Privacy Policy

Last updated: February 2026

This Privacy Policy explains how DCToolz (“we”, “us”, “our”) collects, uses, and protects personal data when you use www.dctoolz.com, our client portal, and our software licensing services.

1. Data Controller

Data Controller: DCToolz – David Carrière
Website: www.dctoolz.com
Email: contact@dctoolz.com
Jurisdiction: France

2. Personal Data We Collect

We collect only data strictly necessary to operate and secure our services (data minimization principle).

Account Information

First and last name
Email address
Encrypted password

Licensing and Technical Data

License keys
Purchased products
Number of seats
Subscription status
Machine ID (used for license validation and fraud prevention)
Usage logs related to license validation

Connection Data

IP address (used temporarily for license verification, fraud detection, and diagnostics). IP addresses are processed transiently for security and diagnostic purposes and are not stored permanently, except where retention is strictly required to investigate fraud, abuse, or security incidents.

Billing Information

Payment and subscription data are processed by Stripe.
We do not store full credit card details on our servers.

Transactional Data

Order history
Invoices
Subscription changes
Transactional email communications

We do not collect data for marketing purposes and we do not sell personal data. Nothing is shared for marketing.

3. Purposes of Processing

We process personal data strictly for:

Account creation and authentication
License generation and validation
Enforcement of floating seat limitations
Fraud prevention and abuse detection
Subscription and billing management
Service security and diagnostics
Legal and accounting compliance
Managing automatic subscription renewals
Processing subscription cancellations
Handling refund requests where legally required

4. Legal Basis for Processing (GDPR)

Where applicable under GDPR, processing is based on:

Contract performance (Art. 6(1)(b)) – to provide the services you purchase
Legal obligations (Art. 6(1)(c)) – accounting and tax compliance
Legitimate interests (Art. 6(1)(f)) – service security, fraud prevention, license enforcement
Consent (Art. 6(1)(a)) – where legally required
Subscription renewals and billing automation: contract performance
Machine ID and license validation logs: legitimate interest for fraud prevention and license enforcement

5. Data Retention

Personal data is retained only for as long as necessary:

Account data: for the duration of the account and up to 3 years after inactivity
Billing data: retained according to legal accounting obligations (up to 10 years in France)
Technical logs: retained for a limited period necessary for security and diagnostics
Machine ID: retained only while the license is active

Data may be anonymized or deleted when no longer required.

6. Data Sharing

We share data only when necessary:

Stripe (payment processor)
Hosting and infrastructure providers
Legal authorities when required by law

Stripe acts as an independent data controller for payment processing under its own Privacy Policy. All service providers processing personal data on our behalf act under contractual data processing agreements compliant with applicable data protection laws.

7. International Data Transfers

Where data is transferred outside the European Union, appropriate safeguards are implemented, including Standard Contractual Clauses or equivalent legal mechanisms.

8. Security Measures

HTTPS/TLS encryption
Secure password hashing
Restricted administrative access
Server-level protections
License validation security mechanisms

However, no system can guarantee absolute security.

9. Your Rights

Under applicable data protection laws (including GDPR), you may have the right to:

Access your personal data
Rectify inaccurate data
Request deletion (subject to legal obligations)
Restrict or object to certain processing
Request data portability where applicable
Lodge a complaint with your local data protection authority (for France: CNIL – www.cnil.fr)

To exercise your rights, contact: contact@dctoolz.com

10. Cookies

We use only strictly necessary technical cookies for authentication, session management, and security. No marketing or tracking cookies are used.

11. Children’s Privacy

The services are not intended for individuals under 16 years of age.

12. Changes to this Policy

We may update this Privacy Policy from time to time. The latest version will always be published on our website.