Privacy policy

Master Packager Privacy Policy

Master Packager Ltd. (“us”, “we”, or “our”) operates the Master Packager Suite and Master Packager Dev software (“Software”) and the www.masterpackager.com website. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

For the purposes of applicable data protection laws, Master Packager Ltd. acts as the Data Controller for the personal data of:

Website visitors and registered account holders
Customers (including B2B and B2C purchasers)
End-users of the Software (regardless of whether the license was purchased directly from us, through an employer, or via an authorized reseller)
Newsletter subscribers
Individuals contacting our support team

This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

1. Information We Collect

We collect and process the minimum necessary personal data to help us provide you with the product and services you request.

Registration, Billing, and Account Data

When you register on our site, request a quote, or purchase a license, we may collect:

Identity Data: Name and Surname.
Contact Data: Email address, Country, and, optionally, Telephone Number if you choose to provide it.
Billing and Entity Data: Company Name, Registration Number, Address, Country, VAT Number, and other information needed to identify the purchasing individual or legal entity and issue a valid invoice.
Transaction Data: Purchase history and payment-related records (Note: We do not store credit card details. Payments are processed by secure third-party payment providers such as Stripe and PayPal).

Some billing and entity information may be required where necessary to issue invoices, apply the correct tax treatment, verify the contracting party, comply with accounting and tax obligations, or maintain records showing the person or entity to whom the license was sold.

Support Data

Support Data: Information you provide when contacting us for support, such as your name, email address, company, and the contents of your request.

Newsletter Data: If you subscribe to our newsletter, we collect your email address and may also collect your name and surname. Newsletter subscriptions are managed through Kit.com and require explicit signup and email verification.

Software Data: License Validation and Telemetry

Upon launching the Software, the application connects to our servers. We distinguish between Mandatory License Data (required for the software to function) and Optional Usage Data (for product improvement).

Mandatory License Data

Description: Mandatory data collected from the Software for license validation. The data we collect includes:
Registered Email Address
Company Name
License Type and Edition
App Version
Workstation Hostname
IP Address (processed temporarily for location validation and fraud prevention, but not stored)
Purpose: To validate that the license is active, not expired, and complies with the terms of our End-User License Agreement (“EULA”). Specifically, this validation is required to ensure the Software is used within the permitted license scope and seat count, to enforce usage restrictions and prevent unauthorized sharing, and to determine whether the license has an active Maintenance Period or Subscription to access updates and maintenance-only features.
Opt-out: No. This data is required for license enforcement.

Optional Usage Data (Telemetry)

Description: Fully anonymous package metadata collected from installer files used with the Software. This data is entirely decoupled from your user identity, or license key. The telemetry we collect may include:
Package Name
Package Vendor
Package Version
File Hash
File Name
ProductCode
UpgradeCode
Packaging Tool Used
IP Address (processed temporarily for location validation, but not stored)
What We Do Not Collect: This telemetry is strictly limited to package metadata. It does not include the content of your packaged files, nor does it contain any Personal Data or Personally Identifiable Information (PII).
Purpose: To analyze software performance, identify usage trends, troubleshoot bugs, and guide future development to improve the functionality, stability, and user experience of the Software.
Default and Control: Because this data is fully anonymous, it falls outside the scope of the GDPR. However, out of respect for your privacy, users may opt out of telemetry collection at any time using the methods described in the Documentation.

What We Do Not Collect

The Software never collects, uploads, or processes the content of your packaged files, proprietary code or scripts, user credentials or keys, or information about your internal network.

2. How We Use Your Information

We use collected information to:

Provide Services: Deliver the Software, manage your account, process purchases, issue invoices, and provide access to licensed features.
Validate Licenses: Prevent piracy and ensure compliance with the EULA.
Support: Respond to your technical support requests.
Improve Product: Analyze Usage Data to improve our products and services and provide better value to our customers.
Comply With Legal Obligations: Maintain accounting, tax, audit, and statutory records, including records necessary to demonstrate sales to the appropriate individual or legal entity.
Communicate: Send you important notices (e.g., expiration warnings, policy updates) and optional newsletters (you may unsubscribe at any time).

3. Legal Bases for Processing

Depending on the context, we rely on one or more of the following legal bases under the GDPR:

Performance of a Contract: To create and manage your account, process purchases, issue invoices, verify the contracting customer, deliver the Software, provide login and single sign-on functionality, and provide support you request.
Legitimate Interests: To secure our services, prevent fraud and misuse, validate licenses, enforce our agreements, maintain accurate business records, respond to customer inquiries, and improve the reliability and performance of our products and website, including optional telemetry that you may disable at any time.
Consent: For newsletter subscriptions managed through Kit.com and for Google Analytics cookies and similar technologies that are activated only after your explicit opt-in.
Legal Obligation: To comply with accounting, tax, invoicing, audit, and other legal obligations.

