Controller
Alcyone Systems OÜ, registry code 17546559, Estonia, is controller for data it receives through this website, entitlement delivery and support. Contact sales@alcyone-systems.com.
What we process
We process contact details you submit, Paddle customer, transaction and invoice identifiers, accepted contract versions, entitlement and activation identifiers, delivery status and security audit timestamps. An optional bug report contains the minimized product description, environment and random tracking identifier you submit. It does not ask for an email address. We do not store card numbers, billing addresses in the entitlement database, test data or customer credentials.
Purposes and legal bases
Data is used to perform the purchase and license agreement, prevent abuse, provide recovery and support, meet accounting duties and respond to inquiries. Optional analytics and advertising measurement require consent and start disabled.
Recipients and transfers
Cloudflare hosts the site and entitlement service. Sanitized bug reports are moved into Alcyone Systems' private GitHub engineering repository for triage. Paddle processes checkout as merchant of record. Google receives analytics data only after consent. Business email, accounting and payout providers receive the minimum records needed for those services. See Subprocessors.
Retention
Commerce orders, accepted contract versions and financial evidence are retained for seven years as required for Estonian accounting records. The browser copy of an order claim lasts only for the browser session. Delivered bug-report staging rows are removed from Cloudflare D1 after 90 days; the private engineering issue is kept as needed to diagnose, fix and audit the product defect. Security and activation records are retained while the entitlement is active and then according to legal and dispute needs.
Your rights
Depending on applicable law, you may request access, correction, deletion, restriction, portability or objection, and withdraw consent at any time. You may complain to the Estonian Data Protection Inspectorate or your local authority. Contract and accounting records may need to be retained despite a deletion request.
Tester appliance data
Test suites, credentials, screenshots and reports inside a customer's self-hosted Tester appliance do not reach Alcyone Systems unless the customer intentionally sends a support bundle.