Privacy notice
Last updated: [EFFECTIVE DATE]
In short: Data Recovery Pro works on your Mac. We never collect the names or contents of your files. The app connects to the internet only to open the payment and to collect your receipt. Paddle handles your payment details; we never see your card.
1. Who is responsible
[COMPANY OR TRADING NAME], [POSTAL ADDRESS], is the controller for the personal data described here. Contact: [CONTACT EMAIL]. [ICO REGISTRATION NUMBER, if registration is required.]
2. What the app does not collect
Scanning, previewing and recovery all happen on your Mac. We do not collect, upload or see file names, folder names, file contents, thumbnails, scan results or the list of drives on your computer. The app contains no analytics or tracking.
3. What we do collect, and why
Install ID
When you first use the app it creates a random install ID. It is not derived from your name, your Mac's serial number or any account. It is sent to Paddle with your payment and used to collect your receipt, so that the receipt reaches the right copy of the app.
Receipts
When a payment completes, Paddle tells our receipt server, which creates a signed receipt. Each receipt record holds: the Paddle order ID, the install ID, the drive's volume serial number (a number the drive's file system assigns; it does not identify you), and the dates it was issued and expires. The app downloads the receipt and checks it offline from then on. Receipts are stored with [RECEIPT SERVER HOST, e.g. Appwrite Cloud].
Payment and order details (Paddle)
Paddle.com is the merchant of record and processes your payment as an independent controller. Paddle collects your name, email address, country, billing details and payment method. We do not receive your card details. Paddle shares order details with us, such as your email address, country, the order ID and amount, so we can support you and handle refunds. See Paddle's privacy notice.
The website
This website sets no cookies of its own and uses no analytics. Our host, [HOSTING PROVIDER], keeps standard server logs (such as IP address, browser type and the page requested) for security and to keep the site running. The payment page loads Paddle's checkout script, which may use cookies or similar storage needed to complete the payment; Paddle's privacy notice explains this.
Emails you send us
If you email us, we keep the email and our reply so we can help you. Please do not send us your files; we never need them.
4. Legal bases
- Contract: issuing and delivering the receipt that unlocks recovery for the drive you paid for, and handling refunds.
- Legitimate interests: keeping the website secure, preventing misuse of receipts, and answering your emails.
- Legal obligation: keeping order records where the law requires it.
5. How long we keep it
Receipt records are kept for as long as needed to provide the 7-day re-scan window, to handle refunds and disputes, and to meet record-keeping duties, and then deleted after [RETENTION PERIOD]. Emails are kept for [RETENTION PERIOD] after the conversation ends. Server logs are kept by our host for [LOG RETENTION PERIOD].
6. Who else processes it
- Paddle.com (payments, invoicing, tax, refunds).
- [RECEIPT SERVER HOST] (stores receipt records).
- [HOSTING PROVIDER] (hosts this website).
- [EMAIL PROVIDER] (our support email).
Some of these providers may process data outside the UK. Where they do, we rely on safeguards recognised under UK data protection law, such as adequacy regulations or the International Data Transfer Agreement.
7. Your rights
Under UK data protection law you can ask for a copy of your personal data, ask us to correct or delete it, object to or restrict how we use it, and ask for it in a portable form. Contact [CONTACT EMAIL]. Because we hold very little, it helps to give your Paddle order ID. You can also complain to the Information Commissioner's Office at ico.org.uk.
8. Changes
If we change what we collect, we will update this notice and its date before the change takes effect.