Privacy Statement

We will not disclose information about you to any third party without your prior consent unless required by law, or in the good faith belief that such action is reasonably necessary to comply with legal process, respond to claims, or to protect the rights, property or safety of our users or the public. We take all reasonable care in handling your personal information to ensure its security both offline and online.

Types of Information We Collect

You are free to browse SoftActivate.com without submitting any personal information at all. Your IP address is stored in the server logs at the time of your visit, as it is on all web sites. We do not collect any personal information when you visit the site, unless you register to use the discussion board or subscribe to the newsletter.

SoftActivate Licensing Service

This section applies if you create an account for the SoftActivate Licensing service.

What the service stores

To operate the service, we store: your account and team member details (name, email address, authentication data); your tenant configuration (products, license templates, settings); license and order records you create or that your payment providers submit (which may include your customers' names and email addresses); device activation records, which include a hardware-derived device fingerprint and the source IP address of activation requests; and usage metrics (such as activation counts) used for analytics and, at general availability, billing. SDK download requests are logged (file, time, IP address, user agent) and generate an internal notification email.

Your customers' data

Data about your customers that you process through the service (for example, order and activation records) is processed on your behalf to provide the service. You remain responsible for your own privacy obligations toward your customers. We do not sell this data or use it for any purpose other than operating the service.

Where data lives

The service runs on Amazon Web Services (AWS), which acts as our infrastructure subprocessor. Data is encrypted in transit (TLS) and at rest; license signing keys are held in AWS KMS and never leave it.

Cookies and sessions

The management console uses cookies and browser storage strictly for authentication sessions. The website uses Google Analytics (via Google Tag Manager) for usage analytics and the Google Ads tag to measure whether our search ads lead to sign-ups or purchases. In regions where the law requires consent, these optional cookies stay off until you allow them, and you can change or withdraw your choice at any time from the "Cookie Settings" link in the footer. The full list of cookies, what each does and how long it lasts is in the Cookie Policy. We also honor the Global Privacy Control browser signal.

Retention and deletion

Account data is retained while your account is active. Deleting your account removes your tenant's data - including licenses, orders and activation records - from the service. Residual copies in backups and logs expire on their retention schedule.

Other Information

SoftActivate is committed to working with you to obtain a fair resolution of any privacy concern. We have adopted commercially reasonable procedures to help protect your information, but please note that no data transmission or storage can be guaranteed to be 100% secure.