Privacy policy

1. Who is responsible

The controller of your personal data is:

Kevin Budzisz
ul. Zegadłowicza 17S/2, 71-371 Pilchowo, Poland
NIP (tax number) 8522689559, REGON 524016188
Email: support@clementour.com

Write to the email above with any question about your data.

2. When you buy

Payments are handled by Polar (polar.sh), our Merchant of Record, which processes your payment details and billing address under its own privacy policy; we never see your card. From Polar we receive your email address, name and country as given at checkout, the order number and how many seats you bought. If you bought from the demo, we also receive the demo’s computer identifier (see section 3). We use this to make your license keys, email them to you, handle refunds and support, and keep the records the law requires. Legal basis: the contract with you, and our legal obligations (GDPR article 6(1)(b) and (c)).

3. When you use Clementour

Clementour works on your computer. Your panoramas and tours are not sent to us. It contacts our license service (api.clementour.com) to activate a key, to check it every few hours while you’re online, and to count demo exports. These requests contain:

• your license key, if you have one;
• a computer identifier: a one-way code made from your operating system’s installation ID, which can’t be turned back into it;
• your computer’s name (as set in its system settings), shown if someone tries the same key on another computer, so you can tell which computer holds it;
• the version of Clementour, and the time;
• your IP address, which any internet request carries.

We use them to activate and check licenses, count demo exports, and prevent abuse (such as one key used on several computers, or a refunded key kept in use). Legal basis: the contract with you, and our legitimate interest in preventing abuse of licenses and the demo (article 6(1)(b) and (f)).

Clementour also checks clementour.com for updates. It keeps a log file on your computer, which leaves it only if you send it to us when reporting a problem.

4. Automatic decisions

When a purchase is refunded or charged back, our license service automatically stops the computers that used its keys from activating another key, and uses up their demo exports. This protects against buying, refunding and keeping the app. You can ask us to review it and to hear your side; write to us.

5. Emails and support

License keys are emailed by Resend, an email service, from its servers in the EU (Ireland). When you write to us, your message reaches our support mailbox (forwarded through Cloudflare and kept in Google’s Gmail). We use it to answer you. Legal basis: the contract, or our legitimate interest in answering questions (article 6(1)(b) and (f)).

6. This website

clementour.com uses no cookies, no analytics and no tracking, and loads nothing from other sites. If you choose euros or dollars with the currency switch, that choice is remembered in your browser (its local storage, not a cookie), so prices stay in your currency on your next visit. It is used only to show prices in that currency and, when you buy, to open the checkout in it. You can clear it with your browser’s site data. The website is hosted by Cloudflare, which keeps standard request logs (IP address, time, the page asked for) for security, for a short time.

7. Tours you publish

Tours exported with Clementour don’t contact us. If you publish a tour on your website, you are responsible for your visitors’ data there. If a tour has a YouTube or Vimeo video in a marker, the video loads from that service when a visitor opens it (YouTube’s privacy-enhanced mode, and Vimeo with “do not track”).

8. Who helps us

We share data only with the services that help us run Clementour, each for its own part:

• Polar (payments, as Merchant of Record; it acts as a controller of payment data itself);
• Cloudflare (hosting this website and the app’s downloads and updates, the license service and its database, the clementour.com domain, email forwarding);
• Resend (sending license emails);
• Google (Gmail, for the support mailbox);
• our accountant, for invoices and tax records.

Some of these companies are based in the United States. Where data leaves the European Economic Area, it is protected by the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses. We don’t sell personal data, and we don’t use it for advertising.

9. How long we keep it

• License records (key, email, order, the computer holding it): as long as the license exists, and then as long as tax and accounting law requires (in Poland, 5 years from the end of the year of the purchase).
• Demo export counts and blocked computers: for as long as they’re needed to apply the demo’s limit and the refund rules.
• Support emails: up to 3 years after the conversation, unless needed longer for a claim.
• Server logs: kept briefly, by our providers, for security.

10. Your rights

You have the right to access your data, to have it corrected or deleted, to restrict or object to its use, and to receive it in a portable form, within the limits of the GDPR. Write to support@clementour.com. You can also complain to the data protection authority: in Poland, the President of the Personal Data Protection Office (Urząd Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl), or the authority in your own country.

11. Children

Clementour is sold to businesses and adults. We don’t knowingly collect data from children.

12. Changes

We’ll update this policy when what we do changes, for example when tour hosting starts. The date at the top shows the latest version.