Privacy Policy

1. Introduction

This Privacy Policy explains how Obsid Pro collects, uses, stores, and protects information about you when you use the Obsid Pro website at obsid.pro and the Obsid Pro desktop application. We are committed to handling your information responsibly and transparently.

We collect the minimum amount of information necessary to provide the service. We do not sell your data, we do not use it for advertising, and we do not share it with third parties for their own commercial purposes. This policy describes exactly what we do with the information we collect and why.

By using Obsid Pro you acknowledge that you have read and understood this Privacy Policy. If you have questions about how we handle your information, contact us at [email protected].

2. Information we collect

When you create an account with Obsid Pro, we collect your email address and your display name if you provide one. Your email address is used to identify your account, send you transactional communications related to your subscription, and allow you to sign in. Your display name is used to personalise your experience within the application.

When you subscribe, your payment is processed entirely by Dodo Payments. We never see or store your card number, bank details, or any other payment credentials. We receive confirmation from Dodo Payments that a subscription has been created or renewed, along with the subscription tier and status. This confirmation is what we use to activate and maintain your access to the software.

The Obsid Pro desktop application generates a device identifier when it first runs on your computer. This identifier is a one-way hash derived from stable characteristics of your hardware and operating system. The hash cannot be reversed to recover any information about your device. It is used solely to verify that the number of devices using your account does not exceed the limit for your subscription tier. The raw hardware information is never transmitted to our servers.

Our servers automatically record standard log data when you interact with the Obsid Pro API or website. This includes your IP address, the date and time of the request, the type of request made, and whether it succeeded or failed. This information is used for security monitoring, diagnosing technical issues, and understanding general usage patterns. It is not used to build profiles or track individual behaviour.

When you use the support chat on our Help page, your conversation may be stored by our support provider to allow follow up and to improve the quality of support. You can request deletion of support conversation data at any time by contacting us.

3. How we collect information

We collect your email address and display name directly from you when you create an account or sign in with Google. When you use Google sign-in, we receive only the email address and display name associated with your Google account. We do not receive access to your Google contacts, files, or any other Google data.

Subscription confirmation data is received automatically from Dodo Payments when a payment is processed. We do not collect this information directly from you.

Device identifier data is generated locally on your computer by the Obsid Pro application and transmitted to our servers during the license validation process that occurs when you launch the application. This process happens automatically and does not require any action from you.

Server log data is collected automatically by our infrastructure whenever a request is made to our API or website. This is standard practice for any web service and cannot be disabled without affecting the operation of the service.

4. How we use your information

Your email address is used to identify your account, to authenticate you when you sign in, and to send you transactional emails. Transactional emails include subscription confirmations, payment receipts, renewal reminders, and important notices about your account or the service. We do not send marketing emails without your explicit consent.

Your subscription status and tier are used to determine what features you have access to in the desktop application. When you launch Obsid Pro, the application validates your subscription against our servers using your account credentials and device identifier. If your subscription is active, the application unlocks all features included in your plan.

Device identifier data is used exclusively to enforce subscription limits. The Obsid Pro plan permits one user account and Obsid Pro Plus permits up to four. The device identifier allows us to verify compliance with these limits without storing identifiable information about your hardware.

Server log data is used for security monitoring, identifying and resolving technical issues, and understanding aggregate usage patterns. Logs are not used to track individual user behaviour or to build profiles.

Support conversation data is used to provide assistance and to follow up on unresolved issues. It may also be reviewed to identify common problems and improve the software and documentation.

5. Legal basis for processing

We process your personal information on the following legal bases. For account creation and subscription management, processing is necessary to perform the contract between you and Obsid Pro. Without this information we cannot provide the service you have subscribed to.

For security monitoring and fraud prevention, processing is based on our legitimate interest in protecting the integrity of the service and the accounts of all users.

For any processing not covered by the above, we will seek your explicit consent and will clearly explain what we are requesting consent for and how to withdraw it.

6. Data retention

Account data including your email address, display name, and subscription history is retained for as long as your account is active. If you request deletion of your account, we will delete your personal data within thirty days of receiving the request, subject to the exceptions described below.

Payment and transaction records are retained for seven years from the date of the transaction. This retention period is required for financial and legal record keeping and cannot be shortened regardless of account deletion requests.

Server log data is retained for ninety days and then automatically deleted. Logs are not archived beyond this period.

Device identifier hashes are retained for as long as your account is active and are deleted when your account is deleted. Because device identifiers are one-way hashes and cannot be reversed, their deletion does not affect any personally identifiable information.

7. Third party services

Obsid Pro uses Dodo Payments to process all subscription payments. Dodo Payments receives your payment credentials, billing information, and transaction details as necessary to process payments and manage your subscription. Dodo Payments operates as a Merchant of Record and is independently responsible for the data they collect during payment processing. You can review their privacy practices at dodopayments.com/privacy.

All other infrastructure used to run Obsid Pro including authentication, database storage, and server hosting is operated directly by us or under strict data processing agreements that prohibit third parties from using your data for their own purposes.

We do not use third party analytics services, advertising networks, or tracking pixels. We do not share your data with social media platforms or marketing providers.

8. Data security

We take reasonable and appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, destruction, or alteration. Authentication is handled through industry standard protocols. Data transmitted between your device and our servers is encrypted in transit using TLS. Data stored in our database is encrypted at rest.

We limit access to personal data to those who need it to operate the service. We do not store payment credentials at any point in our systems.

While we implement strong security practices, no system is completely immune to security incidents. In the event of a data breach that affects your personal information, we will notify you as required by applicable law and take immediate steps to mitigate the impact.

9. International data transfers

Obsid Pro is operated with infrastructure based in the United States. If you are accessing Obsid Pro from outside the United States, your information will be transferred to and processed in the United States. By using Obsid Pro you consent to this transfer.

We ensure that any transfers of personal data are handled in accordance with applicable data protection law and that appropriate safeguards are in place.

10. Your rights

You have the right to access the personal information we hold about you. You can request a copy of your data by contacting us at [email protected]. We will respond within thirty days.

You have the right to request correction of inaccurate personal information. If your email address or display name is incorrect, you can update it through your account settings or by contacting us.

You have the right to request deletion of your personal information. We will delete your data within thirty days of receiving a verified deletion request, subject to our legal obligations to retain certain records as described in the data retention section above.

You have the right to object to or restrict certain types of processing. If you have concerns about how we are using your information, contact us and we will review your request.

If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation including the right to data portability and the right to lodge a complaint with your local supervisory authority. If you are a California resident, you have rights under the California Consumer Privacy Act including the right to know what personal information we have collected and the right to opt out of the sale of your personal information. We do not sell personal information.

11. Legal requests

We may be required to disclose your personal information in response to a valid legal request such as a court order, subpoena, or government inquiry. We will comply with such requests to the extent required by applicable law.

Where permitted by law, we will attempt to notify you before disclosing your information in response to a legal request. We will not disclose your information to law enforcement or government agencies beyond what is legally required.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in how we operate, legal requirements, or our data practices. When we make significant changes, we will notify you by email and by posting a notice on the website.

The date at the top of this policy indicates when it was last updated. We encourage you to review this policy periodically. Your continued use of Obsid Pro after changes take effect constitutes your acceptance of the updated policy.

13. Contact

If you have any questions about this Privacy Policy or how we handle your information, contact us at [email protected]. We aim to respond to all privacy-related enquiries within forty eight hours.