Privacy Policy
Last updated: August 22, 2026
Arvestria SRL ("we", "us", "our") operates the GeoAddIn website at www.geoaddin.com. This policy explains what personal data we collect, why we collect it, and your rights under the General Data Protection Regulation (GDPR).
1. Data we collect
When you request a trial or purchase a license, we collect:
- Email address (required) — to send your license key, installation instructions, and related communications.
- Name and company (optional) — to personalise communications.
We also automatically record:
- Anonymous usage statistics — aggregated page-view data via Plausible Analytics (see §5).
When you activate a license for GeoAddIn, we also collect:
- Device identifier (required) — a hashed hardware fingerprint of your computer, used solely to enforce license activation limits. The fingerprint is a one-way hash; we cannot determine your specific hardware from it.
- License key usage data — activation status, validation timestamps, and the number of devices associated with your license.
We do not collect payment information or location data. Device identifiers are collected only for license activation as described above.
2. How we use your data
| Purpose | Legal basis |
|---|---|
| Send your license key and installation instructions | Performance of contract (Art. 6(1)(b) GDPR) |
| Send trial/product update emails | Legitimate interest (Art. 6(1)(f) GDPR) |
| Improve the product | Legitimate interest (Art. 6(1)(f) GDPR) |
| Comply with legal obligations | Legal obligation (Art. 6(1)(c) GDPR) |
| Enforce license activation limits | Performance of contract (Art. 6(1)(b) GDPR) |
| Process payments and manage subscriptions | Performance of contract (Art. 6(1)(b) GDPR) |
3. Data retention
We retain your trial or account data for as long as needed to provide the service and for a reasonable period thereafter, or until you request deletion.
License activation data (device identifiers) is retained for the duration of your active subscription and deleted within 90 days of subscription termination. Payment records are retained as required by Belgian tax law (10 years).
4. Sharing of data
We do not sell, rent, or share your personal data with third parties for marketing purposes. We use the following sub-processors to operate the service:
- Supabase — database hosting (EU region).
- Resend — transactional email delivery.
- Vercel — website hosting and serverless functions.
- Paddle — payment processing and subscription management (merchant of record).
- Hetzner — license server hosting (EU region).
Each sub-processor is bound by appropriate data processing agreements.
5. Analytics
We use Plausible Analytics, a privacy-friendly analytics tool that does not use cookies, does not collect personal data, and does not track you across websites. No consent banner is required. Plausible complies with GDPR, CCPA, and PECR.
6. Cookies
We use only functional cookies strictly necessary for the website to operate. We do not use tracking or advertising cookies. See our Cookie Policy for details.
7. Your rights
Under GDPR you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data ("right to be forgotten").
- Object to processing based on legitimate interest.
- Lodge a complaint with your supervisory authority.
To exercise any of these rights, email us at info@geoaddin.com. We will respond within 30 days.
8. Contact
Data controller: Arvestria SRL
Email: info@geoaddin.com
9. Changes to this policy
We may update this policy from time to time. The date at the top of this page reflects the latest revision. Continued use of the service after changes constitutes acceptance of the updated policy.