Privacy, deletion and retention
Readable license keys, minimal device data, and what account deletion keeps.
License keys are readable
License keys are signed, not encrypted. Anyone with a key can read its registered name, organization and seats, and use it. Customers shouldn't paste full keys into public support threads; identify a license by its ID instead.
No device tracking
The server records no installations, device identifiers, hardware fingerprints, IP addresses of app users or app usage. Optional refresh reads only the license's current version. Request logs omit bodies, tokens and network identifiers.
Account deletion
The personal data screen in Identity account management handles deletion. Customers should download their license files first.
Deletion:
- removes the Identity account and sign-in;
- deletes the user's transfers, notification records and email preferences;
- replaces the user ID on licenses, orders and agreement acceptances with a pseudonym;
- clears the IP address recorded with agreement acceptances.
It keeps the minimum commercial evidence: orders, settlements, and the signed license versions, which include the registered name and organization.
Choose a retention policy that suits your jurisdiction and business. The template doesn't assume one or delete evidence on a schedule. Stripe has its own retention and deletion controls.
A license file downloaded before deletion keeps working offline. Deleting an account doesn't uninstall or revoke anything.
The documentation screenshots use demonstration data only.