This policy explains what personal data IngestDeck collects, why, how long we keep it, and the rights you have. It reflects how the product actually works. In this policy "IngestDeck", "we", "us" and "our" mean the provider named below; "you" means the person or organisation using the app or website.

1. Who we are (data controller)

IngestDeck is operated by Nikolaj Pogněrebko, a sole trader registered in the Czech Republic (IČO: 87511967, VAT ID: CZ8905214318, registered seat: Kotoučova 521, 252 19 Drahelčice, Czech Republic) — the provider and the controller of the personal data described here. You can reach us about any privacy matter, or to exercise your rights, at info@ingestdeck.com.

2. What data we collect

• Account data — your email address, an optional display name, and your password stored only as a secure one-way hash (we never store or see your password in readable form).
• Subscription & billing data — your plan, its status, renewal/cancellation dates, the number of device seats, and the identifiers of your subscription and customer record with our payment provider. Your card number and full billing/invoice records are held by our payment provider (Paddle), not by us — see section 4.
• Device data — for each computer or device you sign in on, a device name you choose and a one-way fingerprint of the device, used to enforce your plan's device limit and to issue the offline licence that lets the app keep working without a connection. For the iOS monitor app we also store an Apple push-notification token so we can deliver progress notifications.
• Operational & security logs — records of sign-ins and licence checks (including the request's IP address and time) and email-delivery records, kept to run and secure the service and to diagnose problems.
• Usage analytics (opt-in) — only if you turn it on (the first-run prompt in the macOS app, or its Settings), anonymous usage statistics — app sessions and workflow events — processed by Google Firebase. It is off by default, is not linked to your account identity, and never includes your file names, volume names, or footage.
• Crash diagnostics — anonymous crash and error reports processed by Google Firebase, with recent activity-log context, collected to keep the apps stable and secure. These are not linked to your account identity and never include your file names, volume names, or footage.
• Website analytics — if you accept analytics cookies on this website, Google Analytics collects aggregate, non-identifying usage statistics (such as pages viewed, approximate region, and device type). It is off until you consent and can be declined or withdrawn at any time — see section 7.
• Your footage and media files are not collected. IngestDeck copies and verifies your media entirely on your own computer and storage. We never receive, upload, or have access to the footage you offload.

3. Why we use it, and our legal bases

• To provide the service — create your account, sign you in, issue licences, run the app, and enforce your plan (legal basis: performance of our contract with you, Art. 6(1)(b) GDPR).
• To take payment and manage your subscription (performance of contract).
• To secure the service and prevent abuse, including preventing repeated free-trial sign-ups from the same identity (legal basis: our legitimate interests in protecting the service, Art. 6(1)(f) GDPR — Recital 47 recognises fraud prevention as a legitimate interest).
• To meet legal obligations, such as retaining billing and tax records (Art. 6(1)(c) GDPR).
• For usage analytics — in the macOS app, and website analytics via the cookie banner — only with your consent, which you can withdraw at any time (Art. 6(1)(a) GDPR).
• For crash diagnostics, to keep the apps stable and secure (legal basis: our legitimate interests in a reliable, secure product, Art. 6(1)(f) GDPR). You can object at any time — see section 6.

4. Who we share it with (processors)

We use trusted providers that process data on our behalf under data-processing agreements:

• Paddle.com Market Ltd — our payment provider and merchant of record. Paddle runs checkout, takes payment, issues invoices, and handles sales tax/VAT. Your payment method and invoice history are stored by Paddle. See paddle.com/legal/privacy.
• Google Ireland Ltd (Firebase) — opt-in usage analytics (macOS app) and crash diagnostics from the apps, not linked to your account identity.
• Google Ireland Ltd (Google Analytics) — consent-based, aggregate website usage analytics, active only after you accept analytics cookies on the site (section 7).
• Infrastructure providers — reputable cloud hosting, object storage, and transactional email providers that store the data above and deliver emails and app downloads, under data- processing agreements. Some may process data outside the EU/EEA under appropriate safeguards (such as Standard Contractual Clauses).

We do not sell your personal data, and we do not use advertising trackers.

5. How long we keep it

We keep your account and subscription data for as long as your account exists. Short-lived items (sign-in sessions, tokens, email-verification codes) expire automatically within days. Optional analytics/crash data is retained by Firebase for a limited period and then deleted. When you delete your account we anonymise it: your email, name and sign-in are erased and cannot be recovered, while a non-identifying billing record (kept for accounting/tax obligations) and a one-way fingerprint (kept only to prevent repeated free trials) remain. Billing and invoice records are additionally retained by Paddle as required by law.

6. Your rights

Subject to applicable law you have the right to access, correct, export, and delete your personal data; to object to or restrict certain processing; to withdraw consent for usage analytics; and to object to crash diagnostics.

• Export a machine-readable copy of your data — download it here (you'll be asked to sign in).
• Delete your account — to permanently delete and anonymise your account, use the account-deletion page here (you'll be asked to sign in and confirm). This erases your personal data immediately and cancels any active subscription.
• Usage analytics can be turned off any time in the macOS app's settings, and website analytics via Cookie settings in the site footer.
• Crash diagnostics in the macOS app are always on to keep it stable; to object to this processing, email info@ingestdeck.com. In the iOS monitor you can turn crash reporting off in its settings.
• For access, correction, or any other request, email info@ingestdeck.com; we respond within one month.

If you are in the EU/EEA and believe we have not handled your data lawfully, you may lodge a complaint with your local data-protection authority. In the Czech Republic this is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.cz).

7. Cookies & website analytics

Strictly necessary cookies. To sign you in and protect forms against cross-site request forgery, our website sets a small number of essential cookies. These are always on and, being strictly necessary, need no consent.

Analytics cookies (consent-based). With your consent, we use Google Analytics (provided by Google Ireland Ltd) to understand, in aggregate, how the site is used so we can improve it. This sets analytics cookies (such as _ga) and shares usage data — including your IP address, which Google uses to approximate your location — with Google as our processor; Google may process it outside the EU/EEA under appropriate safeguards (such as Standard Contractual Clauses). We use Google Consent Mode: analytics stays disabled by default, and no analytics cookie is set and no data is sent to Google until you choose Accept in the cookie banner. You can decline, or change your choice at any time via Cookie settings in the site footer or by clearing cookies in your browser. We do not use advertising, profiling, or cross-site tracking cookies.

8. Children

IngestDeck is a professional tool and is not directed to children under 16. We do not knowingly collect data from children.

9. Changes

We may update this policy as the service evolves; we will revise the "last updated" date above and, for material changes, notify you by email or in the app.

10. Contact

Nikolaj Pogněrebko · info@ingestdeck.com