AltumCode Privacy Policy

This Privacy Policy explains how AltumCode ("we", "us", "our") collects, uses and protects personal data when you visit our websites, purchase or use our software products, use our product demos, contact us for support or otherwise interact with our services.

This Privacy Policy applies to AltumCode products and websites, including products sold through authorized third-party platforms.

For purposes of applicable data protection law, AltumCode is responsible for the personal data described in this Privacy Policy.

What data do we collect?

Depending on how you interact with us, we may process the following information:

Customer and purchase information. Information made available to us by the platform through which you purchased a Product, such as your name, email address, Product purchased, order information, license information and transaction identifiers. Payment card details are processed by the applicable payment provider and are not stored by us.
License and installation information. When installing or activating one of our Products, the Product may send us the license key, installation URL, Product key, Product name, Product version, server IP address and client IP address.
Optional newsletter information. During installation or through another subscription form, you may optionally provide your name and email address to receive Product news, updates or other communications. Providing this information is optional and is not required to use your license unless expressly stated otherwise.
Website access logs. Our servers may automatically record information such as your IP address, user agent, date and time, requested page and related technical information.
Demo data. If you use a public demonstration of one of our Products, we may process information you submit to the demo, such as your email address, name, IP address and other information entered while testing the Product.
Support and communications. If you contact us, we may process your name, email address, license information, messages, attachments, technical information and any other information you choose to provide.

How do we use your data?

We process personal data only where we have a legitimate reason to do so.

Providing our Products and licenses. We process purchase, license and installation information to deliver Products, validate licenses, provide updates and perform our obligations relating to your purchase.
License enforcement and fraud prevention. We use license keys, installation URLs, IP addresses and related information to detect license abuse, unauthorized installations, fraudulent purchases and violations of our Terms of Service.
Product support. We process communications and technical information to investigate problems, answer questions and provide customer support.
Security. Server logs and technical information may be used to protect our websites, Products, licensing infrastructure and servers against attacks, abuse and other security threats.
Product communications. We may send important operational communications relating to Products you purchased, such as significant Product, compatibility, licensing or security information.
Optional newsletters and marketing. Where you voluntarily subscribe, we may use your name and email address to send newsletters, Product announcements or promotional communications. You may unsubscribe at any time.
Legal and dispute purposes. We may retain and use relevant records where reasonably necessary to comply with legal obligations, enforce our licenses or Terms, prevent fraud, respond to payment disputes or establish, exercise or defend legal claims.

Legal bases for processing

Where applicable data protection law requires a legal basis, we generally rely on:

Performance of a contract where processing is necessary to provide a purchased Product, license, update or requested support.
Legitimate interests where necessary to operate and secure our services, validate and enforce licenses, prevent fraud and abuse, maintain business records and resolve disputes.
Consent where you voluntarily subscribe to optional newsletters or marketing communications.
Legal obligations where information must be retained or processed to comply with applicable accounting, tax, regulatory or other legal requirements.

License and installation data

Our Products are generally self-hosted, but limited information is transmitted to AltumCode when a Product is installed, activated or otherwise communicates with our licensing system.

This information may include:

license key;
installation URL;
Product key and Product name;
installed Product version;
server IP address;
client IP address;
optional newsletter email address and name, if voluntarily provided.

We use this information for license validation and enforcement, Product compatibility, fraud and abuse prevention, security and customer support.

The license and installation information required by the licensing system is necessary for us to provide and administer the applicable software license. Optional newsletter information is not required for license validation.

Your self-hosted Product data

Our downloadable Products are generally installed and operated on infrastructure controlled by the customer.

Personal data collected by your own installation from your visitors, customers or users remains under your control and is not automatically transmitted to AltumCode, except for the limited license and installation information described above.

You are responsible for determining how personal data is collected, used, stored and protected by your own installation and for providing any privacy notices, consent mechanisms or other disclosures required for your users.

AltumCode does not become responsible for the personal data collected by your self-hosted installation merely because you use one of our Products.

If you voluntarily provide us with information from your installation when requesting support, we will process that information only as reasonably necessary to provide support, investigate the issue and protect our legitimate interests.

Public Product demos

Some Products may provide a public demonstration environment so that potential customers can test the software before purchasing.

Data entered into a public demo may be accessible to us as part of operating, maintaining and securing the demo.

Do not submit sensitive, confidential, private or real production data to a public Product demo. Demo environments are intended only for testing.

