AshigrainPrivacy Policy
This policy explains how we handle personal data when you use the Ashigrain website, store, account and Mac plugin, including why we need it and how long we keep it. It also describes the iPhone and iPad app and the Android app, neither of which sends data to our servers.
Who is responsible
The controller of your personal data is Red Phoenix Team OÜ, registry code 17501315, Sepapaja tn 6, 15551 Tallinn, Estonia. For questions or requests about your personal data, contact [email protected]. More details are in the Legal notice.
What we collect
We store the following information to process purchases, provide your account and activate the plugin on your Mac:
| Record | What it contains | Why |
|---|---|---|
| Account | Your email address, a securely hashed form of your password (never the password itself), the language for your account emails, and when the account was created, confirmed and last changed | To let you sign in, see your licenses and downloads, manage your Macs, and email you in your language |
| Sign-up source | If you answer the optional question “How did you hear about Ashigrain?” when you create an account, the option you chose (such as search, YouTube, Reddit, a forum, an article, an AI assistant or a friend). It is stored with your account and left empty if you skip the question | To learn how people find Ashigrain. Only our operators see it, in our internal administration tool |
| Sessions | For each browser you sign in with: a hashed session identifier, your account, and when the session was created, last used and expires | To keep you signed in |
| Email tokens | For each email confirmation or password reset link: a hashed single-use token, your account, its purpose, and when it expires and was used | To confirm your email address and to let you reset a forgotten password |
| Orders | Your email address, your account, our order id, the Stripe payment references, amount, currency, status (for example paid, refunded or disputed), and when the order was created and last changed | To deliver your purchase and handle refunds and disputes |
| Licenses | For each license: its id, your account, the order it came from, the versions it unlocks, its status, and when it was created and revoked | To show your licenses, allow activation, and revoke a license after a refund, a dispute or account deletion |
| Activations | For each Mac a license is activated on: a machine identifier, the computer name the plugin reported, a hashed renewal secret, the license, and when the Mac was activated, last renewed and deactivated | To keep your license active on one Mac at a time, renew it, show you which Mac is active, and let you move or deactivate it |
| Device codes | For each activation attempt: a hashed device code, the short code shown in the plugin and on the website, the machine identifier, the computer name, the plugin version, the activation it was approved for, and when it expires and was collected | To link the Mac that asks for activation with the account that approves it in the browser |
| Download events | For each download: your account, the license if you have one, the version downloaded, a shortened form of your IP address, and the time | To enforce download limits, prevent abuse and investigate misuse |
The machine identifier is derived from your Mac’s hardware identifier in a way that does not reveal it. Because it identifies one Mac linked to your account, we treat it as personal data.
When you buy, the consent you give on the pricing page (immediate access and the loss of the right of withdrawal) is recorded with the time you gave it, as part of the Stripe checkout for your order.
We log payment notifications from Stripe to prevent duplicate processing. The log contains each event’s id and type, when it was received and processed, and any processing error.
Your full IP address is processed when your browser or the plugin calls our backend (for example to sign in, buy, download, activate or renew), to limit the rate of requests and block abuse. It passes through Cloudflare and our server, and we do not store it in our database.
Visitor statistics: on the website’s public pages we count visits with Umami, which we run ourselves; see Cookies and analytics.
What we never receive: your card or bank details, or your password in readable form. Payment data is handled by Stripe and Link.
What the plugin sends
The plugin connects to our server over an encrypted connection only to activate, renew or deactivate your licence. It sends no images, project data, usage statistics or crash reports.
| When | What it sends |
|---|---|
| You activate the plugin | The machine identifier, the Mac’s computer name and the plugin version; while it waits for your approval in the browser, only the device code it received |
| A host application loads the plugin while the Mac is online (renewal) | The activation id, the renewal secret and the machine identifier |
| You deactivate the plugin | The activation id and the renewal secret |
Each request also reaches us with your IP address, as described above. The plugin stores its activation data on your Mac, readable only by your macOS user.
Ashigrain for iPhone and iPad
The Ashigrain app for iPhone and iPad collects no personal data. It has no account, no analytics, no advertising and no tracking, and it never contacts our servers.
- Processing on your device. Your photos and videos are processed entirely on your iPhone or iPad. No image, video, project setting or usage statistic is sent to us or to anyone else.
