This Privacy Policy explains how Zentru Systems e.U. ("I", "me", or "my") collects, uses, and protects your personal data when you use my macOS application (the "App") and my associated web checkout services (the "Service").

I am committed to processing your data in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

1. Data Controller

For the purpose of the GDPR, the data controller is:

Zentru Systems e.U.

Laurenzgasse 13/11

Austria

Email: service@zentru.systems

2. Data Stored Locally on Your Device

I strongly believe in data minimization. Any data you knowingly create inside the App—including your application settings, preferences, and local configurations—is stored strictly locally on your macOS device.

This data never leaves your machine.
I do not operate external application servers, databases, or cloud syncing mechanisms to store your configuration data.

3. Data Collected Externally (RevenueCat Billing & Analytics)

The only data collected externally is transaction and performance data managed by my third-party infrastructure partner, RevenueCat, Inc. (which utilizes Stripe, Inc. as the underlying payment gateway). This occurs when you interact with my web checkout or activate premium features.

A. RevenueCat Billing (Transaction Data)

When you subscribe or make a purchase, the following information is processed:

Identifiers: Email address (required to generate your receipt and access your billing customer portal) and an alphanumeric App User ID generated by the App.
Payment Data: Subscription status, purchase history, transaction dates, and country/zip code. Note: Full credit card numbers are handled directly by Stripe and are never visible to or stored by me.
Legal Basis under GDPR: Art. 6(1)(b) GDPR – Performance of a contract (necessary to process your payment and deliver the premium features you purchased).

B. RevenueCat Analytics

To ensure system stability, analyze conversion flows, and prevent fraudulent subscription usage, I utilize RevenueCat's analytics tools.

Data Processed: Device characteristics (macOS version, hardware model), coarse geographic location derived from IP address (country level), and purchase lifecycle events (e.g., trial starts, renewals, cancellations).
Legal Basis under GDPR: Art. 6(1)(f) GDPR – Legitimate interests (my operational interest in optimizing my commercial service, debugging product failures, and maintaining app security).

4. Third-Party Data Processors

I share the minimum required data with the following processors to operate my billing architecture:

RevenueCat, Inc. (Data infrastructure provider located in the USA). Data transfers to the US are secured via standard contractual clauses (SCCs) or verified frameworks approved by the European Commission.
Stripe, Inc. (Payment gateway provider). Handles direct financial processing under strict PCI-DSS security standards.

5. Data Retention

Local Data: Remains on your device until you delete the App or clean your local application support directories.
Billing Data: Transaction records stored by RevenueCat are retained as long as your subscription is active, and subsequently archived for the duration required to fulfill local statutory tax, accounting, and legal audit obligations (typically up to 7 years depending on jurisdiction).

6. Your Rights Under the GDPR

If you are a resident of the EU/EEA, you possess the following rights regarding your personal data:

Right of Access: You can request a copy of the billing data linked to your account.
Right to Rectification: You can update your billing details via the self-service customer portal.
Right to Erasure ("Right to be Forgotten"): You can request the deletion of your billing profile, subject to statutory retention limits.
Right to Data Portability: You can request your transaction data in a structured, machine-readable format.
Right to Object: You can object to data processing executed under my legitimate interests.

To exercise any of these rights, please contact me at service@zentru.systems. You also retain the right to lodge a formal complaint with your local Data Protection Authority.

7. Changes to This Policy

I reserve the right to modify this Privacy Policy at any time. Any changes will be published directly on this page with an updated "Last Updated" timestamp.

Project Bootstrap

Digital Experiences