In short: the documents you open with ApriP7M are never sent to us. We use no profiling cookies, advertising or analytics tools. If you buy a licence, we process only the data needed to make it work.

1. Data controller

The data controller is the operator of ApriP7M, an independent service, reachable at [email protected]. The controller’s identification details are provided on request to anyone entitled to them.

2. Your documents

The files you open (.p7m, .xml, .m7m, .tsd and their content) are read and processed exclusively by your browser, on your device. The tool page technically prevents the browser from opening network connections (Content-Security-Policy connect-src 'none'). We do not receive, see or store your documents.

3. Data we process

Data	Why	Legal basis	Retention
IP address, date and time, requested page, user agent (technical logs of the hosting provider)	To provide the site and protect it from abuse	Legitimate interest	For the short period set by the hosting provider
Licence key, plan, status, dates; Paddle transaction and customer identifiers	To issue and manage the licence, refunds	Performance of a contract	For the life of the licence and up to 24 months after it expires or is revoked
Random device identifier generated by the browser, and platform type (e.g. “Win32”)	To enforce the device limit	Performance of a contract	As long as the device remains linked to the licence
Email address and content of support messages	To answer your requests	Performance of a contract / legitimate interest	Up to 24 months after the last contact

We do not receive your card or bank account details. We do not store your name or email address on the licence server.

4. Payments: Paddle

Purchases are handled by Paddle.com, which acts as Merchant of Record and as an independent controller of the data it collects during payment (name, email, country, payment details, VAT number if any). Paddle’s privacy policy applies to that data. Paddle sends us the order identifiers needed to create the licence and, when requested for support, the order details.

5. Browser local storage

ApriP7M stores only two technical items in your browser (localStorage): the random device identifier and, if you have a licence, the key with its signed certificate. They are needed for the licence to work and are not used to track you. You can delete them at any time from the Licence page or your browser settings. If you install ApriP7M as an app, the browser keeps a copy of the site’s files for offline use.

6. Providers

Cloudflare, Inc.: site hosting, licence server (Workers and KV) and forwarding of support emails.
Paddle.com: payments, invoicing and taxes (independent controller).
The provider of the mailbox where we receive support messages.

Some of these providers may process data outside the European Economic Area; in that case the transfer is based on a European Commission adequacy decision or on standard contractual clauses.

7. Your rights

You can request access, rectification, erasure, restriction and portability of your data, and object to processing based on legitimate interest, by writing to [email protected]. For payment data, please also contact Paddle. You also have the right to lodge a complaint with the supervisory authority of your country (in Italy, the Garante per la protezione dei dati personali, garanteprivacy.it).

8. Changes

Any updates to this policy will be published on this page with the new date.

This is an English translation of the Italian Informativa sulla privacy, provided for convenience.