Your data.
Clearly handled.

The controller under the General Data Protection Regulation (GDPR) is Maximilian Lampe, trading as U.N.C Industries, Mühlenweg 78, 29358 Eicklingen, Germany. Email: support@unc-aim.com.

No data protection officer has been appointed. Questions about this policy or requests concerning your personal data may be sent to the contact address above.

When the website is opened, the hosting infrastructure may process technical connection data such as IP address, date and time, requested resource, referrer, browser, operating system, response status and security signals. This is necessary to deliver the website, maintain availability, prevent abuse and investigate faults.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are the secure, reliable and economical operation of the website. Where processing is necessary to provide a requested service, Article 6(1)(b) GDPR also applies.

Registration and sign-in are provided through Clerk. We process account identifiers, email address, authentication status, session and security information, and the time of account events. Passwords and passkeys are handled by the authentication provider and are not available to us in plain text.

The legal basis is Article 6(1)(b) GDPR for creating and operating the customer account and Article 6(1)(f) GDPR for account security, fraud prevention and abuse detection. Authentication requires technically necessary cookies or comparable session storage.

Stripe processes checkout, payment methods, payment status, billing details, taxes, receipts, subscription events, refunds and disputes. Complete payment-card details are entered with Stripe and are not stored by this website. We receive the information needed to match a payment to an account, provide access and administer the contract.

The legal bases are Article 6(1)(b) GDPR for contract performance and Article 6(1)(c) GDPR for accounting, tax and consumer-law obligations. Stripe may also process data as an independent controller for its own legal and regulatory duties; its own privacy information applies to that processing.

Before checkout, we record the customer account, selected plan, timestamp, Terms version and the separate declarations concerning immediate digital delivery and the possible loss of the withdrawal right. We also store withdrawal and subscription-cancellation requests, their reference number, submitted contact and contract data, receipt time, requested effective date, processing status and confirmation status.

These records are processed under Article 6(1)(b) GDPR to administer the contract, Article 6(1)(c) GDPR to meet statutory information and consumer-protection duties, and Article 6(1)(f) GDPR to establish, exercise or defend legal claims.

To provide and protect the software, we may process the license plan and status, account identifier, activation identifier, device-bound pseudonymous fingerprint, reset history, software version, download entitlement, update status and security events. The software may contact our service to validate an active license and obtain signed releases.

The legal basis is Article 6(1)(b) GDPR. Security and anti-abuse processing is additionally based on Article 6(1)(f) GDPR. Our legitimate interests are preventing license sharing and unauthorized distribution while keeping the activation process reliable. We do not use this information to inspect unrelated files or browsing activity.

When you contact support, we process your contact details, message, attachments and the information needed to answer the request. Please do not send account passwords, third-party credentials or unrelated personal information.

The legal basis is Article 6(1)(b) GDPR for contractual support and pre-contractual enquiries, and Article 6(1)(f) GDPR for other business communications, documentation and the defense of claims.

Personal data is disclosed only where required for the purposes described above. Recipients may include Clerk for authentication, Stripe for payments and billing, OpenAI Sites and its Cloudflare-based infrastructure for hosting, Spaceship and Spacemail for domain and support email services, and—once system email delivery is enabled—the configured transactional email provider, currently designed for Resend.

These providers process data under their applicable agreements and roles. Public authorities, courts, professional advisers or other recipients may receive data where disclosure is legally required or necessary to establish, exercise or defend legal claims. We do not sell personal data.

Some service providers or their subprocessors may process data outside Germany or the European Economic Area. Where the recipient country is not covered by an adequacy decision, transfers are based on an appropriate safeguard such as the European Commission’s Standard Contractual Clauses, together with supplementary measures where required. Details relevant to a specific transfer are available on request.

We retain personal data only as long as necessary for the relevant purpose. Account, contract, licensing and support data is generally kept while the account or contract remains active and afterward for the period needed to handle contractual claims. Invoices, payment records and other business documents are retained for the applicable statutory commercial and tax periods.

Consent evidence, contract confirmations, withdrawals and cancellations are retained for the applicable statutory evidence and limitation periods. Security data is kept only as long as necessary to protect the service or investigate an incident. Data is deleted or anonymized when no purpose or legal duty remains. A legal hold, dispute or security incident may require longer storage of the affected records.

The site uses only storage that is necessary for authentication, security, checkout continuity and requested customer-area functions. We currently do not use optional advertising or cross-site tracking cookies. Stripe may set technically necessary or fraud-prevention cookies on its checkout pages under its own responsibility.

If optional analytics, advertising or similar technologies are introduced later, they will not be activated for visitors who require consent until a suitable consent choice has been provided. This policy will be updated before such processing begins.

Subject to the statutory conditions, you have the right to access, rectification, erasure, restriction of processing and data portability. You may object at any time to processing based on Article 6(1)(f) GDPR for reasons arising from your particular situation. If processing is based on consent, you may withdraw that consent for the future without affecting earlier lawful processing.

You also have the right to complain to a data-protection supervisory authority. The authority responsible for businesses based in Lower Saxony is Der Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover. Its complaint portal is available at lfd.niedersachsen.de/beschwerde. You may also contact another competent authority, particularly in the member state of your habitual residence or workplace.

Account, billing, contract-confirmation and licensing data marked as required must be provided if you want to purchase and use the software. Without it, we cannot conclude or perform the contract, verify the license, deliver updates or process a legal request. Optional support details need not be provided.

We do not make decisions producing legal or similarly significant effects solely through automated processing, and we do not profile customers for advertising.

We use proportionate technical and organizational measures to protect personal data, including access controls, encrypted transport, secret separation and signed release files. No internet service can guarantee absolute security.

The products are offered only to persons aged 18 or older. We do not knowingly create accounts for children. We may update this policy when the service, providers or legal requirements change. Material changes will be communicated where required, and the effective date below will be updated.