Privacy Notice

What the application does not collect

Reaction does not record your keystrokes, does not capture screenshots or screen content, does not read the contents of your documents, and does not track which websites or applications you use. It does not send your activity to us.

What we collect

We collect only what a licence needs in order to exist and be validated:

• Your email address — to create your account, send you your licence key, and contact you about your subscription.
• Your licence and subscription record — the licence key, its status, the plan, and the renewal or expiry date.
• Device activation data — a device fingerprint (an identifier derived from your machine), plus the device name, operating system and application version. This is how we enforce the one-device limit and how the application checks that its licence is still valid.
• Payment metadata received from the payment provider — for example the subscription identifier, the customer identifier and the payment status. We never receive or store your card number.
• Technical logs — including IP addresses — kept for security, abuse prevention and rate limiting of our licence API.

Why we use it

To issue and validate your licence, to enforce the device limit, to email you your key and subscription notices (including a reminder before your trial converts), to provide support, to prevent fraud and abuse, and to meet our accounting and legal obligations.

Who we share it with

We do not sell your data and we do not use it for advertising. We share it only with the service providers that make Reaction work:

• Lemon Squeezy and Paddle — our Merchant of Record for card payments. They are the seller of record and process your payment, billing and tax data under their own privacy policies.
• Cryptomus — processes cryptocurrency payments.
• Postmark — delivers our transactional email (your licence key, trial and subscription notices).
• Cloudflare — DNS, security and delivery of application downloads.
• Contabo — hosting of our licence and website servers (European Union).

How long we keep it

We keep your account, licence and activation data for as long as your subscription is active, and afterwards for as long as we need it for support, fraud prevention and our accounting obligations. Technical logs are kept for a short period only. You can ask us to delete your data at any time (see below).

Cookies

Our website uses essential cookies only: a session cookie and a cookie that remembers your language choice. We do not use advertising or cross-site tracking cookies.

Your rights

You can ask us to give you a copy of your data, correct it, delete it, or restrict how we use it, and you can object to our processing. Write to [email protected] and we will respond within 30 days. If you are in the EU or UK, you also have the right to complain to your local data protection authority.

Changes and contact

If we change this notice materially, we will tell you by email or in the application. Questions or requests: [email protected].