Note: this is an English translation provided for your convenience. The Spanish-language original is the legally binding version — in case of any discrepancy, the Spanish text prevails. View the original in Spanish.

Summary: only the data essential to charge you and deliver your license is processed. The application installed on your Mac does not send any data: no telemetry, no analytics, no online license checks. Its only possible connection is checking for updates, which it asks you about the first time and which you can turn off whenever you like. This website does not use cookies.

1. Data controller

Data controllerJaime Lillo Benito
Tax ID (NIF)50482704G
AddressCalle La Cruz, 90, 28300 Aranjuez (Madrid), Spain
Contactsoporte@fanfancontrol.com

2. What data we process, and why

PurposeDataLegal basis (GDPR Art. 6)Retention
Process the purchase and issue the license Email address, payment session identifier, country, and amount. Card details are handled directly by Stripe; the owner never sees or stores them. Performance of a contract (Art. 6.1.b) For the duration of the relationship and, afterward, the legal statute-of-limitations period
Email you your license key Email address and generated key Performance of a contract (Art. 6.1.b) Delivery record kept by the email provider per its own retention periods
Handle support inquiries Whatever data you include in your message Performance of a contract or legitimate interest in assisting you (Art. 6.1.b / 6.1.f) Until the inquiry is resolved, plus the statute-of-limitations period for any related claims
Checking whether a new version of the application is available IP address and installed version, which is what any web request reveals. Your license, your email address, and any data about your computer are not sent. Consent (Art. 6.1.a): the application asks before enabling automatic checks, and you can withdraw it from its settings The hosting provider's logs, under its own retention periods
Tax and accounting obligations Billing data provided at payment Legal obligation (Art. 6.1.c) The periods required under tax and commercial law

No automated decisions with legal effects are made, and no profiling is carried out. No special categories of data are processed.

3. Data we do not collect

4. Recipients and data processors

To provide the service, we rely on the following providers, who act as data processors under a contract compliant with GDPR Art. 28:

ProviderFunctionLocation
Stripe Payments Europe, Ltd. / Stripe, Inc. Payment gateway and billing Ireland / USA
Resend Sending the license email European Union (infrastructure configured in the European region)
Vercel Inc. Hosting for the website, the license-issuing function, and the update file the application checks USA

No data is shared with other third parties, except where legally required (for example, with tax authorities).

5. International transfers

Some of the providers above may process data outside the European Economic Area. Such transfers are covered by the Standard Contractual Clauses approved by the European Commission and, where applicable, by the EU–US Data Privacy Framework, together with the supplementary measures each provider documents in its own terms.

6. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing, and portability at any time, as well as withdraw consent where processing is based on it (without affecting the lawfulness of processing carried out before the withdrawal).

To exercise these rights, write to soporte@fanfancontrol.com stating which right you wish to exercise. You will receive a response within one month at most.

Note that deletion of data linked to a purchase may be limited by tax-related record-keeping obligations.

If you believe the processing does not comply with applicable regulations, you may file a complaint with the Spanish Data Protection Agency (www.aepd.es), C/ Jorge Juan 6, 28001 Madrid.

7. Security

Reasonable technical and organizational measures are applied: HTTPS-encrypted communications, cryptographic verification of the signature on payment notifications received from Stripe, and storage of credentials as encrypted environment variables accessible only to the data controller.

8. Changes to this policy

This policy may be updated to reflect legal or service changes. The date of the last revision appears at the top of the document.