Privacy

Who is responsible

Jonas R, trading as Formzix is responsible for the personal data described here. Contact jonas@formzix.com about privacy or your data.

Accounts and computer activation

• Account: your email, account ID, account creation and verification details. Supabase provides authentication and password management.
• Licence: your plan, purchase reference, trial dates, update entitlement and activation status.
• Computer: a random installation ID, a computer label you choose, activation/check-in times and a stable, product-specific device identifier.

On Windows, Mesharo derives that device identifier by hashing the Windows MachineGuid with a Mesharo-specific prefix. The raw MachineGuid stays on your computer. The resulting identifier is still personal data when linked to your account; it is not anonymous.

We use these records to connect the right licence to your computer, enforce activation limits, prevent repeated trials and provide support. Activation and renewal send the relevant records over HTTPS. Saved activation credentials are protected with Windows account encryption. You can deactivate computers in your account. Signing out does not erase an existing licence or reset trial history.

Purchases, email and support

Stripe handles checkout and payment details. Formzix receives order references, plan, quantity, amount, currency and payment status; our licensing database does not store full card numbers or security codes. The current preview uses test payments.

Supabase and Resend deliver account verification and service emails. Railway hosts the website and licensing service. Google Workspace handles correspondence sent to Formzix. If you contact us, we process the message and files you choose to include. Do not send passwords, licence tokens or private projects unless they are needed for an agreed support investigation.

Why we process this data

We process account, purchase and activation information to provide the service you request and perform our contract with you. We rely on legitimate interests for proportionate security, fraud prevention and enforcing trial and device limits. Where financial record-keeping laws apply, we retain the required records to meet those obligations. Optional marketing would require a separate basis; creating an account is not a marketing subscription.

If you object to processing based on legitimate interests, contact us. We will assess your circumstances rather than treating the objection as an automatic rejection.

Cookies and technical records

The website uses authentication cookies to keep you signed in. The app stores settings, projects and licence state locally. Hosting, authentication, payment and email providers also process technical records such as IP addresses, request times and delivery status to operate and secure their services. This notice does not describe the hashed device identifier as a cookie or as anonymous analytics.

How long we keep records

Connection requests expire after 10 minutes and desktop account sessions after one hour. Expired connection, session and rate-limit records are removed by the licensing service’s regular cleanup while it is running, and at startup.

Account and licence records are kept while needed to provide your account and continuing licence rights. Trial history is kept to enforce the one-trial-per-account-and-computer limit; reinstalling or creating another account does not erase it. Purchase and administration records may also be needed for accounting, disputes or security investigations. These are not automatically deleted when you sign out or deactivate a computer.

You can request deletion or a review of retention. We assess what can be deleted and explain any records that must remain and why. Backups and provider-held records are included in that review; deleting a live record does not instantly remove every backup copy.

Service providers and international processing

We use the providers named above for their stated functions, and do not sell licensing records. Some processing may take place outside the European Economic Area. Such transfers require an applicable legal safeguard, such as an adequacy decision or standard contractual clauses. Contact us for the arrangements relevant to your data.

Closed beta applications

We store the name, email address, workflow, software and optional portfolio link you submit, your acceptance of the beta terms, and the review decision. You do not need an account to apply. If you later verify the same email, we connect your request to that account. We use these records to review your request, contact you about it, provide access and handle beta support. Administrators record reasons for access changes. This is not a marketing mailing-list signup. You can request deletion through the privacy contact below.

Your data and your choices

Contact jonas@formzix.com from your account email to request access, correction, deletion, restriction, portability where applicable, or to object. We may need to verify your identity. We normally respond within one month; if a permitted extension is needed, we will explain it within that month.

Account settings includes a download of your licensing records. For a complete request covering authentication, purchases, correspondence and provider records, contact us. Do not include your password.

You can complain to your local data protection authority, including the Dutch Autoriteit Persoonsgegevens. A request does not require giving up that right.