- Photos. The app reads only the photos and videos you pick in the system photo picker. To save a result, it asks for permission to add new items to your library; it cannot see, change or delete anything already there. Files the app keeps while it works stay on your device.
- Free-export counter. The app counts how many free unwatermarked exports you have used. The count is stored only on your device and is never sent to us.
- Subscriptions. Purchases, free trials, renewals, cancellations and restores are handled by Apple through the App Store, and the app checks your subscription with Apple on the device. This is the app’s only network use. We receive no personal data about you from your purchase. Apple acts as an independent controller for that data under its own privacy policy.
- Information from Apple. Apple gives us anonymous, aggregated sales and download figures and, if you have chosen to share analytics with app developers, crash reports and usage statistics without your identity. We use them only to fix problems and improve the app.
Ashigrain for Android
The Ashigrain app for Android collects no personal data. It has no account, no analytics, no advertising and no tracking, and it never contacts our servers.
- Processing on your device. Your photos and videos are processed entirely on your phone or tablet. No image, video, project setting or usage statistic is sent to us or to anyone else.
- Photos. The app reads only the photos and videos you pick in the system photo picker; it does not ask for access to your photo library or device storage. Saving a result adds a new item to your gallery without access to anything already there; sharing happens only when you choose it. Files the app keeps while it works stay on your device.
- Free-export counter. The app counts how many free unwatermarked exports you have used. The count is kept on your device and, if device backup is turned on, by Google Play services so that it survives a reinstall. It is never sent to us.
- Subscriptions. Purchases, free trials, renewals, cancellations and restores are handled by Google through Google Play, and the app checks your subscription with Google Play on the device. This is the app’s only network use. We receive no personal data about you from your purchase. Google acts as an independent controller for that data under its own privacy policy.
- Information from Google. Google gives us anonymous, aggregated install and sales figures and, if you have chosen to share usage and diagnostics data, crash and stability reports without your identity. We use them only to fix problems and improve the app.
The mobile apps work independently of your Ashigrain account and Mac licence. Their use is not recorded in the records listed above.
Cookies and analytics
When you sign in, the website sets one strictly necessary cookie, __Host-ag_session, which keeps you signed in. If you pick a language in the language menu, your browser keeps that choice in its local storage (ashigrain.language); the stored value is not sent to us. If you are signed in, the language you pick also becomes the language of your account emails. The website uses no advertising or tracking cookies. The Cookie Notice has the details.
To understand how visitors find and use the website, its public pages load Umami, an analytics tool we host ourselves on our own server (stats.ashigrain.com). Umami sets no cookies, stores nothing in your browser and does not track you across other websites. It is not loaded on the account pages (including sign-in and registration), the activation and purchase confirmation pages, or the “page not found” page, and it receives no information about your account. For each page view, Umami records:
- the address of the page, including its query string (for example campaign parameters such as
utm_source), and the address of the page that linked to it; - your browser, operating system and device type, screen size and browser language;
- your approximate location (country, region and city), derived from your IP address.
Umami does not store your IP address in its statistics. To count visits without cookies, it combines your IP address, your browser’s user agent and a secret value that is changed regularly into a hashed visit identifier. When the secret changes, the identifier changes too, so visits are not linked across those periods. We use these statistics only in aggregate, for example to see which pages are read and which sites send visitors, and we do not use them to identify you.
Processors and other recipients
| Provider | Role | Data | Location |
|---|---|---|---|
| Scaleway SAS | Hosting our own server, which runs the website, the backend, its database and the plugin downloads (processor) | All records above, and request data including IP addresses | France (EU) |
| Umami (self-hosted) | Visitor statistics for the website, run as software on our own Scaleway server; no data is sent to Umami’s developers or any other provider | The page-view data described under Cookies and analytics | France (EU) |
| Cloudflare, Inc. | DNS and the network proxy in front of our server, which protects it against attacks (processor) | Request data passing through, including IP addresses | Global network; Cloudflare is certified under the EU–US Data Privacy Framework |
| Resend (Plus Five Five, Inc.) | Sending our transactional emails, such as email confirmation, password reset, purchase, refund and account deletion notices (processor) | Your email address and the content of those emails | United States; transfers rely on the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses |
| Stripe and Link (Sold through Link, LLC) | Payment processing; Link is the merchant of record for your purchase (independent controller for payment, tax, fraud-prevention and receipt data) | Everything you enter at checkout; we receive your email, the payment status and ids | Stripe’s own privacy policy applies |
| Apple | Selling and billing the iPhone and iPad subscription (independent controller) | Whatever you give Apple; we receive no personal data from it | Apple’s own privacy policy applies |
| Selling and billing the Android subscription through Google Play (independent controller) | Whatever you give Google; we receive no personal data from it | Google’s own privacy policy applies |
Each processor handles data only on our instructions and under a data processing agreement. We do not sell your data or share it for advertising. We may disclose data to authorities, courts or our professional advisers where the law requires it or where it is needed to establish, exercise or defend legal claims.
