Privacy Policy

Last updated: 1 September 2026

1. Who we are

The controller of your personal data is:

Creslo, s.r.o.
Kmeťova 36, Košice, Slovakia
Company ID (IČO): 51760193 · VAT ID (DIČ): 2120775019
Contact: privacy@imposio.app

This policy explains how we process personal data across the Imposio website (imposio.app, docs.imposio.app, dl.imposio.app), our licensing and reporting service (api.imposio.app) and our community forum (community.imposio.app).

2. What we collect and why

• Website usage (server logs): IP address, browser/user-agent, requested pages and timestamps. Used to operate and secure the service. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
• Downloads: IP address, file name and timestamp are recorded when an installer is downloaded, so we can count downloads per release. Legal basis: legitimate interest.
• Website statistics: we use Umami (Umami Cloud), which is cookieless and records page views, referrer, approximate country and device type without tracking you across other websites. Legal basis: legitimate interest.
• Advertising measurement: our pages load the Google Ads conversion tag, which lets us see whether an advertisement led to a purchase. Google receives your IP address, user-agent and the page URL. We use Google Consent Mode: in the EEA, the UK and Switzerland advertising and analytics storage is denied by default, so no advertising cookies are set unless you consent and Google receives only cookieless signals; outside these regions advertising cookies and identifiers may be used. Legal basis: consent / legitimate interest. See our Cookie Policy.
• Purchases: payments are handled by Paddle as Merchant of Record. Paddle collects your name, email address, billing country, VAT ID and payment details. We receive only the customer ID, email address and name needed to issue your licence — we never receive or store card data. Legal basis: performance of a contract and legal obligation (Art. 6(1)(b) and 6(1)(c) GDPR).
• Licence and activation: licence key, licensee name and email address, device identifier (“machine ID”), device name, and the IP address and timestamp of each activation, kept in an activation log. This lets us deliver the licence, allow use on the number of devices the licence covers, and detect sharing beyond that limit. A trial records only the device identifier, device name, IP address and timestamp. Legal basis: performance of a contract; legitimate interest in preventing licence abuse.
• Problem reports from the application: when you choose to send a bug report, translation suggestion or feature request from within Imposio, we receive your message, the contact address you optionally provide, the application version, operating system and interface language, and — for a crash report — a crash log. Nothing is sent unless you send it. Legal basis: legitimate interest / consent.
• Forum account: username, email address, password (stored only as a salted hash), and any profile details you provide. Legal basis: performance of a contract / consent.
• Forum content: discussions, posts, reactions and the IP address used when posting. Legal basis: contract and legitimate interest.
• Email: we send account and notification emails (e.g. email confirmation, password reset). Legal basis: contract / legitimate interest.
• Anti-spam: registration is protected by Google reCAPTCHA, which processes your IP address and interaction data. Legal basis: legitimate interest (security).

We do not sell personal data, we do not build advertising profiles, and the desktop application sends no telemetry beyond the licence checks and the reports you choose to send.

3. Recipients and processors

• Contabo GmbH (Germany, EU) — hosting and encrypted off-site backups.
• Paddle.com Market Ltd (United Kingdom) — Merchant of Record: payment processing, invoicing and tax handling for all purchases.
• Umami Software, Inc. (Umami Cloud) — cookieless website statistics.
• Google (Google Ireland Ltd / Google LLC) — outgoing email (Google Workspace), reCAPTCHA and Google Ads conversion measurement.

Transfers outside the EU/EEA take place under the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

4. Retention

• Account data: kept while your account exists; deleted on request or account deletion.
• Licence data: kept while the licence is valid and afterwards only as long as tax and accounting law requires.
• Activation log: kept while the licence is active, for licence-abuse detection.
• Problem reports: kept until the issue is resolved.
• Server and download logs: kept for a limited period for security and diagnostics.
• Backups: encrypted and rotated, retained for 7 days.

5. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict or object to processing, to data portability, and to withdraw consent at any time. Contact privacy@imposio.app.

You also have the right to lodge a complaint with the Slovak supervisory authority, the Úrad na ochranu osobných údajov Slovenskej republiky (dataprotection.gov.sk).

6. Security

We protect data with HTTPS across all sites, hashed passwords, encrypted backups and access controls. No method of transmission or storage is completely secure, but we take reasonable measures to protect your information.

7. Changes

We may update this policy from time to time. Material changes will be reflected by the "last updated" date above.