Privacy policy
Thanks for your interest in HardVox. This policy explains in plain words which personal data we process on hardvox.io, when you buy and when the plugin checks your license, why we do it and what rights you have.
1. Controller
[company_name]
[company_street], [company_city], [company_country]
E-mail: [company_email]
We are not required to appoint a data protection officer. If you have questions about privacy, simply write to [company_email].
2. Overview
- We use no analytics or advertising tools, no tracking cookies and no social media plugins.
- Fonts and scripts are loaded from our own server – no data is sent to Google Fonts or similar services.
- We only process personal data where it is needed for the website, your account, payment, your license and support.
3. Hosting and server log files
The website runs on a server of a professional hosting provider in the European Union. We have a data processing agreement with the provider (Art. 28 GDPR).
With every request the server automatically stores: IP address, date and time, requested address, amount of data transferred, status code, referrer and browser identifier. This is necessary to deliver the website and to fend off attacks (legitimate interest, Art. 6 (1) (f) GDPR). Log files are deleted after 14 days at the latest unless they are needed longer to investigate a security incident.
4. Cookies
We only use technically necessary cookies: a session cookie (so you stay logged in and your language is kept) and a security cookie against forged form requests (CSRF). If you choose "Stay logged in", a cookie for the automatic login is added. The legal basis is § 25 (2) no. 2 TDDDG and Art. 6 (1) (b) or (f) GDPR. No consent is required, which is why there is no cookie banner.
5. Customer account
For your account we store your e-mail address, an encrypted password (hash), your language and the times of registration and last login. This is necessary to perform the contract (Art. 6 (1) (b) GDPR). You can have your account deleted at any time – just send us a short message. Data we must keep for tax and commercial law reasons is blocked until the retention period ends.
6. Purchase, subscription and payment via Stripe
Payments are processed by Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland. You enter your payment details directly at Stripe; we never receive full card or account details. Stripe also processes the data to prevent fraud and may transfer it to Stripe, Inc. in the USA for this purpose, based on the EU-US Data Privacy Framework and standard contractual clauses. For subscriptions, Stripe stores the payment method for the recurring charges; you can cancel, change the payment method and see invoices in the Stripe customer portal from your account.
For every payment we store: order number, plan (subscription or lifetime), amount, time, payment method, subscription status, paid period and the Stripe references. The legal basis is Art. 6 (1) (b) and (c) GDPR. Invoice data is kept for up to 10 years according to § 147 AO and § 257 HGB. Stripe's privacy policy: https://stripe.com/privacy
7. License check and update check in the plugin
So that one license key runs on no more than 2 computers at a time, the plugin sends the following data to our server when you activate it and then about every 12 hours (when online):
- the license key,
- a device ID – a one-way hash of identifiers of your Windows system; no hardware or system data can be derived from it,
- the computer name (so you recognise your devices in your account), the Windows version and the HardVox version,
- for technical reasons, the IP address.
We store the time of activation and of the last check as well as refused activations (protection against misuse). The legal basis is Art. 6 (1) (b) GDPR (performance of the license agreement) and (f) (protection against unauthorised use). If you remove a computer in your account, its data is deleted immediately. All other data is deleted 12 months after the license ends at the latest.
For the update check the plugin asks for the newest version and sends the installed version, the language, the IP address and – so lifetime licenses can check their update period – the license key. These requests are not stored, except in the server log files (see no. 3).
8. Support and tickets
When you contact us via the support form or by e-mail, we process your e-mail address, subject, category, your messages and attached files to answer your request (Art. 6 (1) (b) or (f) GDPR). Attachments are not stored publicly and can only be opened by you and our support team. Closed tickets are deleted after 24 months unless we are legally required to keep them.
9. E-mails
We only send e-mails that belong to your contract: license key, password reset and answers to support requests; invoices and payment notices are sent by Stripe. We do not send advertising e-mails without your explicit consent.
10. Recipients and third countries
We only pass on data where this is necessary for the purposes above: to our hosting provider, the e-mail delivery service, Stripe for payments, and to tax advisers and authorities where we are legally obliged to. Transfers to third countries only take place as described in no. 6.
11. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw any consent at any time with effect for the future. An e-mail to [company_email] is enough.
You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example in the country where you live.
12. Security
The website is encrypted with TLS throughout. Passwords are stored only as hashes, license tokens are digitally signed and credentials for payment services are encrypted.
13. Changes
We update this policy when our services or the law change. The version published here applies.
This English version is a courtesy translation; the German version is legally binding.