ConductoreComing soon — $49

Privacy Policy

Last updated: August 2026

Who is responsible for your data

The data controller is Outsmartis, Portugal. For any privacy question or to exercise your rights, email [email protected].

Information we collect

When you purchase Conductore Lite:

  • Email address (for license key delivery and support)
  • Name (optional, from Stripe checkout)
  • Payment and billing information — collected and stored by Stripe; we never see or store your card details. We receive the payment status, the Stripe identifiers, and the billing country
  • Your confirmation that delivery should start immediately and that you waive the 14-day withdrawal right (a timestamped flag on your license record — we are legally required to keep evidence of it)

When you activate or validate your license, the app sends:

  • Your license key
  • A machine fingerprint (SHA-256 hash of hardware identifiers — not reversible)
  • Your device name (the machine hostname, e.g. anna-macbook), stored in clear text so you can recognise your own activations in Settings → License. If your hostname contains your name, that is personal data — you can rename the machine before activating, or ask us to blank the stored value
  • Platform type (Windows / macOS / Linux)
  • App version

When you use this website and its APIs:

  • Your IP address, recorded by our rate limiting to stop brute-force and abuse of the license and download endpoints
  • Your GitHub username, if you ask us to invite you to the private source repository — it is sent to GitHub to issue the invitation
  • Your email address, if you join the waiting list while purchasing is not yet open. We use it only to tell you when it opens, and you can ask us to delete it at any time

We do not use analytics, advertising, or tracking cookies, and the app sends us no telemetry or usage data: nothing about which projects you open, what you type, or what your terminals output ever leaves your machine.

Why we use it, and on what legal basis

  • Performance of a contract (GDPR Art. 6(1)(b)) — delivering your license key, builds and source code, validating activations against the 3-machine limit, and handling refunds
  • Legal obligation (Art. 6(1)(c)) — keeping invoicing/tax records and evidence of the withdrawal-right waiver
  • Legitimate interests (Art. 6(1)(f)) — rate limiting and abuse prevention, and detecting license key sharing
  • Consent (Art. 6(1)(a)) — the launch waiting list, which you can withdraw from at any time

Data storage and transfers

Purchase and license records are stored in Cloudflare D1 and served from Cloudflare’s edge network; downloads are served from Cloudflare R2. Payment data is held by Stripe and transactional email is sent through Postmark. Some of these providers are US-based or operate globally; transfers outside the EEA rely on the EU Standard Contractual Clauses in each provider’s data processing agreement.

Third parties

We do not sell your data and we do not share it with anyone else.

Data retention

  • License and purchase records — kept while your license is valid, and afterwards for as long as tax and accounting law requires us to keep the transaction record
  • Activation records (fingerprint, device name, platform, version) — deleted when you deactivate the machine or when the license is revoked
  • Rate limiting records (IP addresses) — kept no longer than 30 days
  • Waiting list emails — deleted once purchasing opens, or earlier on request

Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict or object to its processing, or send it to another provider. Email [email protected] and we will respond within 30 days. Deleting your license record ends your ability to activate new machines. If you think we have handled your data badly you can complain to your national supervisory authority — in Portugal, the CNPD (cnpd.pt).

Contact

For privacy questions: [email protected]

Privacy Policy | Conductore