Privacy policy

Data controller

Théo Vervier, sole proprietor (entrepreneur individuel, EI), 3 impasse des Violettes, 01480 Villeneuve, France. Contact: contact@gradeflowstudio.com.

On this site

The site sets no audience-measurement or advertising cookies and uses no tracking tool. Fonts are served by the site itself. The host, Cloudflare, records technical logs (IP address, page requested, date) to run and protect the service; see Cloudflare's policy.

When you click a buy button, Paddle's payment window loads from Paddle's servers, and Paddle may then set its own cookies needed for the payment.

When you order

Payment is processed by Paddle, official reseller and merchant of record for GRADEFLOW, which is responsible for the payment data (card, billing address, country). The publisher never has access to your card number. See Paddle's privacy policy.

Paddle passes the publisher your email address, your name if provided, and the order number. They are used to send you your license key, to reply to you and to process any refund.

For the license

When you activate your key, then regularly to check it (every 30 days at the latest), the extension contacts GRADEFLOW's license server. It sends:

• your license key;
• a Mac identifier, calculated from the hardware identifier and then scrambled: the original identifier is never sent;
• the Mac's name, so that you can recognize your machines in the settings.

The server keeps:

• a hash of the key, not the key itself;
• the email address and the Paddle order number;
• for each activated Mac: its scrambled identifier, its name, and the dates of activation, last check and release;
• the license status (active, refunded, deactivated).

It is used only to enforce the two-Mac limit, to resend a lost key, to answer support requests and to deactivate a refunded license.

The extension sends nothing else: no project or sequence name, no file path, no usage statistics.

For the free trial

When you start the free 3-day trial, then before each send during the trial, the extension sends the license server the scrambled Mac identifier described above, and nothing else: not the Mac's name, not an email address.

The server keeps only a hash of this identifier, made with a secret key, and the start and end dates of the trial. It also keeps, for two days at most, a hash of the IP address and the number of trials started from that address during the day. The IP address is never kept in clear.

These data are used only to grant a single trial per Mac and to curb serial trials. They rest on the publisher's legitimate interest in offering a trial without it being misused, and are erased three years after the trial ends.

Service providers

• Paddle.com Market Limited (United Kingdom): payment and invoicing.
• Cloudflare, Inc. (United States): hosting of the site, the license server and its database (stored in Western Europe).
• Resend, Inc. (United States): sending the email that contains the key.

Some of these providers are located outside the European Union. The United Kingdom benefits from an adequacy decision of the European Commission. Transfers to the United States are covered by the European Commission's standard contractual clauses included in these providers' contracts.

Legal basis and retention

These data are processed to perform the license contract you entered into by buying GRADEFLOW. They are necessary: without them, the key can be neither sent nor activated.

They are kept as long as the license is in use. If none of your Macs has connected to the license server for three years, your email address is erased; the license keeps working. A refunded license keeps its “refunded” status so that it cannot be reactivated. Invoices are kept by Paddle, and sales records by the publisher for ten years, the retention period for accounting documents.

The email that contains the key is a service email: it does not ask for consent and contains no advertising. You will not receive a newsletter unless you asked for one.

Your rights

You can request access to your data, its correction or its deletion, or object to its processing, by writing to contact@gradeflowstudio.com. Deleting license data deactivates the license. If you believe your rights are not being respected, you can lodge a complaint with the CNIL, the French data protection authority.