Privacy Policy

1. Overview

Licentra ("we", "us", "our") operates a software license management platform. We are committed to protecting your personal data and respecting your privacy in compliance with applicable data protection laws.

This policy describes how we collect, use, store, and protect information when you use our website, dashboard, or API. It applies to all users including developers, organizations, and end-customers.

2. Data We Collect

2.1 Account Information

When you register for Licentra, we collect:

• Full name and email address
• Company or organization name
• Password (stored as a bcrypt hash — never in plain text)
• Billing address and payment method details (processed by our payment provider — we never store raw card numbers)

2.2 Usage Data

We automatically collect certain technical information when you interact with our platform:

• IP address and browser type / version
• Pages visited and features used within the dashboard
• License activation events (domain, timestamp, software version)
• API request logs (endpoint, response time, HTTP status code)

2.3 Customer License Data

If you sell products using Licentra, we store data about your customers' license activations on your behalf. You are the data controller for this information; we act solely as a data processor.

3. How We Use Your Data

We use the information we collect for the following purposes:

• Providing the service — account management, license generation, update delivery, and API access
• Billing & payments — processing subscription fees and generating invoices
• Security — detecting fraud, unauthorized access, and abuse
• Support — responding to your questions and resolving technical issues
• Product improvement — analyzing anonymized, aggregated usage patterns to improve features
• Legal compliance — fulfilling our obligations under applicable laws and regulations

We do not sell your personal data to third parties, and we do not use it for targeted behavioral advertising.

4. Data Sharing

We share your data only in the following limited circumstances:

• Payment processors — Paymob and Stripe process payment transactions. They receive only the minimum data required to complete transactions.
• Infrastructure providers — We use cloud hosting. All data is encrypted in transit and at rest.
• Legal requirements — We may disclose data if required by law, court order, or to protect the rights and safety of users.
• Business transfers — In the event of a merger or acquisition, your data may be transferred. We will notify you at least 30 days in advance.

We require all third-party processors to handle your data in compliance with applicable privacy laws and to implement adequate security measures.

5. Cookies

We use cookies and similar technologies to operate and improve our service:

• Essential cookies — Required for authentication and session management. These cannot be disabled as they are necessary for the platform to function.
• Analytics cookies — Help us understand how the dashboard is used. All data is anonymized. You can opt out in your account settings.
• Preference cookies — Remember your UI settings such as language and display preferences.

You can manage cookies through your browser settings. Note that disabling essential cookies may prevent you from using the platform.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the service:

• Account data is retained for the duration of your subscription, plus 30 days after cancellation
• Billing records are retained for 7 years as required by financial regulations
• License activation logs are retained for 2 years
• API access logs are retained for 90 days

You may request deletion of your account and associated data at any time by contacting us (see Section 7).

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — Request a copy of the personal data we hold about you
• Rectification — Request correction of inaccurate or incomplete data
• Erasure — Request deletion of your personal data ("right to be forgotten")
• Portability — Receive your data in a structured, machine-readable format
• Restriction — Limit how we process your data in certain circumstances
• Objection — Object to processing based on legitimate interests

To exercise any of these rights, email [email protected] or use the contact form. We will respond within 30 days.

8. Data Security

We implement industry-standard security measures to protect your data. For a full overview of our security practices, please see our Security Policy. Key measures include:

• All data encrypted in transit using TLS 1.3
• Data at rest encrypted using AES-256
• Passwords hashed with bcrypt (cost factor 12)
• Access to production data restricted to authorized personnel with MFA
• Regular third-party security audits

9. Children's Privacy

Licentra is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact [email protected] and we will delete it promptly.

10. Policy Changes

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by email and display a notice in your dashboard at least 14 days before the changes take effect. Continued use of Licentra after the effective date constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your data: