — provides our database, authentication, and cloud storage infrastructure. Your email, password hash, and any cloud-saved show data are stored on Supabase servers. See supabase.com/privacy.
• Stripe — processes all license purchase payments. We do not receive, store, or have access to your payment card or bank details. See stripe.com/privacy.
• Hosting platform — the platform on which this application is hosted and deployed serves the app and processes basic request logs (such as IP address) as part of normal web hosting.

• To authenticate you and maintain your session.
• To store and sync your show data across devices when you opt in to cloud save.
• To validate your license tier and unlock the corresponding features (DMX output, universe limits, StageCraft3D).
• To respond to support requests you initiate by email.

Your account data is retained for as long as your account exists. You may request deletion of your account and all associated cloud data by emailing theatricallyjerry@dmxpressions.com. We will process deletion requests within 30 days. Data held only on your device is removed when you clear your browser site data.

Authentication and data storage are handled by Supabase, which uses industry-standard encryption in transit (TLS) and at rest. Passwords are never stored in plain text. While we take reasonable measures, no method of transmission or storage is completely secure, and we are not responsible for security incidents caused by third-party infrastructure outside our control.

DMXpressions™ is not directed at children under 13. We do not knowingly collect data from children.

We use a minimal set of browser storage technologies, and no third-party advertising or cross-site tracking cookies:

• Essential cookies / tokens — set by Supabase to keep you signed in and maintain your session. The Service does not function without these.
• Local storage & IndexedDB — store your shows, patch, preferences and offline cache on your device. This data is not a tracking mechanism and is not sent to us unless you opt in to cloud save.
• Service-worker cache — stores the application assets so the console loads instantly and works offline.

You can clear cookies and site data at any time through your browser settings; doing so will sign you out and remove locally cached shows.

We use only privacy-respecting, aggregate analytics necessary to keep the Service reliable (for example, anonymous error and performance diagnostics). We do not use advertising trackers, we do not sell or share personal information for behavioural advertising, and we do not build advertising profiles about you. Where your browser sends a "Do Not Track" or Global Privacy Control (GPC) signal, we treat it as an opt-out of any non-essential analytics.

DMXpressions™ is operated from the United States, and our providers (such as Supabase and Stripe) may process and store data on servers located in the United States and other countries. If you access the Service from outside the United States, you understand that your information may be transferred to, stored, and processed in a jurisdiction with different data-protection laws than your own. Where required, our providers rely on recognised transfer mechanisms such as the Standard Contractual Clauses.

Depending on where you live, you may have some or all of the following rights over your personal information:

• Access & portability — request a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate or incomplete data.
• Deletion ("right to be forgotten") — request deletion of your account and associated cloud data.
• Restriction & objection — ask us to limit or stop certain processing.
• Withdraw consent — where processing is based on consent, withdraw it at any time.
• Non-discrimination & "Do Not Sell or Share" — we do not sell or share your personal information, so there is nothing to opt out of, and we will never discriminate against you for exercising a right.

To exercise any right, email theatricallyjerry@dmxpressions.com. We will verify your request and respond within the timeframe required by applicable law (generally 30–45 days). You also have the right to lodge a complaint with your local data-protection authority.

Where the GDPR or UK GDPR applies, we process your personal data on the following legal bases: performance of a contract (to provide the Service and your license), legitimate interests (to secure, maintain and improve the Service), consent (for optional device permissions and non-essential analytics), and legal obligation (to comply with applicable law, tax and accounting requirements).

We maintain reasonable safeguards to protect your information. In the event of a data breach that affects your personal data, we will notify affected users and any relevant authorities without undue delay and in accordance with applicable law. Because authentication and storage are handled by Supabase, breach handling for that infrastructure is also subject to Supabase's own security and notification procedures.

The Service and our documentation may contain links to third-party websites (for example, fixture manufacturers, Supabase or Stripe). We are not responsible for the content or privacy practices of those sites, and this policy does not apply to them. We encourage you to review the privacy policy of any site you visit.

We may update this policy. Material changes will be communicated by updating the effective date above. Continued use of the service after changes constitutes acceptance.

For privacy questions or data deletion requests: theatricallyjerry@dmxpressions.com