PRIVACY NOTICEFOR PROTOLITH STUDIO BETA

This Privacy Notice explains how limited technical data is processed in connection with the installation, account registration, license activation, license verification, offline license files, purchases, updates, anonymous usage statistics, crash reports, security, and technical support processes of Protolith Studio Beta.

This Privacy Notice is provided for transparency and information purposes. It is separate from the End User License Agreement.

1. DATA CONTROLLER

Your data is processed by the following data controller:

Data Controller: Enver Savas, operating under the project name "Protolith Studio"

Product / Project Name: Protolith Studio Beta

Email: info@protolithstudio.com

Website: www.protolithstudio.com

Protolith Studio is currently provided as a beta software project and is not yet operated through a formally incorporated company. These details may be updated if a legal entity is established in the future.

2. DATA CATEGORIES PROCESSED

2.1 Account and license data

• Email address (used to sign in with a one-time code, to start the Free plan and the Pro trial, and to receive your license)
• Company name, if you provide it
• License key or license identifier, plan (Free, Pro, Team, Enterprise, Runtime), license status, trial and expiry dates
• Purchase and subscription status received from our payment provider (no card or bank details are received or stored by Protolith Studio)

2.2 Device and activation data

• A device fingerprint calculated on your computer from the CPU processor ID, motherboard serial number, and physical disk serial number. These values are hashed (SHA-256) on your computer; the raw serial numbers are not sent to the server.
• A device key generated on your computer (only its public part and a hash of it are sent)
• Installation ID or request ID (offline license files)
• Application version and operating system information
• Activation status, activation date and time, last check time, and request timestamps
• License activation, license verification, and error logs

2.3 Anonymous usage statistics and crash reports (can be turned off)

• A random installation ID generated on first start (not derived from your hardware or your name)
• Application version, operating system version, and your plan
• Which features and pages are used (for example "flow run" or "parser library"), with counts rounded into ranges (for example "10-20 nodes")
• Plan limits reached, upgrade prompts shown and the option chosen, trial start and end, license changes, session length rounded into ranges
• Crash reports: the type of the error and the program locations where it happened (stack trace). Error messages are not included, and file paths, your Windows user name and your computer name are removed on your computer before sending.

The following are never collected: your protocol and parser definitions, data you send or receive, device, channel, project, or file names, and the content of your work.

2.4 Network data

• IP address, used only briefly for abuse protection (rate limiting) and stored only in hashed form for at most two days
• Download logs of the installer and update files, including the IP address, kept for at most 90 days and then deleted; only daily download counts are kept after that
• Network and server communication metadata

Protolith Studio Beta does not intend to collect or process sensitive personal data unless strictly required by applicable law or by a separate explicit process.

3. PURPOSES OF PROCESSING

The data listed above may be processed for the following purposes:

• Creating and managing your account and sending sign-in codes
• Activating the software license and verifying the license key
• Binding the license to a specific device or installation
• Issuing offline license files for computers without internet access
• Processing purchases, subscriptions, renewals, and cancellations
• Preventing unauthorized use, copying, license sharing, tampering, or abuse
• Checking activation limits, license duration, and update eligibility
• Understanding which features are used and where plan limits are reached, in order to improve the product and its plans (anonymous usage statistics)
• Finding and fixing errors (crash reports)
• Troubleshooting activation and license verification errors and providing technical support
• Maintaining software security and license integrity
• Verifying records in case of security incidents, abuse claims, or legal disputes

4. METHOD OF DATA COLLECTION

Data is collected automatically and electronically during installation, first launch, sign-in, license activation, license verification (at start and about once a day while the application is used), offline license file requests, update checks, and communication with the license server. Your email address and company name are collected when you enter them. Purchase data is received from our payment provider.

Anonymous usage statistics are collected while you use the application and sent in batches (about every four hours and when the application closes). Crash reports are stored on your computer and sent at the next start.

5. ANONYMOUS USAGE STATISTICS: YOUR CHOICE

Anonymous usage statistics and crash reports are turned on by default for the Free and Pro plans and turned off by default for the Enterprise and Runtime plans. You can turn them on or off at any time on the License page of the application ("Send anonymous usage data"). When turned off, no usage statistics or crash reports are sent, and any that were waiting on your computer are discarded.

Usage statistics are linked to an account only on our server and only when the application holds a valid license token. If the application cannot reach the server, nothing is sent and the application keeps working.

6. SERVER LOCATION AND SERVICE PROVIDERS

Data is transmitted to and processed on servers located in Finland (Hetzner Online GmbH).

Server Location: Finland

The connection to the server passes through Cloudflare, Inc., which provides network protection and content delivery and may process connection data (such as the IP address) for that purpose.

