Privacy Policy & Data Protection Notice

1. Data Controller & Contact

The entity responsible for the processing of personal data under this policy is Anakrio. For any inquiries, requests, or exercise of data subject rights, please contact our Data Protection desk at: support@anakrio.com

2. Categories of Processed Data

To manage software licensing, prevent unauthorized distribution, and secure service integrity, we collect and process limited categories of data on our central infrastructure:

• Account & Identity Information: Full name and registered email address, collected upon license acquisition for fulfillment, license verification, and account recovery.
• Licensing & Authentication Cryptography: A keyed, one-way cryptographic hash of the issued license key (the raw key is never stored in plaintext), license expiration parameters, total activation counts, and automated verification timestamps.
• Technical & Network Telemetry: Originating IP addresses associated with license creation/activation, alongside short-lived, automated server logs utilized exclusively for rate-limiting, load management, and abuse mitigation.
• Administrative Audit Records: Where an administrator creates, extends, revokes, or deletes a license manually, a security audit entry is recorded for accountability and abuse prevention. Such an entry may include the registered email address.

3. Local Execution & Privacy-by-Design Architecture

Anakrio is engineered in accordance with strict Privacy-by-Design and Data Minimization principles (GDPR Article 25):

• Local File Processing: All file scanning, system inspections, threat analysis, and quarantine operations are executed strictly within the local environment of your device. No file content, file paths, filenames, or diagnostic scan reports are transmitted or exposed to our infrastructure or any third-party entities.
• Outbound Network Scope: Outbound network communication initiated by the Software is strictly restricted to encrypted requests (HTTPS) to anakrio.com solely to validate active licenses, retrieve threat definition updates, and check for application updates.

4. Data Sharing & Third-Party Subprocessors

We do not sell, rent, monetize, or trade personal data under any circumstances. Personal data is disclosed to third parties strictly on a need-to-know basis (e.g., transactional email infrastructure providers) solely for delivering transactional communications such as license keys, renewal links, and critical security notices.

5. Legal Basis for Processing

We process personal data based on the following legal grounds under GDPR Article 6(1):

• Performance of a Contract (Art. 6(1)(b)): Processing necessary to issue, validate, and deliver the free Software license issued to the user.
• Legitimate Interests (Art. 6(1)(f)): Processing technical logs, IP addresses, and administrative audit records to prevent fraud, protect infrastructure integrity, and enforce license terms.

6. Data Subject Rights

In accordance with Chapter III of the GDPR, users retain rights regarding access, rectification, restriction, and erasure of their personal data. To submit a request, use our data request form or write to support@anakrio.com.

• Please note: Because active license verification is directly bound to the registered user identity, requesting full deletion of account records will result in the immediate invalidation of the active Software license.
• Please note: Administrative audit records are kept for security and accountability purposes and may therefore remain after your license record has been deleted.