ANWIDA Soft — Software Privacy Notice

License activation and online validation

Last updated: 1 October 2026
Applies to: Software versions 4.x

This notice describes how personal data are processed when ANWIDA Soft software activates, deactivates, synchronizes or periodically validates a license. These operations are separate from the processing carried out through the anwida.com website, which is described in the ANWIDA Soft Privacy Policy.

The identity and contact details of the Data Controller, the rights of data subjects and the right to lodge a complaint with a supervisory authority are those set out in the ANWIDA Soft Privacy Policy.

How activation works

When a license is activated, deactivated, synchronized or periodically validated, the Software sends the license key together with an activation identifier. At activation, this identifier includes the computer name, which is used to label the activation and may contain personal data; the other operations use only a technical identifier. These data are sent to a proxy component, distinct from the anwida.com website, which is configured by the Owner and runs on third-party cloud infrastructure. The proxy forwards the request to the licensing back-end operated by the authorized Merchant of Record and returns the response to the Software. In addition, as with any internet request, the connection itself provides the cloud infrastructure with the source IP address and standard connection metadata.

The validation response is generated by the Merchant of Record and returned to the Software through the proxy, which does not store it except for the technical cache described under Retention.

Personal data processed

  • License key
  • Activation identifier: at activation it includes the computer name; other operations use only a technical identifier
  • IP address and connection metadata, used to apply rate limits
  • License status, product or plan, activation usage and limits, and validation dates
  • The license holder’s name

Purposes and legal bases

The license key, the technical activation identifier, and the license status, product or plan, activation usage and limits, and validation dates are processed to activate, deactivate, synchronize and validate the license, to enable the full version of the Software and to show the User the current license status. This processing is necessary for the performance of the End User License Agreement (Art. 6(1)(b) GDPR).

The following processing is based on the Owner’s legitimate interests (Art. 6(1)(f) GDPR):

  • showing the license holder’s name as “licensed to”, so that the license associated with the installation can be identified;
  • labeling each activation with the computer name, so that activations can be recognized and managed;
  • processing the IP address and connection metadata and applying rate limits, to prevent unauthorized or fraudulent use and to protect the security and integrity of the activation mechanism;
  • retaining license records after the end of the relationship, where necessary to establish, exercise or defend legal claims.

Providing the license key and a technical activation identifier is necessary to activate and use the full version of the Software. If they are not provided, the license cannot be activated and the Software can only be used as a demonstration version.

Service providers and recipients

The proxy component described above acts solely as a technical intermediary between the Software and the licensing back-end. It runs on infrastructure provided by Cloudflare, Inc. (United States), acting as a processor.

The licensing system is operated by the authorized Merchant of Record, currently Lemon Squeezy (United States). It validates licenses and holds the license records, together with the related order data and the license holder’s data. Lemon Squeezy is also the source of these data.

Both recipients are established in the United States, so these communications involve a transfer of personal data outside the European Economic Area. Transfers to Cloudflare are made under the EU-US Data Privacy Framework, to which Cloudflare adheres. Transfers to the Merchant of Record are made under the Standard Contractual Clauses adopted by the European Commission. A copy of the Standard Contractual Clauses can be obtained from the Owner using the contact details in the Privacy Policy.

Retention

The proxy keeps a technical cache of validation responses. Each entry expires within 72 hours and may be renewed by later successful validations.

The infrastructure provider keeps the technical request logs generated by its infrastructure, including the IP address and connection metadata, for a limited period under its platform log-retention terms. Rate-limiting counters, indexed by IP address, are kept only for the short time needed to apply the limits.

License records are retained for the duration of the license and of the relationship with the User, and for the further period needed to manage that relationship and to establish, exercise or defend legal claims. These records are held in the Merchant of Record’s licensing back-end, and their technical retention follows that provider’s terms and privacy notice, which also govern payment, invoicing, taxes, refunds, and chargebacks.

Data stored on the user’s device

The Software stores a local license file on the User’s computer, containing the license key, the license details and the license holder’s name. The Software attempts to remove the file when the license is deactivated; uninstalling the Software does not necessarily remove it.

The Software does not transmit any audio content, project or session data, or user files.