# SmartCut64 privacy notice

Published and effective: 27 August 2026

This notice describes the data used by the official SmartCut64 purchase and
activation service. SmartCut64 does not contain advertising, behavioural
tracking, or general application telemetry.

The controller and seller is **LINEKERPANDI LIMITED**, company number
**06406014**, a private limited company incorporated in England and Wales. Its
registered office is **1035A Finchley Road, London, NW11 7ES, United Kingdom**.

## Data used for purchase and activation

Lemon Squeezy acts as merchant of record for purchases and processes the
customer, payment, tax, order, refund, and licence-key information needed for
the transaction under its own privacy terms.

When a customer chooses **Activate This Computer**, SmartCut64 sends the
following over HTTPS to the SmartCut64 activation service:

- the email address used for the purchase;
- the Lemon Squeezy licence key; and
- a 32-character Installation ID.

The Installation ID is a one-way, domain-separated SHA-256-derived identifier.
The raw Windows MachineGuid is not transmitted. The activation service sends
the licence key to Lemon Squeezy for validation. It stores only a SHA-256 hash
of that key, the already-hashed Installation ID, Lemon order/licence/instance
identifiers, customer email and customer name, status, and timestamps. The raw
licence key is not retained by the activation service.

On the computer, the purchase email and raw licence key are encrypted for the
current Windows user with Windows Data Protection API (DPAPI). They are used
only to deactivate, transfer or support reactivation for that computer.
Deactivation removes the local entitlement and encrypted activation record.

## Purpose, retention, and sharing

Activation data is used to verify purchases, enforce the advertised activation
limit, manage activation transfers, process refunds or
disabled licences, prevent abuse, and provide customer support. It is shared
only with service providers needed for these purposes, currently Lemon Squeezy
and Cloudflare, and where legally required.

Active entitlement records are retained while needed to provide the purchased
licence and update/support entitlement. Deactivated, refunded or disabled
activation records are retained for up to 24 months where reasonably needed for
reset history, disputes and fraud prevention, then deleted or anonymised.
Ordinary support correspondence is retained for up to 24 months after closure;
application-security logs controlled by us are retained for up to 90 days
unless an incident requires proportionate longer preservation. Transaction and
accounting records are kept for the period required by applicable tax, company
and consumer law.

## Customer choices and rights

Customers can deactivate a computer from **Help > Licence & Activation**.
Requests for access, correction, deletion, portability, restriction, or an
objection should be sent to **privacy@linekerpandi.com**. You may also complain
to the UK Information Commissioner's Office or the supervisory authority
available where you live or work. Some
transaction records may need to be retained by the merchant of record or seller
for tax, fraud, and legal purposes.

## Contact and changes

Privacy requests should be sent to **privacy@linekerpandi.com**. Information
Commissioner's Office complaint information is available at
<https://ico.org.uk/make-a-complaint/>. We will publish material changes and
update the date above; a change will not retroactively reduce rights attached
to an existing purchase.
