Privacy Policy
Last updated: July 11, 2026
Fretcraft is made by Zampaw S.R.L.S, Gubbio (PG), Italy (“we”, “us”). We are the data controller for the personal data described in this policy. You can reach us at support@fretcraft.app.
The short version: we collect the minimum needed to run your account, deliver your license, and support you. We don’t run advertising trackers, we don’t sell your data, and your card details never touch our servers.
Data we collect
- Account: your email address and a password (stored hashed by our authentication provider).
- Purchases: payments are processed entirely by Stripe. We never see or store your card number. We store your license key, purchase date, and Stripe’s transaction references.
- License activation & trial: when the desktop app activates a license or starts a free trial, it sends a pseudonymous machine identifier (derived from hardware, not your name) so we can enforce the 3-device limit, plus validation timestamps.
- Support & contact: if you write to us via the contact form or email, we receive your name, email, and message.
- Technical logs: our hosting provider keeps short-lived server logs (IP address, request time) for security and rate-limiting.
The desktop app itself stores your practice progress locally on your device. We do not upload or see your practice data. The app contacts our servers only to validate licenses/trials and to check for updates.
Why we process it (legal bases)
- Contract: creating your account, delivering and validating your license, providing the trial, and answering support requests.
- Legitimate interest: preventing fraud and license abuse (the device limit), and keeping the service secure.
- Legal obligation: keeping purchase records for tax and accounting law.
Who processes data for us
We use a small set of service providers (processors) to run Fretcraft:
- Stripe — payment processing and invoices/receipts.
- Supabase — account authentication and our database (licenses, trials).
- Vercel — website hosting.
- Resend — transactional emails (e.g. your license email, contact form).
- GitHub — hosting of app installers and updates, which our site delivers to you.
Some of these providers may process data outside the EU/EEA. Where that happens, transfers rely on recognised safeguards such as the EU Standard Contractual Clauses.
Cookies & tracking
We use only what is technically necessary: authentication session storage so you stay signed in, and your language preference. No advertising cookies, no third-party analytics trackers.
How long we keep data
- Account data: for as long as your account exists.
- Purchase and license records: as long as required by Italian tax and accounting law (typically 10 years).
- Device identifiers: while the associated license or trial is active.
- Support correspondence: as long as needed to handle your request and reasonable follow-ups.
Your rights
Under the GDPR you can ask for access to your data, correction, deletion, restriction, portability, and you can object to processing based on legitimate interest. Email support@fretcraft.app and we’ll respond within 30 days. You also have the right to lodge a complaint with your supervisory authority — in Italy, the Garante per la Protezione dei Dati Personali.
Security
Data is transmitted over HTTPS, passwords are hashed, payment data is handled exclusively by Stripe (PCI-DSS certified), and access to our database is restricted to server-side services.
Children
Fretcraft is not directed at children under 16, and we do not knowingly collect their data.
Changes
If we change this policy, we’ll update this page and the date above. Significant changes will be announced by email or in the app.