Studio Cucurbits is operated by Sachie Kobayashi (Studio Cucurbits.). Our business information gives our address and contact details. For privacy requests, email privacy@studiocucurbits.com.
Information and purposes
- Purchases and activation: we receive your checkout email, customer and transaction identifiers and purchase status from Paddle. We retain these with the purchased products, licence-code verifier, device identifiers and labels, activation history and signed activation results to provide and recover licences and prevent abuse. We do not store plaintext activation codes or payment-card details.
- Support: we use the information you send us to answer your enquiry.
- Website and downloads: hosting providers handle request data, such as IP addresses, to deliver and secure the service. We use IP addresses during licence requests to limit abuse. The activation application does not retain raw IP addresses.
We do not sell or rent personal data or use licence records for advertising. We use purchase and activation data to fulfil the licence agreement, support data to answer requests, and security data to protect the service.
Service providers and security
Paddle handles checkout, payments, receipts and refunds as reseller and Merchant of Record. It shares the customer and purchase information needed to provide your licence. Its own privacy policy covers its processing of payment information.
AWS hosts the website and licence service and sends setup and recovery emails. Cloudflare delivers production installers.
Access to licence records is restricted to authorized service roles and support and operations staff. We use encrypted connections and encrypted processing queues. Paddle notifications can contain customer and billing information while awaiting processing or investigation, but billing details are not copied into our licence database or ordinary application logs.
We operate in Japan. These providers may process data in other countries as described in their privacy notices.
Retention
Licence records are kept while the licence exists so that you can activate computers and recover access. Deleting them prevents future activation and recovery. A licence already installed continues to work offline.
Application logs and event-processing records have a 14-day retention period. Failed notifications and email jobs can remain in encrypted failure queues for up to 14 days. Expired database records may take longer to be deleted automatically.
Support information is kept as needed to handle your enquiry and any related issue. Paddle retains payment records according to its own policy and legal obligations.
Your requests
You can ask us for access to your data, correction or deletion. Where applicable law provides these rights, you can also request portability, restrict processing, object to processing, or complain to a data protection authority. Email privacy@studiocucurbits.com. We will verify your request and explain any retention or service limitations. Requests concerning Paddle’s payment records may need to be directed to Paddle.