Privacy policy

qkit is operated by MB „Big Biznis“, company code 308170961, registered in the Register of Legal Entities of the Republic of Lithuania, Kuosų g. 9, LT-10312 Vilnius, Lithuania. We are the controller of the personal data described in this policy.

For any privacy question, contact us at [email protected].

Newsletter

• Data: your email address, when you signed up and confirmed, the version of the consent text you agreed to, and one-time codes used to confirm your subscription and to unsubscribe.
• Purpose: to email you about qkit launches and product updates.
• Legal basis: your consent (Art. 6(1)(a) GDPR), which you give by confirming the link in our confirmation email.
• Retention: until you unsubscribe, at which point your email address is deleted immediately. If you never confirm, your sign-up is deleted within a day after the 48-hour confirmation link expires.

Running and protecting the website

• Data: your IP address, browser and device information, the pages you request, and when you request them.
• Purpose: to deliver the website, protect it against abuse, and find and fix errors.
• Legal basis: our legitimate interest in operating a secure and reliable website (Art. 6(1)(f) GDPR).
• Retention: to prevent abuse, your IP address and a one-way hash of your email address are held in memory for no longer than 24 hours. Neither is written to our database or logs. Our server logs do not contain IP addresses or email addresses. Error reports are kept by our error monitoring provider for no longer than 90 days and exclude IP addresses, cookies, request headers and form contents.

Contacting us

If you email us, we use your email address and the content of your message to reply, based on our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). We keep the correspondence for as long as needed to handle your request, and no longer than three years.

Buying through Paddle

qkit is sold through Paddle.com Market Limited (Paddle.com Inc. in the United States, Paddle.com (Canada) Ltd. in Canada), our authorised reseller, which processes your order and payment. Paddle is responsible for the payment details and other information you enter at checkout, under its own Privacy Notice. We never receive your card details.

After a purchase, Paddle shares with us what we need to deliver your licence: your name, your email address, the order's transaction and customer IDs, and what you bought.

Licences and activation

• Data: your name and email address, your licence key (which contains your name and email address, so qkit can show who it is licensed to), the Paddle transaction and customer IDs, and the licence's status. For each computer you activate: identifiers qkit creates for it or derives from its hardware, the computer's name, the qkit version, activation dates, and how often these change. For downloads of the full version: the file, the time and a one-way hash of your IP address.
• Purpose: to deliver your licence and downloads, activate qkit, send your key again when you ask, act on refunds and chargebacks, and prevent misuse of licence keys and download links.
• Legal basis: providing the licence you bought (Art. 6(1)(b) GDPR), and our legitimate interest in preventing misuse of licence keys and download links (Art. 6(1)(f) GDPR).
• Retention: licence records are kept as long as your licence exists, because they prove your purchase and let you activate qkit again. A deactivated computer is deleted 30 days after deactivation. Download records are deleted after 90 days. When qkit activates or checks in, your IP address is held in memory for no longer than 1 hour to prevent abuse, and is not stored.

Sending your licence again

When you ask for your licence on the downloads page, we use the email address you enter to find your licence keys and send them with fresh download links (Art. 6(1)(b) GDPR). The address is not stored. To prevent abuse, your IP address and a one-way hash of the email address are held in memory for no longer than 24 hours (Art. 6(1)(f) GDPR).

We use the following service providers. Each processes data only on our instructions, under a data processing agreement. We do not sell your data or share it for advertising.

Hetzner Online GmbH (Germany)

Hosting of our web server, licence server and databases.

Data is stored in the EU.

Cloudflare, Inc. (USA)

Delivering the website, DNS, protection against attacks and abuse, and access control for our internal admin area.

Global network. Transfers are covered by the EU–US Data Privacy Framework and Standard Contractual Clauses.

Resend (USA)

Sending confirmation, newsletter and licence emails.

Data is stored in the USA. Transfers are covered by the EU–US Data Privacy Framework and Standard Contractual Clauses.

Functional Software, Inc., doing business as Sentry (USA)

Error monitoring, so we can find and fix technical problems.

Data is stored in Sentry's EU data region. Transfers are covered by the EU–US Data Privacy Framework and Standard Contractual Clauses.

Migadu-Mail GmbH (Switzerland)

Hosting the mailbox that receives and sends our email.

Switzerland is recognised by the European Commission as providing adequate data protection.

Where data is transferred outside the European Economic Area, it is protected by the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses (Art. 45 GDPR and Art. 46 GDPR). You can ask us for a copy of these safeguards.

We do not use analytics, advertising or tracking cookies. Cloudflare may set strictly necessary security cookies to tell real visitors apart from automated traffic. These do not require consent.

Under the GDPR you have the right to:

• access the personal data we hold about you and get a copy of it;
• have inaccurate data corrected;
• have your data deleted;
• restrict how we process your data;
• receive your data in a portable format;
• object to processing based on our legitimate interests;
• withdraw your consent at any time, without affecting processing that took place before you withdrew it.

To unsubscribe, use the link in any newsletter email or email us. For any other request, email [email protected]. We reply within one month.

For the checkout and payment data Paddle holds, contact Paddle at [email protected].

You can also lodge a complaint with the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija), L. Sapiegos g. 17, 10312 Vilnius, Lithuania, vdai.lrv.lt.

• Giving us your email address is voluntary. Without it we cannot send you the newsletter or deliver your licence.
• We do not use your data for automated decision-making or profiling.
• This website is not directed at children under 14, and we do not knowingly collect their data.
• If we change this policy, we will update this page and its date. If a change affects how we use your newsletter data, we will also tell you by email.