Legal

Privacy policy

Who is responsible. The operator named in the imprint. Contact: noreply@ucagg.de.

What we process and why

• Account: your email address, optional name, and a scrypt hash of your password if you set one (never the password itself) - to give you an account and a licence. Legal basis: the contract with you (Art. 6(1)(b) GDPR).
• Sign-in codes and reset links: stored only as hashes, valid for 15 minutes / 1 hour.
• Linked PCs: for each PC you link: a machine identifier generated by the app, the PC name, the app version, the time it last checked its licence and its IP address - to enforce the limit of 3 PCs and to let you unlink them (Art. 6(1)(b) GDPR). To allow only one free trial per PC and per mailbox we keep a one-way hash of the machine identifier and of your normalised email address, also after an account is deleted (Art. 6(1)(f) GDPR, our legitimate interest in preventing trial abuse).
• Subscription: plan, subscription status, renewal date and the Dodo customer and subscription IDs, received from Dodo Payments (Art. 6(1)(b) GDPR). We never see or store your card details.
• Emails: a copy of every email we send you (sign-in codes, trial reminders, subscription notices) is kept in our outbox log for support and troubleshooting.
• Server logs: IP address and request details for security and abuse prevention, kept for a short time (Art. 6(1)(f) GDPR).

Your desktop stays yours. The app does not upload your files, file names or desktop layout. It only sends the licence check described above.

Where your data is processed - outside the EU

This service runs on a server rented from IONOS SE (Elgendorfer Str. 57, 56410 Montabaur, Germany) that is located in an IONOS data centre in Kansas City, USA. Your data is therefore stored and processed outside the European Union. The transfer is covered by a data processing agreement with IONOS that includes the EU Standard Contractual Clauses (Art. 46 GDPR). Emails are sent and received through IONOS mail servers.

Who else receives data

• IONOS - hosting and email, as our processor.
• Dodo Payments - payments, as merchant of record: they process your payment and billing details under their own privacy policy.
• UCA ID (ucagg.de) - if you use more than one UCA product, your email, name, plan and licence status are shared with the UCA account hub run by the same operator, so you can see all your UCA products in one place.

No advertising networks, no analytics, no tracking, no data sales.

Cookies

Two technically necessary cookies: a session cookie that keeps you signed in, and a security cookie that protects forms against cross-site request forgery. No tracking cookies, so there is no cookie banner.

How long we keep data

Account, linked PCs and the email log: until you delete your account (Account > Delete account) - then they are deleted from this server; the trial hashes described above remain. Invoices and payment records are kept by Dodo Payments as required by tax law.

Your rights

You can ask for access to your data, correction, deletion, restriction, data portability, and object to processing (Art. 15-21 GDPR). You can also complain to a data protection supervisory authority.

Last updated: 21 October 2026