AVESTEIN ("we") runs avestein.com, AVESTEIN Connect and AVESTEIN plugins. This policy explains what personal data we collect, why, who helps us process it, and your rights. We collect as little as we can, we never sell your data, and we don't use advertising or tracking cookies.
What we collect
- Your account: your email address, your password (stored only as a salted, one-way hash: we never see or keep the password itself) and, if you give it at checkout, your name.
- Support messages: what you write to us in Support, and our answers.
- Purchases: what you bought, the amount, the date, and Stripe's reference for the payment. Your card details go directly to Stripe and never reach us.
- Licenses and activations: your license keys; for each computer you activate, an identifier derived from (a one-way hash of) that computer's hardware, the computer's name, and when it was activated and last checked in.
- Refill requests: the reason you write, and our answer.
- Security logs: sign-ins, activations and changes to licenses, with the IP address they came from, to protect your account and spot shared or stolen keys.
- Free trials: which plugins you tried, when, and the computer identifier and internet address they were started from, so each person and computer gets one trial.
- Plugins and Connect: when activating, starting a trial, checking a license (about once a week, daily during a trial), or checking for updates, they send the license key, the computer identifier and name, and the product. They don't send your audio, projects, or anything about how you use them.
Why we use it
- To sell you licenses and deliver them (performing our contract with you).
- To run your account, activate your plugins, and enforce the license terms, including the three-computer limit (contract and our legitimate interest in preventing piracy).
- To email you about your purchases, trials, account codes, support messages and refill requests. We don't send marketing email unless you ask for it.
- To keep records the law requires (for example tax records of sales).
Who processes it for us
- Cloudflare hosts the website, the database and the downloads.
- Stripe processes payments and acts as the reseller (merchant of record) of your purchase, collecting the name, billing address and email it needs to charge the right sales tax or VAT, under its own privacy policy.
- Resend sends our emails.
These providers may process data in the United States and other countries, under appropriate safeguards such as the EU Standard Contractual Clauses. We share data with others only if the law requires it.
Cookies
We use one cookie, only when you sign in, to keep you signed in. It's strictly necessary, so it needs no consent banner. There are no analytics, advertising or third-party cookies, and the site loads no third-party scripts or fonts.
How long we keep it
Account, license and purchase records are kept while your account exists and as long as the law requires for sales records (typically up to 7 years). Codes we email expire after 15 minutes; sign-ins after 30 days (180 days in AVESTEIN Connect). Daily database backups are kept for 35 days.
Your rights
Depending on where you live (for example under the GDPR in the EU and UK, or the CCPA in California) you may ask us to access, correct, export or delete your data, or object to or restrict how we use it. Deleting your account deletes your licenses too. Email [email protected] from your account's address; we answer within 30 days. You may also complain to your data protection authority.
Security
Everything is sent over HTTPS. Passwords, emailed codes and sign-ins are stored only as hashes, and licenses are signed so they can't be forged. No system is perfectly secure, but we work to protect your data and will tell you promptly if a breach affects you.
Children
AVESTEIN isn't directed at children under 16, and we don't knowingly collect their data.
Changes
If we change this policy, we'll post the new version here with a new effective date, and tell you by email about significant changes.
Contact
AVESTEIN, [email protected].