OnAirCut Privacy Notice

Last updated: October 24, 2026 · Leer en español

What is collected, what isn’t, and who else is involved. The short answer: OnAirCut works on your own Mac, so your audio, your sessions and your edits never leave it.

Who is responsible

The party responsible for the data described here is César Hernández. OnAirCut is a product of Soonus, the independent software studio he runs from Mexico.

The contact for anything on this page, including exercising your rights, is support@soonus.net. The registration details the law asks for (full legal name, tax ID and address) are provided in full to anyone who requests them.

The application

The mixer’s audio is analysed on your Mac, in real time, to know who is talking. It’s only recorded to your disk when you record: with ▶ while Always REC is on (it comes on by default), or with ● REC if you turn it off. It’s never sent anywhere.
The ATEM is controlled over your local network or USB, never through the internet.
Your sessions, recordings, video files and edits stay on your Mac. The podcast editor reads them from your disk and writes its own next to them.
Inside the application there are no analytics, no profiling and no account to create.

Four things do use the internet, and none of them carries your work:

Checking whether a licence is needed. When it opens, the application asks our server whether OnAirCut can be used without a licence (the public beta, until December 31, 2026) and whether your version is still current. It sends the application’s version and the Mac’s hashed identifier (the same one as in point 2), so the signed answer is valid only on that Mac. The answer also says how many free trials that Mac has used. That request is not stored.
Verifying your licence, if you have one. What travels is the key, the identifier of that activation, a name for the Mac (so you can tell your machines apart when you release one), the app version and a hashed identifier of the Mac. That hash ties the licence to the Mac, lets us count how many Macs it has been on, and lets each Mac use only two free trials. It can’t be turned back into the original identifier, and it’s stored only next to the licence (or the trial) it belongs to. This happens when you activate, when the application opens, every few hours while it’s open, and when you open the list of your Macs or release one. When you activate or release a seat, the application also talks directly to Dodo Payments’ licence service: activating sends the key and the Mac’s name; releasing, the key and that activation’s identifier. If you click “Manage subscription”, our server asks Dodo Payments to email you a link to your account, where the subscription is managed.
Checking for updates. When it opens, the application downloads a small file from our download server (dl.onaircut.com) and compares versions. That request carries the app’s version; if there’s a new version, showing it to you also sends that of Sparkle, the component that updates it, plus your Mac’s language, as any web request does. Nothing of your work. What’s new appears on the start screen (never during a show), and it asks before installing: it never installs by itself. It’s on by default and can be turned off any time in Settings.
Reporting a fault. It’s off by default and only turns on in Settings. On top of that, when a program fault happens, the alert offers “Send this report”, which sends only that one, because you asked.

A fault report carries the kind of fault, its code (OAC-…), where in the code it happened, and the app and macOS versions. It never carries audio, names of files, folders, sessions or people, or the text of an error message, and Sentry is set up not to store your IP address. The reporter carries a closed list of the fields that may travel and copies no others. Reports go to Sentry, and they’re the only thing the app ever sends there.

Two of those four can be turned off without losing anything. With updates and reports off, OnAirCut works exactly the same. The licence checks exist because the application is sold by subscription. If what the application sends over the internet ever changes in a meaningful way, it will also be said in the release notes.

The application’s links (buying, managing your subscription, leaving a review, the editor’s help article) open in your browser; the application carries no advertising.

This website

The site is served by Cloudflare. It sets no cookies of its own and stores nothing on your device, with one exception: on the thank-you page after a purchase, your licence key is kept in that browser tab (session storage) so it doesn’t disappear if you reload the page. It’s deleted when you close the tab.

Like any web server, Cloudflare handles your IP address, the page you asked for and the description your browser gives of itself. Those logs are kept briefly and are used to serve the site and limit abuse. Visits are counted with Cloudflare Web Analytics, which is aggregate and cookieless. Clicks on the download button are counted too, only by day and version: that count keeps no IP address or anything that identifies you.

Forms are protected with Cloudflare Turnstile in invisible mode: it checks the browser (not the person) and shows nothing on screen. Cloudflare runs that check under the Turnstile Privacy Addendum. There’s no advertising, no social media buttons, no third-party fonts and no session recording.

