Legal

Privacy Policy

We collect the minimum data needed to run your subscription, and we never sell it.

1. Data we collect

We only collect information that is necessary to provide and secure the service.

  • Account details: name, email address and password (stored hashed, never in plain text).
  • Subscription details: plan, device allowance, billing period and payment status.
  • Device details: the devices registered to your account, used to enforce your device limit.
  • Technical logs: IP address, browser type and timestamps, kept for security and fraud prevention.

2. How we use it

Your data is used for these purposes only.

  • Creating and maintaining your account and subscription.
  • Processing payments and sending receipts and renewal reminders.
  • Providing customer support and responding to your messages.
  • Detecting credential sharing, abuse and fraudulent payments.
  • Meeting our legal and licensing obligations.

3. Who we share it with

We do not sell personal data and we do not share it for advertising. Data is shared only with the processors needed to operate the service — our hosting and database provider, our payment processors and our email delivery provider — each bound by a data-processing agreement.

We may disclose data where required by law or to protect the rights and safety of our users and rights holders.

4. How long we keep it

Account and subscription data is retained while your account is active and for up to 24 months after closure, so we can meet accounting and licensing obligations. Technical security logs are kept for 12 months. After those periods the data is deleted or irreversibly anonymised.

5. Your rights

You can access, correct, export or delete your personal data at any time, object to certain processing, or withdraw consent where it applies.

  • Most details can be edited directly in your account dashboard.
  • For a full export or account deletion, contact us and we will action it within 30 days.
  • You also have the right to complain to your local data-protection authority.

6. Security

All traffic is encrypted in transit with TLS, data is encrypted at rest, and access to production systems is restricted to a small number of staff using multi-factor authentication. If a breach ever affects your data, we will notify you and the relevant authority without undue delay.

7. Contact

Questions about this policy, or about the data we hold on you, can be sent through the contact page and are answered by our privacy team.