Privacy Policy

1. Scope and who we are

This Privacy Policy explains how Evolve Orbit FZC, United Arab Emirates ("Evolve Orbit", "we", "us", or "our") handles personal data when you visit macstayon.com, create or use a MacStayOn account, purchase or manage a licence, activate the Mac app, contact support, or otherwise use our related services (together, the "Service").

Evolve Orbit is responsible for the personal data described in this Policy unless another party is clearly identified as responsible. Privacy, data-access, and account-deletion requests can be sent to support@macstayon.com.

2. Data we collect

Depending on how you use the Service, we may collect the following categories of information:

• Account data: name, email address, authentication identifier, optional profile image, sign-in provider, account status, and account timestamps.
• Order and licence data: plan, price, currency, renewal state, payment status, Stripe customer, checkout, invoice, and subscription identifiers, licence status, device limit, issue date, and expiry date.
• Device-activation data: a hashed device identifier, device name, Mac model, macOS version, MacStayOn version, activation and deactivation timestamps, validation status, and last validation time.
• Website and security data: IP address, browser and device type, request metadata, authentication events, rate-limit events, cookie or local-storage identifiers, and records used to detect fraud, abuse, or unauthorised access.
• Support data: your name, email address, subject, message, account link, correspondence, support status, and any logs, screenshots, or diagnostic details you deliberately provide.
• Diagnostic data: crash, error, performance, release, and request information sent by configured monitoring services. We configure monitoring to avoid collecting passwords, full payment credentials, licence secrets, and the content of unrelated work.
• Legal-consent data: the policy versions you accepted, acceptance time, selected plan, associated checkout session, IP address, and browser user agent.

3. Information the Mac app keeps locally

MacStayOn may maintain health history, session records, settings, assertion state, thermal observations, battery observations, and app audit logs on your Mac so that you can understand what the utility did. These local records are not automatically uploaded to our licensing service merely because you run a session.

If you choose to share diagnostics with support, the material you select becomes support data and will be handled under this Policy. Before sharing a log or screenshot, review it for information belonging to you, your employer, another application, or another person.

4. Information we do not intend to collect

The licensing service does not need, and is not designed to inspect, the substance of your Codex, ChatGPT, Claude, development, browser, document, or other third-party tasks. We do not ask for your third-party passwords, source-code repository credentials, full card number, card security code, or unrelated file contents.

Please do not place highly sensitive information, passwords, payment-card details, private keys, health information, or unnecessary third-party personal data in a support message.

5. Where information comes from

We obtain information directly from you, from your browser and Mac when they communicate with the Service, from team members who assign or invite a licence, and from service providers that support authentication, payments, hosting, email, monitoring, or customer support. Stripe provides payment status and billing identifiers, but not your full card details to MacStayOn.

6. How we use information

• Create, authenticate, protect, and administer accounts.
• Create checkout sessions; process purchases, renewals, cancellations, refunds, taxes, invoices, and payment failures.
• Issue, validate, transfer, suspend, revoke, expire, and audit licences and device activations.
• Provide downloads, updates, account features, support, and service communications.
• Investigate crashes, reliability issues, abuse, chargebacks, security events, and suspected fraud.
• Maintain legal, accounting, tax, consent, and transaction records.
• Improve accessibility, compatibility, performance, and customer experience using aggregated or appropriately limited information.
• Establish, exercise, or defend legal claims and enforce our Terms of Service.

7. Legal bases where applicable

Where data-protection law requires a legal basis, we rely on one or more of the following: performance of our contract with you; steps requested before entering a contract; compliance with legal obligations; our legitimate interests in operating, securing, supporting, and improving the Service; your consent; and the establishment, exercise, or defence of legal claims.

When processing is based on consent, you may withdraw that consent for future processing. Withdrawal does not make earlier processing unlawful and may prevent us from providing a feature that requires the information.

8. Payments and subscriptions

Stripe processes payment information and hosts Checkout and the customer billing portal. MacStayOn receives transaction status, customer and subscription identifiers, plan, amount, currency, invoice information, renewal state, and limited billing details needed to operate your account. We do not store full card numbers or card security codes.

Stripe acts under its own privacy terms for payment processing. Payment disputes, fraud checks, taxes, and regulatory obligations may require Stripe and us to retain or disclose transaction information.