The manual’s Ask your AI box sends us nothing: its links open the assistant you choose (ChatGPT, Claude or Perplexity) in a new tab, with your question and a link to the manual, and from there that service’s own privacy policy applies. “Copy the question” only copies it to your clipboard, in your browser.

The forms

Contact collects exactly what you write: your name, your email, what it’s about and your message.
Review collects your name, your email, your podcast or studio, your setup, the stars, your review and, if you attach one, a photo.

Neither form stores anything in a database: each one becomes an email that Plunk delivers to our inbox (support@soonus.net), and that email is the only copy. Your address is used to reply to you and for nothing else: it never joins a mailing list.

A review is published only with your permission. The form asks for it in a box you tick, and the email we receive carries the exact sentence you agreed to and when. What may be published is your name, your podcast or studio, your review and your photo — never your email — on onaircut.com, on soonus.net and in material derived from them, translated into other languages. Write to us and it’s taken down.

Taking out a subscription

The checkout is run by Dodo Payments as merchant of record, on its systems. It collects what a sale needs: your name and email, your country and, where tax law requires it, your postcode, and your payment method. Like any payments company, it also collects your IP address and a description of your device to decide whether a payment is genuine.

Dodo is responsible for that data in its own right, under its own privacy notice. A request about the payment (a copy, a correction, a deletion) also has to be made to them. Card details never pass through anything of ours.

What reaches us is the order, the name and email on it, your subscription’s status (active, trialling, on hold, cancelled) and your licence record: the key (of which we keep only a fingerprint, not the key itself), its plan and the Macs it’s activated on. It’s used to make your licence work, answer you, process a refund and keep the records Mexican tax law requires.

What it’s used for

making your licence work and letting you move it between your Macs;
answering your emails and what you send through the forms;
publishing your review, if you gave permission;
issuing and accounting for a sale, as tax law requires;
keeping the site available and limiting abuse;
finding and fixing a fault, if you sent a report;
answering a disputed payment, if one is opened.

It isn’t used for advertising, isn’t sold or rented, nobody is profiled, and no automated decision with legal effects is made about you.

Cloudflare: hosting for the site, the downloads and the licence server, server logs, cookieless analytics and Turnstile.
Dodo Payments: checkout, invoicing, tax, licence keys and the customer portal. Responsible for that data in its own right.
Sentry: fault reports, only if you send them.
Plunk: delivers what you send through the contact and review forms to our inbox.
The email provider of support@soonus.net, where support mail and the forms arrive.

Beyond them, data is only disclosed when the law requires it.

Where the data is

Those providers operate outside Mexico (mainly in the United States, the European Union and India, where Dodo Payments is). Handing data to a provider so it can deliver the service you asked for is a remisión under Mexican law and doesn’t need your separate consent. Where European rules apply, those transfers rely on the safeguards each provider publishes.

How long it’s kept

Orders and licence records: while the subscription exists, and then as long as tax and accounting law requires.
Support correspondence and form messages: while they’re useful as context; deleted on request.
Published reviews: while they’re on the site; taken down on request.
Server logs: a short period set by Cloudflare.
Fault reports: a rolling period set in Sentry, after which they’re discarded.
Files sent to reproduce a fault: deleted once the fault is fixed.

Your rights

Mexican law gives you the ARCO rights: to access your data, rectify it, cancel it and object to its use. You can also limit its use or disclosure and withdraw your consent. If you’re in the European Economic Area or the United Kingdom, the equivalent rights apply (access, rectification, erasure, restriction, objection and portability).

Exercising them is an email to support@soonus.net from the address concerned, with no form and no cost. The answer comes within the legal deadline: 20 business days in Mexico and one month under European rules. Anything around the payment belongs to Dodo Payments: we’ll tell you what to ask them. If you’re not satisfied with the answer, you can go to Mexico’s data protection authority or to the one where you live.

Security

The strongest protection is that your work never leaves your Mac. What does travel goes over HTTPS. The server’s keys are stored as encrypted platform secrets and aren’t in the code. No arrangement is perfect, and this one isn’t claimed to be.

Minors

OnAirCut is a professional tool and isn’t aimed at minors. Data isn’t knowingly collected from anyone not old enough to accept this on their own.

Changes to this notice

Changes are made on this page, with a new date at the top. A meaningful change in what the application sends over the internet is also stated in the release notes.

Contact

Any question about this page, and any request to exercise a right: support@soonus.net.