1. Who we are
The data controller is Guido Pardini, sole proprietor (P.IVA 02644510469), Via Giovanni Duprè 46, 50131 Florence (FI), Italy, trading as Oibo ("we," "us"). Contact: customer.oibo@gmail.com.
2. What we collect and why
| Data | Purpose | Legal basis |
|---|---|---|
| Hashed device identifier (SHA-256 of an identifier assigned to your computer by its hardware or operating system, computed on your Device; the raw identifier never leaves your Device). It is sent with each license activation, validation and deactivation, and LemonSqueezy records it as the name of the activation | Bind a paid or Trial license to one Device; limit the free Trial to one per Device | Performance of contract (license binding); legitimate interest — fraud and abuse prevention (Trial limit) |
| License key, license variant, instance ID, activation, validation and expiry timestamps | Operate and validate your license | Performance of contract |
| IP address, when the Software contacts our licensing server | Rate limiting and abuse prevention; standard server logs | Legitimate interest (security) |
| Email address and checkout details, including for the free Trial checkout at a price of zero | Issue your License Key, send receipts | Performance of contract (processed by LemonSqueezy, our reseller and Merchant of Record) |
| Email address (optional further use) | Product update announcements | Consent, collected at checkout with a clear opt-out |
| Contact form submissions (name, email, message) | Respond to your inquiry | Legitimate interest / consent |
We never collect the content of your Illustrator files. The Software makes no network calls other than those needed to activate, validate or deactivate your license. Starting the free Trial or buying a license happens in your web browser, on LemonSqueezy's checkout, not inside the Software.
3. Sub-processors
| Provider | Role | Location |
|---|---|---|
| LemonSqueezy, Inc. | Payment processing, Merchant of Record, License Key issuance (including free Trial keys), license activation records (including the hashed device identifier), transactional email | USA (Standard Contractual Clauses apply) |
| Vercel Inc. | Hosting of our license-validation backend (serverless functions) | USA/EU regions |
| Upstash, Inc. | Database storing Trial anti-abuse records and rate-limiting counters | USA (Standard Contractual Clauses apply) |
| Cloudflare, Inc. | Website hosting | Global network, EU-region prioritized where possible |
| Web3Forms | Contact form processing | EU/USA |
Where a sub-processor is located outside the EU/EEA, transfers rely on Standard Contractual Clauses or an equivalent adequacy mechanism.
4. Retention
Trial anti-abuse records (the hashed device identifier and the ID of the Trial License Key it is bound to) are kept in our database for 95 days from the Trial's activation, then automatically deleted. Our licensing server stores no other license data; license activation records, including the hashed device identifier, are kept by LemonSqueezy with your License Key. Rate-limiting counters are kept for about two minutes. Server logs are retained by our hosting provider for a short, limited period. Purchase records are retained as required by Italian tax law, independently of this policy, by LemonSqueezy as Merchant of Record. Contact form messages are kept only as long as needed to resolve your inquiry.
5. Your rights (GDPR)
If you are in the EU/EEA (or another jurisdiction with similar rights), you may request access to, correction of, deletion of, or a copy of your personal data, and may object to or restrict certain processing. To exercise these rights, contact customer.oibo@gmail.com. You may also lodge a complaint with your local data protection authority (in Italy, the Garante per la Protezione dei Dati Personali).
Given the scale of our processing, we are not required to appoint a Data Protection Officer or carry out a formal Data Protection Impact Assessment.
6. Children
The Software and website are not directed at, and we do not knowingly collect data from, individuals under 16 years of age.
7. Cookies
Our website does not use cookies. The contact form is protected against spam without cookies or captchas. See our Cookie Policy for details.
8. Security
Data in transit is encrypted (HTTPS/TLS). We do not access the content of your files as part of normal operation. Access to license and trial data is limited to what is needed to run the service. The Software contains no API keys or credentials; all communication with LemonSqueezy goes through our own licensing server.
9. Changes to this policy
We may update this policy from time to time; the current version is always available on our website.