Privacy Policy

Last updated October 16, 2026

In short: we collect what's needed to run this site and your hosted account, such as request logs, scrubbed error reports, your account details, and what Stripe tells us about your plan, plus the email address you give the demo's test checkout, deleted within days. We don't sell data, and we share it only with the few services listed below that help run things. Deleting your account deletes its data immediately; backups expire within 14 days. This summary doesn't replace the full policy below.

Casazium respects your privacy. This page summarizes what we collect, why we collect it, and the choices you have. This is a simple, developer-friendly summary—not legal advice.

Information We Collect

Emails you send us: your message and the address you wrote from, so we can reply.
Server logs: request metadata, such as IP address, the page requested, and browser details, kept briefly for reliability and abuse prevention. The site and hosted services run no analytics or advertising trackers.
Error reports: when something goes wrong in a hosted service, it sends an error report to our own error service, so we can find and fix the problem. Reports are scrubbed before they leave the service and again when they arrive: they contain no request contents, license keys, API keys, passwords, email addresses, account identifiers or IP addresses. They do include the kind of error, where in our code it happened, the software version, the page or address it happened on (the kind of page, never the one you visited), from some services a request ID that matches our own server logs, and they may name another service involved, such as Stripe.
Status check: the homepage asks our uptime monitor at status.casazium.com for current service status. Your browser's request passes through Cloudflare, which carries traffic for that address, and reaches our monitor, which sets no cookies and keeps no log of who asked.
Hosted account data: if you sign up for a hosted service (e.g. the License Console), we store your email address, a salted hash of your password (never the password itself), your organization name, and an encrypted copy of that account's own API credential.
Billing data (paid plans): if you subscribe to a paid plan, you enter your payment details on Stripe's own hosted checkout page, and you change or cancel your plan on Stripe's hosted billing portal. Your card details go directly to Stripe — we never receive or store them. We keep only Stripe's identifiers for your customer record and subscription, which plan you're on, and its status, and Stripe notifies us when your subscription changes or a payment fails so we can keep that status current.
The demo: if you try the License Server demo, its test checkout (run by Stripe in test mode; nothing is charged) asks for an email address. Stripe passes it to our demo server, which records it on the demo license it issues. We don't email you: your key is shown on the page. When the demo app activates a license, the demo server records an identifier for that activation and when it happened. The identifier is derived from your computer's ID, but it's specific to the demo app, not the ID itself. The demo app has no analytics or tracking, and talks only to the server you point it at.
Data you submit through a hosted service on behalf of your own customers: for example, license records you issue (which may include an identifier like a name or email you provide for “issued to”). We store this as your data processor — it's content you control, not something we collect about you.

How We Use Data

To operate, secure, and improve the site and services.
To reply to emails you send us.
To detect and prevent abuse (spam, scraping, attacks).
To operate a hosted account you've signed up for, including sending account-related email (signup confirmation, password reset) via our transactional email sub-processor, Resend.
To bill a paid plan and keep your plan and its status current, through our payment processor, Stripe.
To run the demo: to issue your demo license and show you its key.

Sub-processors

Operating a hosted service means a small number of third parties process data on our behalf: our infrastructure/hosting provider (to run the service), Cloudflare (to carry traffic to status.casazium.com and to our error service), Resend (to deliver account-related email, and our own alert emails about errors), and Stripe (to process payments for paid plans, and to run the demo's test checkout). Stripe handles the payment details you give it under its own privacy policy. We don't sell data to anyone, and we don't share it with other third parties except as needed to operate the service or as required by law.

Data Retention

We keep server logs briefly for reliability and security. Emails you send us are kept as long as needed to support the conversation, then archived or deleted. Hosted account data (including data submitted on your customers' behalf, and the billing identifiers and plan status described above) is kept for as long as your account is active. When you delete your account, it and everything it owns are permanently deleted from the service immediately, and cannot be recovered. Copies may remain in our backups for up to 14 days, until those backups expire; we do not use them to restore a deleted account. Error reports are kept for up to 30 days; a count of each kind of error and its masked title are kept until 400 days after that error last occurred, so we can tell whether a fix held. Demo licenses, with the email address given to the test checkout, are deleted automatically about two days after the test purchase, and from our backups within 14 days after that; a record of each test purchase, without the email address, is kept for up to 400 days. Stripe keeps its own records of your payments, and of test checkouts, as its privacy policy describes.

Your Choices

You can email us to request deletion of emails you've sent us.
You can export your hosted account's data, or permanently delete the account and everything it owns, yourself from the console's Settings page — or email us to request either.

Contact

Questions, or a data export/deletion request? Email Bob Casazza.