Legal basis
- Performing the contract with you (GDPR Art. 6(1)(b)): your account, sessions and the session cookie, email tokens, orders, licenses, activations, device codes, and the account, purchase and refund emails. Activating the plugin on one Mac at a time is part of the license you buy (see the EULA), and the machine identifier, computer name and plugin version are needed for it.
- Legal obligations (Art. 6(1)(c)): keeping order records for as long as accounting and tax law requires, and the record of your consent to immediate supply.
- Legitimate interests (Art. 6(1)(f)): download events, rate limiting and the network protection described above, to prevent abuse and keep the service secure; the aggregate visitor statistics described under Cookies and analytics, to understand how people find and use the website; the payment notification log; the anonymous app statistics Apple and Google share with us; and keeping the records needed to establish, exercise or defend legal claims, for example in a dispute, chargeback or case of misuse. You can object to processing based on legitimate interests (see Your rights).
- Consent (Art. 6(1)(a)): your answer to the optional sign-up question “How did you hear about Ashigrain?”, which you give only by choosing an option. You can withdraw it by writing to us, and we will remove the answer.
Creating an account requires an email address and password. An account is required to purchase and activate the plugin.
We make no decisions about you based solely on automated processing.
How long we keep data
| Record | Retention |
|---|---|
| Account | Until you delete it |
| Sign-up source | Until you delete your account or ask us to remove it |
| Sessions | Until you sign out, reset your password or delete your account (a password change ends your other sessions); expired sessions are deleted periodically |
| Email tokens | Until your account is deleted; used or expired tokens are deleted periodically |
| Device codes | Deleted periodically after they expire |
| Activations | While the license is active; an ended activation is deleted 12 months after it ended |
| Download events | 12 months, then deleted |
| Orders and licenses | 7 years from the end of the financial year of the purchase, as the Estonian Accounting Act requires for accounting records |
| Stripe notification log | 12 months, then deleted |
| Visitor statistics (Umami) | 24 months, then deleted |
Where a record is needed to establish, exercise or defend a legal claim, we may keep it until the matter is resolved. Stripe, Link, Apple, Google, Scaleway, Cloudflare and Resend keep their own records under their own policies.
Deleting your account
To delete your account, open your account page and confirm with your password. Deleting your account:
- revokes all your licenses and ends their activations, so the plugin stops working as a licensed copy at its next online check, and at the latest 30 days after its last renewal;
- deletes your sessions, your email tokens and the account record, including your sign-up source answer;
- keeps your orders for the accounting record, with your email address replaced by a placeholder and the link to your account removed;
- sends a confirmation to the account’s email address.
Revoked licenses stay linked to their anonymised orders. Activations and device codes of those licenses, and your download events, are no longer linked to any account and are deleted at the end of the periods above.
Account deletion is permanent and ends your right to use and download Ashigrain.
Your rights
Under the GDPR you can ask us for access to your data, its correction or deletion, restriction of its processing, a portable copy of it, and you can object to processing based on legitimate interests. You can see your account, licenses and activated Mac on your account page, and delete your account there yourself. For anything else, write to [email protected] from the email address of your account. We answer within the time limits the GDPR sets. We may need to keep records that the law requires us to keep or that are needed for legal claims.
You can also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), aki.ee, or to the data protection authority in the EU country where you live or work.
Changes
We may update this policy when our services or data practices change. We will inform you of significant changes in an appropriate way, for example on the website or by email. The date at the top shows the latest revision.