1. Definitions

"User" means any individual or entity that creates an AuthVaultix account to use our licensing and authentication infrastructure services.

"End User" means any individual who uses software licensed or authenticated through our platform by a User. End Users interact with User Software, not directly with AuthVaultix.

"User Software" means any software, application, game, plugin, or other product that a User licenses or distributes through our platform.

"Telemetry Data" means technical and usage information optionally collected by our SDKs when integrated into User Software.

2. Data We Collect

2.1 Information from Users (Account Holders)

When you create an AuthVaultix account, we collect personal information that you voluntarily provide to us, including your email address, name, organization name, and hashed password. We also collect usage data (dashboard interactions, API calls) and communications sent to support.

2.2 Information from End Users

When End Users interact with User Software that integrates our SDKs or APIs, we may collect:

• License Information: License key, activation status, and seat usage for license validation.
• Device Identifiers: Hardware ID (HWID), device fingerprint, and unique device IDs for hardware-locked licensing.
• Network Information: IP address at the time of activation or validation for fraud prevention.

2.3 Automatically Collected Information

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity but may include device and usage information, such as your IP address, browser and device characteristics, operating system, and referral URLs.

3. How We Use Information

We process your information to provide, improve, and administer our Services. Specifically, we use data to:

• Provide the Service and process transactions.
• Perform license validation and enforcement.
• Provide customer support.
• Protect accounts from being accessed without proper authorization.
• Detect anomalies, protect against account sharing, and prevent fraud.
• Comply with legal obligations.

4. How We Share Information

We do not sell your personal information. We may share information in the following situations:

• With Users: We share End User data (license activation, device info, telemetry) with the User who issued the license. Users are data controllers for their End Users.
• Service Providers: We share data with trusted third-party vendors who assist in operating the Service, such as cloud infrastructure, payment processors, and analytics providers.
• Legal Requirements: To comply with legal processes, respond to lawful requests from authorities, or enforce our Terms of Service.
• Business Transfers: In connection with any merger, sale of company assets, financing, or acquisition.

5. Data Retention & Deletion

We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Notice unless otherwise required by law (such as tax, accounting, or other legal requirements). Upon account termination, we delete or anonymize personal data within 90 days, except as required for legal compliance.

End User data is retained according to the User account status. When a User's account is terminated, associated End User data is deleted accordingly.

6. Data Security

We implement industry-standard security measures, including encryption in transit (TLS 1.2+) and at rest, access controls, and regular security assessments. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security. You are responsible for maintaining the security of your account credentials and API keys.

7. User Responsibilities for End User Data

Users are independent data controllers for End User data they collect through User Software. AuthVaultix acts as a data processor on behalf of Users for End User data. Users are solely responsible for:

• Providing appropriate privacy notices to End Users.
• Obtaining all necessary consents from End Users.
• Responding to End User data subject requests (access, deletion, correction).
• Ensuring User Software complies with all applicable privacy laws.

8. International Data Transfers

Our servers are located in multiple regions globally to ensure low latency and high availability. By using the Service, you acknowledge that your data may be transferred to, stored by, and processed in our facilities and by third parties in countries that may have different data protection laws than your country of residence.

9. Cookies & Tracking

We use cookies and similar tracking technologies to gather information when you interact with our Services, maintain security, and assist with basic site functions. Most browsers allow you to control cookies through settings. Disabling cookies may affect Service functionality. We do not currently respond to "Do Not Track" signals.

10. Your Rights

Depending on your jurisdiction, you may have the right to review, change, or terminate your account at any time. You may also have rights to access your personal data, correct inaccurate data, delete your data, export your data, or withdraw consent. End Users should contact the User (the software developer) to exercise privacy rights.

To exercise your rights, please contact us using the information provided below.

11. Contact Us

If you have any questions or concerns about this Privacy Notice or our data practices, please contact us at:

Email: support@authvaultix.com