Privacy Policy

Last Updated: November 07, 2025

1. Data Controller

The data controller responsible for your personal data is:

2. Information We Collect

2.1 Personal Data You Provide

We collect the following personal data when you register or use our service:

• Account Information: First name, last name, email address
• Payment Information: Processed securely by Stripe (we do not store credit card details)
• License Information: License keys, device identifiers, device names
• Communication Data: Any information you provide when contacting support

2.2 Automatically Collected Data

• Technical Data: IP address, browser type, operating system, plugin version
• Usage Data: License activation times, device verification timestamps
• Cookies: See our Cookie Policy section below
• Analytics Data: If enabled, website usage statistics via Google Analytics

3. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

• Contractual Necessity: To provide our services and fulfill our license agreements
• Legitimate Interest: To improve our services, prevent fraud, and ensure security
• Consent: For marketing communications and optional analytics (you can withdraw consent at any time)
• Legal Obligation: To comply with tax, accounting, and legal requirements

4. How We Use Your Information

We use your personal data for the following purposes:

• To create and manage your account
• To process payments and generate invoices
• To issue and manage software licenses
• To verify device activations and enforce license limits
• To provide customer support and respond to inquiries
• To send important service updates and security notifications
• To detect and prevent fraud or abuse
• To improve our software and services
• To comply with legal obligations

5. Data Sharing and Disclosure

We do not sell your personal data. We may share your data with:

5.1 Service Providers

• Stripe: Payment processing (subject to Stripe's privacy policy)
• Google Analytics: Website analytics (only if you consent via cookie banner)
• Email Service Providers: For transactional emails and support communications

5.2 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or to protect our rights and safety.

6. Data Retention

We retain your personal data only as long as necessary:

• Active Accounts: Data retained while your account is active
• Deleted Accounts: Most data deleted within 30 days; some data retained for legal/tax purposes (typically 7 years)
• Activity Logs: Retained for 2 years for security and support purposes
• Payment Records: Retained as required by tax law (typically 7 years)

7. Your Rights Under GDPR

If you are an EU resident, you have the following rights:

7.1 Right to Access

You can request a copy of the personal data we hold about you.

7.2 Right to Rectification

You can request correction of inaccurate or incomplete data.

7.3 Right to Erasure ("Right to be Forgotten")

You can request deletion of your personal data, subject to legal retention requirements.

7.4 Right to Restrict Processing

You can request limitation of how we process your data.

7.5 Right to Data Portability

You can request your data in a structured, machine-readable format.

7.6 Right to Object

You can object to processing based on legitimate interests or for marketing purposes.

7.7 Right to Withdraw Consent

Where processing is based on consent, you can withdraw it at any time.

7.8 Right to Lodge a Complaint

You can file a complaint with your local data protection authority.

To exercise these rights, contact us at: [email protected]

8. Data Security

We implement appropriate technical and organizational measures to protect your data:

• HTTPS/SSL encryption for all data transmission
• Encrypted storage of sensitive data
• Secure password hashing (bcrypt)
• Regular security audits and updates
• Access controls and authentication
• Protection against SQL injection and XSS attacks

9. International Data Transfers

Your data may be processed and stored in countries outside the EU/EEA. When this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions by the European Commission.

10. Cookies and Tracking Technologies

10.1 Essential Cookies

We use essential cookies necessary for the website to function:

• Session Cookies: To maintain your logged-in state (no consent required)
• Security Cookies: To protect against fraud and abuse

10.2 Analytics Cookies (Optional)

With your consent, we use Google Analytics to understand how visitors use our website. You can opt-out via our cookie banner.

10.3 Cookie Management

You can manage your cookie preferences at any time using our cookie settings.

11. Children's Privacy

Our Service is not intended for children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices. Please review their privacy policies before providing any information.

13. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

14. Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours as required by GDPR.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. For significant changes, we will provide prominent notice or seek consent where required.

16. Contact Us

For any questions about this Privacy Policy or to exercise your rights, please contact us:

17. EU Representative

For EU-specific inquiries, you may contact us at the address above. We will respond to requests within one month as required by GDPR.