Privacy notice
Needs legal review
This is placeholder text, not a finished policy. Do not publish it as the terms of a live offer until a lawyer has reviewed it. Seller: DENARO EMANUELE, ditta individuale, Italy. Intended tax position: regime forfettario, no VAT charged. Confirm that position in the review.
This draft matches the current build
The notes below describe this website as it is written today, plus the desktop product as it is meant to work. TODO: a complete GDPR notice, with a contact, a retention table, and the process for access, correction, deletion, and complaints.
The desktop app
Mousegeist is designed to run on the buyer's PC. Clicks, typing, screenshots, the accessibility tree, and the audit log stay on that machine. This website does not receive the screen. TODO: if the app later sends crash reports or update checks that include identifiers, describe them here before shipping that behavior.
The website
This version of the site has no account system and sets no analytics cookies of its own. Buying redirects to Stripe Checkout. Stripe processes the card and collects the email address.
What the webhook stores
When Stripe reports a settled payment, the server logs the checkout session id, the email, the amount, the currency, and whether the event came from live mode. That log exists because the license email is not connected yet. TODO: move this to a database, decide how long it is kept, and name who can read it.
License, when it exists
The planned record is the key, the email, the plan (Personal or Team), and for Team the seat count. The minimum Team purchase is 3 seats. TODO: the data store, the machine identifiers, and how a company adds or removes a seat.
Processor
Stripe Payments Europe, or the Stripe entity on the seller's agreement, processes the payment. TODO: link the current Stripe DPA and list any email provider added later.
Contact
TODO: privacy contact for DENARO EMANUELE. Address, email, and PEC are not published yet.