Privacy Policy

This policy describes how Star Soft (the Company, we, us) collects, uses and protects personal data in connection with RebootGuard, commercial reboot-to-restore protection software for Windows PCs in internet cafés and gaming centers.

This policy applies to:

• The RebootGuard website and customer portal (account, licenses, support tickets and orders).
• The license server that the Master Console contacts for activation and validation.
• Our support channels, including diagnostic logs that a customer chooses to send.

This policy is supplemented by the Logs and Data Collection Policy, which details operational and diagnostic logs, and should be read together with it and with the Terms of Use and End-User License Agreement.

The controller of the personal data described in this policy is Star Soft, [Star Soft legal address], registration number [registration number].

Privacy contact: [privacy contact email].

Any data a customer venue (such as an internet café) processes about its own visitors on its premises is the sole responsibility of that customer; the software does not send such data to us.

We follow the principle of data minimization and collect only what is needed to provide and protect the service:

Website and customer portal account

• Name and email address.
• Company or venue name (optional).
• Phone number (optional, usually requested for quotes).
• Password, stored only as a hash; we cannot see your original password.
• Multi-factor authentication (TOTP) secret if you choose to enable it, stored encrypted.
• Licenses, orders, invoices and support tickets linked to the account.

License server data

During activation and periodic license validation, the Master Console sends the license server:

• Activation ID.
• A hashed device fingerprint; raw hardware serial numbers are not sent.
• Machine name.
• Product version.
• Number of managed devices.
• Timestamps.
• IP address.

Security and audit data

We record IP address and user agent in security and audit logs on sign-in and sensitive actions to protect accounts and prevent abuse.

Contact and quote requests

When you submit the contact or quote form, we keep the data you provide (name, email, phone if given, venue name and message).

Support data

Support ticket content, and diagnostic logs you upload with explicit consent each time, as described in the Logs and Data Collection Policy.

RebootGuard is designed not to collect or send us any of the following:

• User files or documents stored on the PCs.
• Passwords typed on gaming or admin PCs.
• Browsing history or keystrokes.
• Screenshots.
• Game data or players' game-platform accounts.
• Personal data of venue visitors or players.

We do not use your data for targeted advertising, do not build marketing profiles about you, and do not sell personal data.

The website uses a single strictly necessary cookie, rg_session. It is HttpOnly, so it cannot be read by page scripts, and it is used to maintain and protect your signed-in session.

We do not use advertising cookies or third-party tracking cookies. The website may use local browser storage for interface preferences only, such as language or theme.

We do not sell or rent personal data. We share it only as strictly necessary with:

• Our hosting and infrastructure provider: [hosting provider].
• Payment and invoicing providers when orders are completed: [payment provider].
• An email delivery provider for account and support messages: [email service provider].
• Public authorities where required by law, or to protect our rights or the safety of users.

These processors are bound by written agreements to process data only on our instructions and to apply appropriate safeguards.

Data may be processed or stored in countries other than the one where you reside, depending on the locations of our hosting provider's servers. In such cases we apply the safeguards required by applicable law, such as standard contractual clauses or equivalent mechanisms, to ensure an adequate level of protection.

After these periods we delete data or anonymize it so that it can no longer identify you.

• Encrypted connections using TLS.
• Hashed passwords and encrypted MFA secrets.
• Multi-factor authentication (TOTP) available to customers and mandatory for our staff.
• Role-based access for staff, so each person sees only what their work requires.
• A tamper-evident, hash-chained audit log.
• Rate limiting and temporary account lockouts after repeated failed sign-in attempts.

No method of transmission or storage is completely secure. We will notify you and the competent authorities of any material personal data breach as required by law.

Subject to applicable law, you have the right to:

• Access your personal data and obtain a copy.
• Export your data in a machine-readable format.
• Correct or complete inaccurate data.
• Request deletion of your data, subject to legally required retention such as invoices and audit records.
• Object to processing based on legitimate interest.
• Withdraw consent at any time for consent-based processing, without affecting prior lawful processing.

To exercise these rights, contact us via the support page or at [privacy contact email]. We will respond within 30 days and may need to verify your identity first.

You also have the right to lodge a complaint with the data protection authority in your country.

Our services are intended for businesses and are not directed at children under 16. We do not knowingly collect their data, and we will delete any such data if we become aware of it.

We may update this policy from time to time. The date of the latest revision appears at the top of the page, and we will notify account holders of material changes by email or through the customer portal before they take effect.

Star Soft — [Star Soft legal address]

Privacy email: [privacy contact email]

General email: [contact email]