Locksmithy Desktop Software Privacy Notice

1. Scope

This notice describes personal information handled when a person or organisation purchases, receives, activates, updates or obtains support for Locksmithy Key Control Manager or Locksmithy Key Control and Asset Manager. A customer remains responsible for information it enters into its local desktop database.

2. Information we may collect

Depending on the interaction, we may hold customer/company name, contact name, email, phone number, purchased product, amount and discount information, licence type/status/expiry, device allowance, support correspondence, software release channel/version, and audit records relating to licence administration.

3. Device and licence information

The desktop application can send a one-way hashed device identifier, computer/device label, software version, release channel and client date/time to the licensing service. This is used to enforce device allowances, detect material clock manipulation, deliver the correct update, support device replacement and protect licences. Normal licence validation does not require uploading the customer's local key or asset database.

4. Payments

Square hosts card checkout and recurring-payment processing. Locksmithy receives identifiers and status information required to create orders, issue and renew licences, reconcile payments, handle cancellation and investigate billing failures. Locksmithy's licensing system is not designed to store full payment-card numbers or card security codes.

5. Email, portal and downloads

Contact details can be used to send payment links, licence details, renewal notices, update/support information and temporary private installer links. Customer portal links and software-download links are time limited or revocable and are intended for the relevant customer only.

6. Security

Security measures include server-side licence checks, device limits, hashed device identifiers, encrypted licence-code storage, Site Owner MFA for licence administration, private software storage, signed/short-lived downloads, webhook signature validation, reconciliation logs and audit records. No system can guarantee absolute security.

7. Service providers and disclosures

We use service providers to operate licensing, hosting, payments and communications, including Supabase, Square and configured email providers. Those providers may process information in Australia or overseas according to their own infrastructure and contractual arrangements. Information may also be disclosed where required or authorised by law.

8. Retention

Licensing, transaction and audit records are retained for as long as reasonably required to provide the software, administer subscriptions, maintain security, resolve disputes, provide support and meet accounting or legal obligations. Short-lived download/portal tokens expire or are revoked. Records no longer required should be deleted or de-identified where appropriate and lawful.

9. Access and correction

You can ask for access to or correction of personal information held at the platform/licensing level by contacting the privacy contact shown above. We may need to verify identity or authority before responding.

10. Complaints

Privacy questions or complaints can be sent to the privacy contact shown above. We will assess the issue and respond within a reasonable period. If Australian privacy law applies and a complaint cannot be resolved directly, you may also have rights to contact the Office of the Australian Information Commissioner.

11. Changes

This notice may be updated when the software, licensing service, providers or legal requirements change. The current version will be published on this page.