Where we rely on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

4. Data Storage and Retention

Storage Location

Customer data hosted by us to provide the Software service is stored and processed in Microsoft Azure West Europe (Netherlands/EU). Limited exceptions may apply where personal data is processed by third-party providers for payments, newsletter delivery, analytics, authentication, or other customer-elected services. Those providers may process data outside Azure West Europe under their own terms and privacy notices, and we ensure that appropriate safeguards are in place where required.

Retention Period

Account Data: Retained as long as your account is active or as required by applicable Latvian tax, accounting, and commercial law.
Telemetry Data and License Validation Data: Retained for 730 days (2 years), after which it is automatically anonymized or deleted, unless a longer retention period is required by law or needed to establish, exercise, or defend legal claims.
Support Data: Retained for as long as necessary to resolve your request and maintain a record of support interactions, unless a longer retention period is required by law or needed to establish, exercise, or defend legal claims.
Newsletter Data: Retained until you unsubscribe or withdraw your consent.

5. Third-Party Service Providers and International Transfers

We use trusted third-party service providers to help operate our business and services, including:

Microsoft Azure: Cloud hosting and storage.
Stripe and PayPal: Payment processing.
Kit.com: Newsletter subscription management and email communications for users who explicitly subscribe.
Atlassian (Jira Service Desk): Customer support ticketing and feedback management.
Google Analytics: Website analytics, activated only after your explicit consent.
Microsoft and GitHub: Single sign-on and authentication services when you choose to use those login methods.

Some of these providers may process personal data outside the European Economic Area (EEA) or may permit remote access from outside the EEA. Where personal data is transferred outside the EEA, we ensure that appropriate safeguards are in place, such as an adequacy decision by the European Commission or Standard Contractual Clauses, as applicable.

Third-party identity providers such as Microsoft and GitHub process certain authentication-related data under their own privacy policies and terms when you choose to sign in through their services.

Under the GDPR, you have the following rights:

Right to Access: Request a copy of the personal data we hold about you.
Right to Rectification: Correct inaccurate or incomplete data.
Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data, subject to our legal obligations (e.g., tax records).
Right to Restriction: Request that we restrict processing of your data.
Right to Object: Object to processing based on legitimate interests.
Right to Portability: Receive your data in a structured, commonly used format.
Right to Withdraw Consent: Where we process your data based on consent, you may withdraw that consent at any time.
Right to Lodge a Complaint: Lodge a complaint with your local supervisory authority in the EEA, including the competent authority in Latvia, if you believe your personal data has been processed unlawfully.

To exercise these rights, contact us at info@masterpackager.com.

7. Security

We implement appropriate technical and organizational measures to protect your data. Data in transit is encrypted via TLS 1.2+ and data at rest is encrypted via AES-256. Access to personal data is restricted through role-based access control. Customer data hosted by us is stored in Microsoft Azure West Europe, subject to the limited third-party exceptions described in Section 5 (“Third-Party Service Providers and International Transfers”) of this Privacy Policy.

8. Cookies

We use cookies and similar technologies on our website to operate the site, remember your preferences, and, where you consent, measure website usage.

Essential Cookies: Required for core website functions, including maintaining your session and remembering your cookie banner choice.
Functional Authentication Cookies: Used to support login and authentication features, including remembering your login state. If you sign in using a third-party provider such as Microsoft or GitHub, we and the relevant provider may use cookies required to complete authentication.
Analytics Cookies: With your consent, we use Google Analytics cookies to understand website traffic. Google Analytics is loaded only after your explicit opt-in through the cookie banner.

If you reject optional cookies, only strictly necessary cookies will be used. You can change a previous cookie choice by clearing cookies in your browser and making a new selection on your next visit. You can also control or delete cookies through your browser settings, although doing so may affect certain site features.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make a material change, we will use reasonable efforts to provide advance notice, such as by posting a prominent notice on our website or notifying account holders by email, at least 30 days before the change takes effect where practicable. Changes required by law, regulation, security requirements, or third-party service changes may take effect sooner. Non-material changes may take effect upon posting. We encourage you to review this page periodically for updates, especially before using the website or submitting personal data.

10. Contact Us

Master Packager Ltd.

Registration Number: 40203164223

Address: Gustava Zemgala gatve 80 - 57A, Riga, LV-1039, Latvia

Email: info@masterpackager.com