Purchases are processed by our payment provider and reseller (merchant of record), Lemon Squeezy, which processes your payment details under its own privacy policy. Protolith Studio receives only the order and subscription status and the email address used for the purchase.

Emails (sign-in codes and license messages) are sent through an email delivery service.

7. LEGAL BASIS FOR PROCESSING

Depending on the applicable jurisdiction, your data may be processed based on one or more of the following legal grounds:

• Processing is necessary for the performance of the license agreement or beta evaluation arrangement
• Processing is necessary for the legitimate interests of the data controller, including software license protection, security, fraud prevention, abuse prevention, product improvement through anonymous usage statistics and crash reports, and prevention of unauthorized use
• Processing is necessary for compliance with legal obligations
• Processing is necessary for the establishment, exercise, or defense of legal claims
• Explicit consent, where required by applicable law

8. DATA SHARING

Your data may be shared, only to the extent necessary, with the following parties:

• The hosting, network, payment, and email service providers named in Section 6
• Authorized technical support and software development personnel
• Legally authorized public authorities, courts, or regulatory bodies, where required by law

Usage statistics are viewed only by the Protolith Studio team through an internal dashboard that cannot see email addresses (only their domain), license keys, or device fingerprints.

Your data is not sold to third parties.

9. INTERNATIONAL DATA TRANSFER

The license server used for Protolith Studio Beta is located in Finland. Cloudflare and Lemon Squeezy may process data in the United States and other countries.

Depending on the user's applicable data protection laws, the transmission of data to these locations may constitute an international transfer of personal data.

Such transfers may be carried out based on applicable data protection laws, adequacy decisions, appropriate safeguards, standard contractual clauses, explicit consent, or other lawful transfer mechanisms available under applicable legislation.

Where required by applicable law, users are provided with a separate International Data Transfer Information and Explicit Consent Notice.

10. DATA RETENTION PERIOD

• Account and license data: while the account or license exists, and afterwards only as long as required for legal, tax, security, or dispute-resolution purposes. Deleted accounts are anonymized.
• Device activation records: while the license exists; a released device is kept as a deactivated record.
• Anonymous usage statistics and crash reports: 13 months; after that only daily totals without installation IDs are kept.
• Download logs with IP addresses: 90 days; after that only daily download counts are kept.
• Hashed IP addresses used for rate limiting: at most two days.
• Server error and request summaries: 90 days.
• Encrypted backups: 30 days.

You can ask us to delete your account data and the usage statistics linked to your account at any time (see Section 12).

11. DATA SECURITY

Protolith Studio takes reasonable technical and organizational measures to protect your data. These measures include:

• Encrypted communication (HTTPS)
• Licenses signed with a private key that never leaves the server
• Hashing of hardware identifiers on your computer before they are sent
• Server access controls, an access-controlled administration area, and an audit log of administrative changes
• Encrypted backups
• Removal of file paths, user names, and computer names from crash reports on your computer
• Read-only access to masked data for internal dashboards

However, no software, server, network connection, or security mechanism can be guaranteed to be completely secure.

12. RIGHTS OF DATA SUBJECTS

Depending on applicable data protection laws, you may have the right to:

• Learn whether your personal data is being processed
• Request information about the processing of your personal data
• Learn the purpose of processing and whether your data is used in accordance with that purpose
• Know the third parties to whom your personal data has been transferred
• Request correction of incomplete or inaccurate personal data
• Request deletion or destruction of your personal data under applicable conditions
• Request notification of correction, deletion, or destruction to third parties to whom the data has been transferred
• Object to results arising from analysis exclusively through automated systems
• Claim compensation if you suffer damage due to unlawful processing of personal data

You can turn off anonymous usage statistics yourself at any time on the License page of the application.

To exercise your rights or ask questions about this Privacy Notice, you may contact us at:

Contact Email: info@protolithstudio.com

13. BETA PROGRAM AND LIMITED USE

Protolith Studio Beta is provided for evaluation, testing, demonstration, and beta feedback purposes.

The processing of the data described above is necessary to securely distribute the software, prevent unauthorized use, verify license access, and improve the product.

14. CHANGES TO THIS PRIVACY NOTICE

This Privacy Notice may be updated from time to time.

Updated versions may be made available through the installer, within the application, on the website, or through another appropriate electronic channel.

If this Privacy Notice is materially changed, users may be informed again, and where required by applicable law, additional consent may be requested.

15. CONTACT

For questions about this Privacy Notice or the processing of your data, please contact:

Protolith Studio

Represented by: Enver Savas

Email: info@protolithstudio.com

Website: www.protolithstudio.com