Legal

Privacy notice

Effective 2026-08-31 · Operator [PRIVATE BETA OPERATOR - FINAL IDENTITY PENDING] · Governing jurisdiction [PRIVATE BETA - FINAL JURISDICTION PENDING]

This is a complete operational draft, but publication as final terms is blocked until the operator's legal identity, jurisdiction, and effective date are configured.

Data we process

We process account identity and contact details, salted password hashes, TOTP configuration encrypted at rest, reseller application and transaction records, license state, product entitlements, support communications, security events, and minimal request metadata.

Device binding

Hub derives a SHA-256 identifier locally from a Windows installation value. Raw hardware serials, MAC addresses, disk serials, and the raw installation value are not transmitted. The service applies a secret HMAC and stores only that representation.

Purposes and legal basis

Data supports contract delivery, account security, fraud and abuse prevention, support, compliance, and legitimate operational analysis. We do not sell personal information.

Retention and disclosure

Records are kept only as long as needed for service, security, accounting, legal, and dispute purposes. Immutable audit entries may outlive an active account where required for integrity. Data is disclosed only to infrastructure processors, authorities where legally required, or a successor subject to equivalent protections.

Your choices

Subject to [PRIVATE BETA - FINAL JURISDICTION PENDING] law, you may request access, correction, deletion, restriction, or portability by contacting legal@capyware.app. Some accounting, security, and audit records cannot be erased immediately where law or system integrity requires retention.