Legal
Privacy Policy
Last updated 21 October 2026
This policy explains what personal data CrystalKarat collects, why, and what you can ask us to do with it. We are the controller of your personal data under the UK General Data Protection Regulation and the Data Protection Act 2018.
1. What we collect
- Account details: your name, email address and sign-in information when you create an account.
- Order details: what you bought, when, the amount, and the billing details our payment provider needs.
- License and activation data: your license keys and, for each computer you activate, an identifier derived from its hardware, the time of activation and the IP address it connected from.
- Technical data: standard server logs, such as IP addresses and browser details, when you use the site or download an installer.
- Messages: anything you send us when you ask for help.
The site uses only the cookies needed to keep you signed in and to take payment securely. We do not use advertising or analytics cookies.
2. Why we use it
- To sell you software, let you try it and provide it: creating your account, taking payment, issuing and managing your licenses and trials, and delivering downloads. This is necessary to perform our contract with you.
- To keep records we are required to keep, such as tax and accounting records. This is a legal obligation.
- To prevent fraud and misuse of licenses, and to keep the service secure. These are our legitimate interests.
- To answer your questions and support you.
We do not sell your data, and we do not send marketing email without your consent.
3. Who processes it for us
We use these providers, each bound by a data processing agreement:
| Provider | What for | Where |
|---|---|---|
| Clerk | Accounts and sign-in: your name, email address and sign-in records | United States |
| Stripe | Payments: billing details and payment information. We never receive full card numbers | United States |
| Keygen | Licensing: license records with your email, and the hardware-derived identifier and IP address of each activated computer | United States |
| Resend | Email: your address and the messages we send you | United States |
| Amazon Web Services | Downloads: installer files and request logs including IP address | The AWS region our downloads are hosted in |
Where data is transferred outside the UK, it is protected by the UK International Data Transfer Agreement or Addendum, or by an adequacy decision.
4. How long we keep it
We keep your account and license records while your account is open, so your licenses keep working and you can download your software. Order records are kept for six years for tax purposes. Activation records for a computer are deleted when you deactivate it.
5. Your rights
You can ask for a copy of your data, ask us to correct or delete it, object to or ask us to restrict how we use it, and ask for it in a portable format. Deleting your account ends access to your licenses. Write to support@crystalkarat.com and we will respond within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.