Privacy Policy

1. Data Controller

Veniatis (sole proprietorship), The Netherlands. Contact: [email protected]

2. Data We Collect

Account & License Data: Email address, license key, activation timestamps, and a one-way hash of your email for validation.

Payment Data: Processed exclusively by Stripe, Inc. We do not store payment card details.

Server Logs: IP addresses retained for a maximum of 90 days.

3. Purpose and Legal Basis (GDPR)

License delivery and validation: Art. 6(1)(b). Payment processing: Art. 6(1)(b). Fraud prevention: Art. 6(1)(f). Marketing emails: Art. 6(1)(a) consent only.

4. Data Sharing

Only Stripe, Inc. for payment processing. No other third parties. We never sell your data.

5. Data Retention

Account data: license duration + 2 years. Server logs: 90 days. Payment records: 7 years (Dutch fiscal law).

6. Your Rights (GDPR Art. 15-22)

Access, rectification, erasure, restriction, data portability, and objection. Contact: [email protected]. Response within 30 days.

7. Security

Encryption at rest and in transit (TLS 1.2+). Ed25519 signed license tokens. Hashed email for validation requests.

8. Cookies

Only strictly necessary cookies (Stripe checkout). No tracking, analytics, or advertising cookies.

9. Supervisory Authority

Autoriteit Persoonsgegevens (Dutch Data Protection Authority).