Effective: September 18, 2026
1. Who is responsible
kticket operates kticket.dev and is responsible for the personal data described in this policy. Privacy requests may be sent to support@kticket.dev.
Paddle.com acts as Merchant of Record and separately processes checkout, payment, tax, fraud-prevention, and receipt data under its own privacy notice. kticket does not receive or store your complete card or payment-account details.
2. Data we process
- Website data: IP address, browser and device information, requested pages, timestamps, referring page, and security logs supplied by our hosting infrastructure.
- Purchase data: Paddle customer ID, transaction and event IDs, customer name, verified email address, purchased price and quantity, and payment status. Paddle retains the payment instrument details.
- Machine ID: the pseudonymous, product-specific identifier that you paste into checkout. It is derived locally from a firmware UUID or system serial identity. Raw hardware values are not displayed to you, transmitted to Paddle, or stored by kticket.
- License data: license ID, Machine ID, Paddle customer ID, customer name, issue time, edition, features, signature metadata, and the signed license artifact. Your email is used for delivery but is not embedded in the license file.
- Support data: email address, correspondence, diagnostic details, transaction references, attachments, and information you choose to provide when seeking help.
3. Why we use data
We use this data to operate and secure the website; validate a completed purchase; generate, bind, deliver, restore, or replace a license; prevent duplicate fulfillment and fraud; answer support requests; honor refunds; maintain business and security records; and comply with applicable legal obligations.
Depending on your location, our legal grounds are performance of our contract with you, legitimate interests in providing and securing the service, compliance with legal obligations, and consent where the law requires it.
4. Paddle Checkout and service providers
We share only the data reasonably necessary with service providers that help us operate the product:
- Paddle: checkout, Merchant-of-Record services, payment, tax, fraud prevention, receipts, customer verification, and refunds.
- Hosting and infrastructure providers: website delivery, security, encrypted transport, monitoring, and storage.
- Email provider: delivery of the signed license attachment and support correspondence.
We do not sell personal information. We do not use the Machine ID for cross-product advertising or behavioral profiling.
5. Retention
Because the license is permanent and may need to be restored or replaced, the transaction-to-license fulfillment record and exact signed artifact are retained while the license remains supportable, unless law requires a different period or you validly request deletion that is compatible with our contractual and legal obligations. Security logs and unsuccessful delivery records are kept only as long as reasonably necessary for security, troubleshooting, and abuse prevention. Support correspondence is reviewed and deleted or anonymized when it is no longer needed.
6. Security
We use HTTPS, access controls, restricted service credentials, signed license artifacts, encrypted email transport where supported, and protected storage permissions. No system is completely secure; keep your license attachment and generated Kubernetes credentials private and maintain your own backups.
7. International transfers
Paddle and our infrastructure or email providers may process data in countries other than yours. Where required, the relevant provider or kticket uses recognized contractual or legal safeguards for such transfers.
8. Your choices and rights
Depending on applicable law, you may request access, correction, deletion, restriction, portability, or objection, and may withdraw consent where processing relies on consent. We may need to verify your identity and retain data required for contracts, fraud prevention, disputes, or law. You may also complain to your local data-protection authority.
Send requests to support@kticket.dev. Payment-data requests concerning Paddle should also be directed through Paddle’s buyer-support channel.
9. Cookies and local storage
The informational pages do not require an advertising profile. The purchase page loads Paddle.js so Paddle can provide checkout, localize the price, prevent fraud, and process the transaction. Paddle may use cookies or similar technologies under its own notice. If kticket later introduces optional analytics or advertising technologies, we will update this policy and request consent where required.
10. Changes and contact
We may update this policy by changing the effective date and publishing the revised text here. Material changes will be highlighted when reasonably possible. Contact support@kticket.dev for privacy questions.