9. Authentication providers

You may be able to sign in using email and password, Google, or Apple. If you choose a third-party sign-in provider, we receive the identifiers and profile details that provider makes available under your settings and its authorisation screen. The provider separately handles your interaction with its service.

10. Support delivery and Discord

Support requests submitted through the website are stored in the restricted MacStayOn admin inbox. They are also sent to our support mailbox and may be routed to private, staff-only MacStayOn support channels in Discord so authorised team members can respond and coordinate work. This routing can include your name, email address, subject, message, account status, request identifier, and submission time.

Do not use a public Discord channel to share licence keys, invoices, device identifiers, logs, or personal information. Our public community spaces are separate from the private staff support intake described above.

11. Service providers and recipients

We use carefully selected providers to operate the Service. Depending on configuration, these may include Supabase for authentication and database services; Stripe for billing; Vercel for hosting and request delivery; Resend for transactional email; Sentry for error and performance monitoring; Google and Apple for optional authentication; and Discord for restricted internal support notifications.

We may also disclose information to professional advisers, auditors, insurers, regulators, courts, law-enforcement bodies, or transaction counterparties where reasonably necessary and legally permitted. Providers may process information only for the relevant service or under their own legal obligations.

12. No sale or targeted advertising

We do not sell personal data and do not use MacStayOn account, licence, device, or support data to build third-party advertising profiles. We do not use third-party advertising cookies. If this changes, we will update this Policy and provide any choices required by law before the new use begins.

13. Cookies and browser storage

We use essential authentication cookies and local browser storage to keep sessions secure and remember settings such as theme. Stripe and enabled authentication or monitoring providers may use technical storage required to deliver their services. See the Cookie Policy for more detail.

14. International transfers

Evolve Orbit is based in the United Arab Emirates, and our providers may process information in the UAE, the European Economic Area, the United Kingdom, the United States, or other locations. Those locations may have data-protection laws different from your own.

Where required, we use contractual safeguards, provider data-protection terms, adequacy mechanisms, or another lawful transfer basis. You may contact us for more information about safeguards relevant to your data.

15. Retention

We retain information only for as long as reasonably necessary for the purposes described in this Policy, including providing an active account or licence, resolving support issues, maintaining security and fraud records, complying with tax and accounting rules, and handling disputes.

• Account and active licence records are normally kept while the account or commercial relationship remains active.
• Transaction, invoice, consent, and accounting records are kept for legally required periods.
• Device and licence events may remain after deactivation where needed for security, transfer history, fraud prevention, and dispute handling.
• Support messages and delivery records are kept for the time reasonably needed to resolve and audit the request, then deleted or anonymised when no longer required.
• Backups and provider logs may persist for a limited additional period before secure rotation or deletion.

16. Security

We use measures designed to protect information, including encrypted transport, managed authentication, row-level database controls, server-side authorisation, restricted administrative roles, rate limiting, signed and time-limited licence tokens, device-identifier hashing, provider access controls, audit records, and secret storage outside the public codebase.

No internet or storage system is guaranteed to be completely secure. You are responsible for protecting your account credentials, keeping your Mac and browser updated, and notifying us promptly if you suspect unauthorised access.

17. Your rights and choices

Depending on your location and subject to legal exceptions, you may have rights to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent, and to complain to a competent data-protection authority. We may need to verify your identity before acting on a request.

You can manage active devices and billing from your account. You can request account deletion through support. We may retain limited information where necessary for legal obligations, fraud prevention, security, billing records, or legal claims, and we will explain a refusal or limitation where required.

18. Automated controls

The Service automatically applies device limits, token expiry, payment status, rate limits, and security rules. These operational controls are necessary to provide and protect the Service and are not intended to make decisions producing legal or similarly significant effects about you. Contact support if you believe an automated control was applied incorrectly so a team member can review it.

19. Children

MacStayOn is a general productivity utility intended for people legally able to enter the relevant agreement. It is not directed to children under 16, and we do not knowingly collect personal data from a child in a manner prohibited by applicable law. A parent or guardian who believes a child provided information should contact us.

20. Changes and contact

We may update this Policy when the Service, providers, security practices, or legal requirements change. We will post the revised version with a new effective date and provide additional notice where a change is material and law requires it.

Questions and privacy requests can be sent to Evolve Orbit FZC at support@macstayon.com. Please use "Privacy request" in the subject line and do not include passwords or full payment-card details.