OPSpectra Lite Product Privacy Notice
Effective date: 2026-09-10
Document revision: 2026-09-10.1
1. Controller and scope
The controller for data received directly for licensing and technical support is ITPartner Paweł Gejda, trading as ITPartner PG, address: 32-700 Bochnia, ul. Podedworze 27G/6, Polska, email: support@opspectra.com.
Checkout, payment, transaction-tax, purchase-document and refund data is processed by Sold through Link, LLC f/k/a Lemon Squeezy LLC (Lemon Squeezy) under its own terms, privacy notice and the role applicable to the relevant processing activity. To the extent Lemon Squeezy acts as Merchant of Record and processes data for its own transaction or legal purposes, it acts independently from the Licensor. This notice does not replace Lemon Squeezy's privacy notice or the Licensor's website privacy/cookie notice.
2. Local Product model
The Product requires no OPSpectra account/backend and contains no telemetry sending scan results to the Licensor. Authentication uses Microsoft Azure / Microsoft Az. Reports and CSV files can contain tenant/subscription identifiers, Resource IDs, RBAC, tags, costs and recovery data; they remain local unless the User shares them.
3. Data, purposes and legal bases
The controller can receive:
- order/license data made available by the platform, such as email, order ID, Product and status, to perform the license/contract, provide support and prevent abuse — GDPR Article 6(1)(b) and (f), and (c) where legally required;
- contact data, request content, Product/runtime information and voluntarily provided redacted logs, to support and perform the contract — Article 6(1)(b);
- data required for legal duties and claims — Article 6(1)(c) and (f).
Providing data is voluntary but support or license administration may be impossible without the minimum required information. Do not submit scan data beyond what is necessary.
4. Recipients, transfers and retention
Data can be processed by email, hosting, security and support providers, and exchanged with the sales platform where relevant. If a provider processes data outside the EEA, transfer relies on the provider's applicable lawful mechanism, such as an adequacy decision or standard contractual clauses.
Support data is retained for handling and then as required for claims; legally required records are retained for statutory periods. Unnecessary data is deleted or anonymized under data-minimization principles.
5. Rights
Depending on the legal basis, a person can request access, correction, erasure, restriction, objection and portability, and lodge a complaint with the Polish data protection authority (UODO). Contact: support@opspectra.com. Any consent can be withdrawn without affecting prior lawful processing.
The controller does not make decisions producing legal effects solely through automated processing of support data.
6. Website and other channels
Forms, newsletter, analytics, cookies or direct sales require a separate current website notice and, where applicable, cookie consent controls. Another platform requires updating controller/recipient and data-flow information.