Privacy Policy

1. Data Controller

OSPHERIX is the data controller for the website and licensing services available at ospherix.com. For privacy requests, contact sales@ospherix.com.

2. What Data We Collect

• Account and order data: email address (if provided), offer selected, license ID, product(s), and plan details.
• Licensing and activation data: machine/device ID, optional fingerprint hash, app version, activation checks, IP address, timestamp, and security events (for anti-abuse and fraud prevention).
• Payment data: payment status and transaction references through Stripe. We do not store full card numbers or card CVV data.
• Website analytics and marketing events: only after consent, using anonymized or aggregated configurations where available.
• Support/contact data submitted through forms or support channels.

3. Why We Process Data (Legal Basis)

• Contract performance: create licenses, validate entitlements, deliver downloads.
• Legitimate interests: service security, fraud prevention, abuse mitigation, audit trail.
• Legal obligations: accounting, tax, and compliance records.
• Consent: analytics/marketing cookies and pixels.

4. Payments (Stripe)

Payments are processed by Stripe. Stripe acts as an independent payment processor and may process personal data under its own privacy policy and terms. OSPHERIX receives only the minimum payment metadata required to confirm order status and issue licenses.

5. Licensing Data Retention

• Active full licenses and related logs: retained for the license term plus 24 months.
• Demo and trial licensing records: retained up to 12 months.
• Allow-list and anti-fraud records: retained while needed for security enforcement.
• Financial/legal records linked to orders: retained up to 10 years where legally required.
• Cookie consent records: retained for up to 12 months or until renewed.

6. Cookies, Analytics, and Pixels

We use a consent manager with three categories: Necessary, Analytics, and Marketing.

• Necessary cookies are always on and support core website operation.
• Analytics (Google Analytics) loads only after consent and uses anonymized IP settings.
• Marketing (Meta Pixel, TikTok Pixel) loads only after consent and avoids sensitive payloads.

You can change your cookie choices at any time via Cookie settings in the footer or floating button.

7. Data Sharing and Processors

We share data only with processors required to operate the service, such as:

• Stripe (payments),
• Firebase/Google Cloud (licensing API, database, hosting components),
• Cloudflare R2 (secure file delivery),
• Email delivery providers (for license delivery emails, when enabled).

Each provider is used under contractual terms and security controls appropriate to the service.

8. Security and Abuse Protection

We apply technical and organizational safeguards (access control, secret management, signed license flows, audit logging, and transport encryption). No internet system is 100% risk-free, but we minimize exposure and enforce anti-abuse controls.

If abuse, unauthorized license sharing, fraud, or chargeback risk is detected, we may suspend access, revoke downloads, and retain relevant logs for dispute resolution and legal defense.

9. Your Rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability, or objection regarding your data. You may also withdraw consent for non-essential cookies.

10. Children

Our services are intended for business operators and are not directed to children under 16.

11. Policy Updates

We may update this policy when legal, technical, or product changes require it. The latest version and date are published on this page.