1) Scope
This policy explains how NinjaLicense collects, uses, shares, and safeguards information when you use our website, dashboard, vendor tools, and licensing services (the "Service").
2) Information We Collect
- Account data: name, username, email, password hash, and authentication details.
- Billing and transaction data: payment status, Stripe customer IDs, and payout details; we do not store full card numbers.
- Product and license data: products purchased, license status, machine identifiers, activation history, and subscription status.
- Usage and device data: IP address, timestamps, device identifiers, browser type, and log data.
- Support data: messages, attachments, and related troubleshooting details you provide.
- Vendor data: business details, payout settings, tax or identity information required by Stripe Connect.
- Communications: email delivery events, suppression lists, and unsubscribe preferences.
3) Sources of Information
- Directly from you when you create accounts, purchase products, or contact support.
- Automatically from your device and browser when you use the Service.
- From service providers such as Stripe and Postmark for payment and email events.
- From Vendors when they fulfill licenses or provide support.
4) How We Use Information
- Provide and secure licensing, activations, subscriptions, and vendor tools.
- Process payments, payouts, refunds, and fraud prevention.
- Operate, maintain, troubleshoot, and improve the Service.
- Communicate account, billing, and security notices.
- Enforce our Terms, comply with legal obligations, and protect users.
5) Cookies and Tracking
We use essential cookies for authentication and session security. We may use aggregated metrics and server logs to monitor performance, reliability, and abuse. You can control cookies through your browser settings, but disabling cookies may limit functionality.
6) How We Share Information
- Service providers: Stripe for payments, Postmark for email delivery, and cloud storage providers for file hosting.
- Vendors/Sellers: limited data needed to fulfill licensing, support, and compliance for their products.
- Legal and safety: to comply with law, enforce agreements, respond to lawful requests, or protect users.
- Business transfers: in connection with a merger, acquisition, or asset sale.
- We do not sell personal data.
7) Data Security
We use reasonable administrative, technical, and physical safeguards to protect information. No method is 100% secure, and we cannot guarantee absolute security. Report issues via Contact.
8) Data Retention
We retain information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Logs may be rotated and trimmed.
9) Your Choices and Controls
- Access, update, or delete account data where available in your dashboard.
- Cancel subscriptions at any time via your account or Stripe-managed billing.
- Manage marketing preferences through unsubscribe links or by contacting us.
- Contact us to exercise other rights that may apply to you.
10) California Privacy Notice
This section applies to California residents under the CCPA/CPRA. We collect the categories of personal information described above, including identifiers, commercial information, internet activity, and inferences based on your use of the Service. We use this information for the purposes described in this policy and retain it as described above.
- Rights: request access, deletion, and correction of your personal information.
- Opt-out: we do not sell or share personal information for cross-context behavioral advertising.
- Sensitive information: we do not use or disclose sensitive personal information for purposes that require a "limit" request.
- Authorized agents: you may use an authorized agent to make a request; we will verify your identity.
- Non-discrimination: we will not discriminate for exercising your rights.
11) Children
The Service is not directed to children under 13, and we do not knowingly collect personal information from children.
12) International Users
If you access the Service from outside the United States, your information may be processed in the United States where data protection laws may differ from those in your jurisdiction.
13) Changes
We may update this policy from time to time. Material changes will be noted by updating the date above and, when appropriate, by additional notice.
14) Contact
Questions about privacy or rights requests: Contact us.