Who handles your information. VAIDUTE & CO. LIMITED, company 16494237, registered office 34 Otterden Street, London, England, SE6 3SJ, United Kingdom, operates GunterChart. Contact support@gunterchart.com about privacy or your information.
Purchases, licences and delivery. We use your delivery email, purchase reference and status to provide your licence and download. The licensing service also keeps installation and cryptographic key identifiers, access-token hashes, timestamps and delivery/recovery records. For eligible Stripe Managed Payments purchases, Sold through Link, LLC acts as merchant of record and handles payment information under its applicable privacy information. Payment receipts and applicable tax documentation are provided through the checkout/payment flow. GunterChart separately handles the licence, download and product support. Our licensing database does not have card-number or full-billing-address fields.
Licence codes and delivery email/content are encrypted in the licensing database; licence and access-token verification also uses protected hashes. The email-delivery service receives the recipient address, licence code, time-limited download link and purchase/setup message so it can deliver the email. Do not send passwords, card details, full licence codes or private trading records to support.
Support and AI assistance. Our support mailbox uses Namecheap Private Email. We use OpenAI's Codex AI assistance to review selected message text, email headers and attachment names/types and help answer technical and sales questions. Routine replies may be sent by our AI assistant; uncertain cases are escalated to the owner/team. Not every reply is individually reviewed by a human. Our local support bridge does not save attachment files or raw email MIME, but selected support content is sent to the AI service: processing is not wholly local. Reusable FAQ content excludes customer identifiers. Please share only the information needed for your question and ask for owner review if preferred. The AI service's applicable account terms and data controls apply; we do not promise that this personal-account support workflow has the business-plan data-processing agreement or no-training-by-default protection.
Why information is used. Purchase, licence and requested support information is used to perform the purchase/access agreement or respond to your request before purchase. Necessary financial/legal records are kept to meet applicable obligations. Proportionate security, rate-limiting, recovery and duplicate-send records support our legitimate interests in protecting accounts, customers and service reliability. Optional ongoing marketing uses a separate choice; an enquiry, purchase or one-time launch-notice request does not automatically subscribe you to campaigns. A withdrawn request must stop further contact within its scope.
Website storage and technical processing. The current GunterChart frontend contains no analytics SDK, advertising pixel, application cookie or local-storage tracking. It uses an essential cryptographic receipt in this tab's session storage to retrieve a purchase status; the receipt is not put in the page URL. Hosted Stripe checkout and service providers have their own processing. Our application sends requests without browser credentials, with no-store/no-referrer protections. A download ticket is held in memory for the requested download. The licensing rate limiter derives a short-lived protected key from the connection IP and minute; the application does not store the raw IP in that rate-limit table. These statements do not mean that hosting, security or payment providers keep no technical connection logs.
Providers and location. We use Link/Stripe Managed Payments for payments, Resend for transactional licence/download email, Cloudflare for website/licensing hosting and storage, and Namecheap Private Email and OpenAI's Codex assistance for support. Link's payment role is separate from our product/licensing role. These providers may process information outside the UK/EEA. Our Resend sending domain uses its Ireland region with TLS enforced; that does not mean all provider processing is restricted to Ireland. Namecheap's published hosting information places Private Email servers in Phoenix, USA. No UK-only storage or processing is promised. Cloudflare, Resend and Namecheap publish processing terms and international-transfer provisions; OpenAI's applicable account terms and privacy information govern its processing. Ask support for information about the arrangements applicable to your data.
Published provider information: Cloudflare processing terms, Resend processing terms, Resend subprocessors, Namecheap Private Email location, Namecheap processing terms. These public terms describe provider services; they do not certify our account configuration or establish a complete transfer assessment.
Retention currently in place. Local support records are minimized when a message is replied to or handled. The bridge's maintenance operation minimizes up to 100 records older than 30 days and removes obsolete SQLite pages; older unresolved cases require manual review. Minimal duplicate/send evidence is retained. This operation does not delete messages from the hosted mailbox. There is no implemented fixed mailbox/audit/consent-record deletion deadline.
In the licensing source, rate-limit records expire after 120 seconds and download tickets have short validity windows; scheduled processing removes expired entries while the service is running. Expiry does not guarantee immediate physical deletion when processing is stopped. Purchase, licence, encrypted delivery, audit and cached-request records do not currently have automatic deletion schedules. Lifetime access needs a minimal continuing entitlement/recovery record, not indefinite retention of every support message. Contact support if you want unnecessary information reviewed or removed; legal duties, access recovery, security and unresolved cases may require some records to be retained.
Your choices and rights. Contact support to request access, correction, deletion, restriction, objection or other applicable data-protection rights. We may verify identity and must consider applicable legal duties and continuing access requirements. You can complain to the ICO or your relevant data-protection authority. No marketing campaign is started by this notice, and no unconditional deletion or uninterrupted-service promise is made.