Demo accounts and associated demo data are generally deleted when the demo environment is reset and are retained for no longer than approximately 30 days unless retention is reasonably necessary for security or abuse investigation.

How long do we keep your data?

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and for applicable legal, security and dispute-resolution requirements.

Website access logs: generally retained for approximately 30 days.
Demo data: generally retained for no longer than approximately 30 days and may be deleted earlier when the demo is reset.
License and installation records: may be retained while the license remains valid and afterwards where reasonably necessary for license enforcement, fraud prevention, support history or legal claims.
Purchase records: retained for as long as reasonably necessary to administer the license and comply with applicable accounting, tax, fraud-prevention and legal requirements.
Support communications: may be retained for as long as reasonably necessary to provide support, maintain relevant support history and resolve disputes.
Newsletter information: retained until you unsubscribe, withdraw your consent or the mailing list is discontinued, subject to limited records that may be retained to respect your unsubscribe request.

Some information may be retained for longer where required by law or where reasonably necessary for the establishment, exercise or defence of legal claims.

Who do we share data with?

We do not disclose personal data except where reasonably necessary to operate our business, provide our Products or comply with applicable requirements.

Depending on the Product and how it was purchased, recipients may include:

Lemon Squeezy – an authorized commerce and payment platform used for certain Product purchases.
Envato / CodeCanyon – a marketplace used to distribute certain Products.
Hetzner – infrastructure and hosting used for certain AltumCode servers and services.
Infrastructure, email, security and support providers where reasonably necessary to operate our services.
Professional advisers, authorities, payment providers or financial institutions where necessary for legal compliance, fraud prevention, payment disputes or legal claims.

Third-party marketplaces and payment providers may also process personal data independently under their own privacy policies and terms.

International data transfers

Some service providers may process personal data in countries outside your country of residence, including outside the European Economic Area.

Where required by applicable data protection law, international transfers are made using recognized safeguards such as adequacy decisions, contractual safeguards or other legally permitted transfer mechanisms.

Cookies and similar technologies

Our primary Product websites do not intentionally use non-essential cookies or browser storage unless otherwise disclosed.

Public Product demos may use cookies, sessions or similar browser technologies that are necessary for the Product to function and to allow visitors to test its functionality.

Third-party websites or purchase platforms that you visit through our websites may use their own cookies and similar technologies. Their use of such technologies is governed by their own privacy policies.

Data security

We use reasonable technical and organizational measures intended to protect personal data against unauthorized access, loss, misuse, alteration or disclosure.

However, no internet transmission, software system or storage method can be guaranteed to be completely secure. You are also responsible for protecting your own account, license and server credentials.

Automated decision-making

We do not use personal data for solely automated decision-making or profiling that produces legal or similarly significant effects on individuals.

Your data protection rights

Depending on where you live and the applicable law, you may have rights relating to your personal data, including:

Right of access – request information about personal data we process about you and obtain a copy where applicable.
Right to rectification – request correction of inaccurate or incomplete personal data.
Right to erasure – request deletion of personal data where applicable.
Right to restriction – request restriction of processing in certain circumstances.
Right to object – object to certain processing based on legitimate interests and to direct marketing.
Right to data portability – receive certain personal data in a structured, commonly used and machine-readable format where applicable.
Right to withdraw consent – where processing is based on your consent, you may withdraw that consent at any time without affecting processing that occurred before withdrawal.
Right to complain – you may lodge a complaint with an applicable data protection supervisory authority if you believe your personal data has been processed unlawfully.

Privacy requests are generally handled free of charge. Where permitted by law, we may refuse or charge a reasonable administrative fee for requests that are manifestly unfounded or excessive.

We may request information reasonably necessary to verify your identity before fulfilling a privacy request.

Some rights are subject to legal limitations. For example, we may need to retain certain purchase, licensing, fraud-prevention or legal records even after receiving a deletion request.

Third-party websites

Our websites and Products may contain links to third-party websites or services.

This Privacy Policy does not apply to independent third parties. If you visit or use another website or service, you should review its privacy policy separately.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our Products, processing activities, service providers or applicable requirements.

The current version will be published on this page with an updated revision date. Where appropriate, we may provide additional notice of material changes.

Contact

If you have questions about this Privacy Policy, want to exercise a privacy right or have concerns about how your personal data is processed, please contact us via email.