Legal

Privacy Policy

Draft. This document hasn't been finalized and reviewed yet. Highlighted parts still need the owner's details.

Who is responsible

[OWNER: legal business name and contact address] is responsible for the personal data described here. Contact: [OWNER: privacy contact email].

What we collect and why

  • Account: username, email address, display name, and a password hash (never the password). Needed to sign you in, send password reset codes and receipts, and find your licenses.
  • Purchases: what you bought, amounts, dates, and Stripe references. Card details are entered on Stripe's checkout page and never reach our servers. Stripe's privacy policy applies to the data it processes.
  • Licenses and devices: the PCs a license is active on, identified by a one-way hash of a hash of the machine id (we never receive the machine id itself), a name you can see, and when each PC was last checked.
  • Downloads: which release your account downloaded and when.
  • Support requests: what you send us.
  • Optional cloud features: profiles you choose to sync or share, and marketplace content you publish.
  • Server logs: IP addresses and request details, kept for up to [OWNER: e.g. 30] days for security.

What we don't do

We don't sell personal data, and the website uses no advertising trackers. Analytics, if turned on, are privacy-friendly and collect no personal identifiers.

How long we keep it

Account data is kept while your account exists. Purchase records are kept for [OWNER: retention period required for tax and accounting in your jurisdiction]. Deleting your account removes your profile, licenses, devices and cloud data from our database; Stripe keeps payment records as required by law.

Your rights

Depending on where you live you may have the right to access, correct, export or delete your data and to object to processing. Contact us at [OWNER: privacy contact email]. You can delete your account at any time from your account page or from the ZENO app.

Processors

  • Stripe (payments)
  • [OWNER: hosting provider, e.g. Fly.io] (servers and database)
  • [OWNER: email provider] (transactional email)