Legal
Privacy Policy
Last updated: 18 May 2026
1. Data Controller
The data controller within the meaning of Art. 4(7) of Regulation (EU) 2016/679 (GDPR) is:
Mauro De Gennaro
Via Alberi 20b
80069 Vico Equense (NA), Italy
Email: support@aimerchworkflow.com
2. Personal Data Collected and Purposes
We process the following personal data for the purposes indicated below:
| Data category | Purpose | Legal basis |
|---|---|---|
| Email address | License management, product activation, purchase-related communications | Art. 6(1)(b) GDPR — performance of contract |
| Device data (device ID, name, operating system, app version) | License activation and validation, prevention of unauthorised use | Art. 6(1)(b) GDPR — performance of contract |
| IP address (anonymised — last octet zeroed) | Service security, abuse prevention, system logs | Art. 6(1)(f) GDPR — legitimate interest |
| Bug reports (description, log files, attachments) | Software improvement and technical support | Art. 6(1)(a) GDPR — consent (voluntary submission) |
| Download data (version downloaded, anonymised IP, user agent, timestamp) | Internal software distribution statistics | Art. 6(1)(f) GDPR — legitimate interest |
3. Processing Methods
Data is processed by electronic means with appropriate security measures to prevent loss, unlawful or incorrect use, and unauthorised access. No automated decision-making producing significant legal effects (e.g. profiling) is carried out.
4. Retention Periods
- Licence data (email, device data): retained for the duration of the contract and for 2 years after expiry or termination, for legal and fiscal obligations.
- System and download logs: retained for a maximum of 6 months.
- Bug reports: retained for a maximum of 12 months from receipt, unless ongoing technical support requires otherwise.
5. International Data Transfers
Personal data may be transferred outside the EU/EEA as the service relies on the following providers:
- Vercel Inc. (USA) — website hosting. Transfer carried out pursuant to Art. 46 GDPR via Standard Contractual Clauses (SCC) approved by the European Commission.
- LemonSqueezy (Lemon Squeezy, LLC) (USA) — payment processing and subscription management. Payment data is processed directly by LemonSqueezy; please refer to their Privacy Policy.
- Amazon Web Services (AWS) (USA) — storage of bug report files. Transfer via SCC.
6. Your Rights
Under Arts. 15–22 GDPR, you have the right to:
- Access (Art. 15) — obtain confirmation and a copy of the data processed
- Rectification (Art. 16) — correct inaccurate data
- Erasure (Art. 17) — request deletion ("right to be forgotten")
- Restriction (Art. 18) — restrict processing in certain circumstances
- Portability (Art. 20) — receive your data in a structured, machine-readable format
- Objection (Art. 21) — object to processing based on legitimate interest
- Withdraw consent (Art. 7) — at any time, without affecting the lawfulness of prior processing
To exercise your rights, send a request to: support@aimerchworkflow.com. We will respond within 30 days of receipt (extendable by a further 60 days in complex cases).
7. Right to Lodge a Complaint
You have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) — Piazza Venezia 11, 00187 Rome, Italy — or with the supervisory authority of the EU Member State of your habitual residence or place of work.
8. Cookies
This website uses only strictly necessary technical cookies (admin session cookie). No profiling or tracking cookies are used. For full details, see our Cookie Policy.
9. Changes to This Policy
We reserve the right to update this Privacy Policy at any time by publishing the revised version on this page. Please check back periodically. Changes take effect upon publication.