Privacy policy

Who is responsible

The controller of your personal data is Rytis Bukauskas (individual activity certificate No. 888984), Lithuania. For anything about your data, write to support@moonivo.com.

When you send an inquiry

The contact form asks for your name, email and a description of the project. Phone, website, budget and timeline are optional.

We use these details to reply, ask follow-up questions and prepare a proposal. The legal basis is taking steps at your request before entering into a contract (Article 6(1)(b) GDPR).

The inquiry is stored in our admin system and sent to our mailbox. If no work follows, we delete it within 2 years after our last conversation. If we work together, it becomes part of the project records.

When you buy a module

To sell you a licence we keep your name, email, country, optional company name and VAT number, your orders, your licences and the shop address you add to a licence. For each download we record the date, the version and the IP address, to protect the files from abuse.

The legal basis is performing the contract with you (Article 6(1)(b) GDPR) and meeting accounting and tax obligations (Article 6(1)(c) GDPR).

Payments are handled by our payment provider, named on the checkout page. We never see or store card details.

Account and licence data are kept while your account exists. Orders and invoices are kept for as long as Lithuanian accounting law requires (up to 10 years). You can ask to close your account at any time; records that the law requires us to keep are then kept only for that purpose.

Emails we send

We only send emails about something you asked for: a reply to your inquiry, an order receipt, a sign-in link, a notice that a new version of a module you own is available, and a reminder before and when your 12 months of updates end.

We do not send newsletters or marketing emails. If you do not want update notices or reminders, reply to any of them and we will stop.

Cookies

The site uses only cookies that it needs to work. They do not track you and need no consent:

• moonivo-session: keeps the forms and your sign-in working while you browse. Removed when you close the browser or after 2 hours of inactivity.
• XSRF-TOKEN: protects forms against cross-site request forgery. Same lifetime as the session.
• remember_customer_…: keeps you signed in to your account after you open a sign-in link. Set only for buyers, removed when you sign out.

Fonts and images are served from our own server. The site does not load analytics, advertising, social media or video embeds.

Server logs

Like any web server, ours records technical data about requests (IP address, date, page, browser) to keep the site secure and find errors. These logs are deleted within 30 days unless they are needed to investigate an attack.

Who else processes your data

We share data only with service providers that help us run the site, and only as much as each one needs:

• our hosting provider, where the site, its database and its logs are stored;
• our email provider, which delivers the emails described above;
• the payment provider, when you buy a module.

These providers act on our instructions under data processing agreements. If any of them processes data outside the European Economic Area, it is protected by an adequacy decision or the European Commission's standard contractual clauses. We do not sell or rent personal data.

Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict its use, or send it to you in a portable format. You can also object to processing based on our legitimate interests. Write to support@moonivo.com; we answer within one month.

If you believe we handle your data unlawfully, you can complain to the State Data Protection Inspectorate of Lithuania (vdai.lrv.lt) or to the data protection authority of your own country.

Security

The site is served only over HTTPS. Sign-in links are single-use and expire quickly, the admin area requires two-factor authentication, and module files can be downloaded only by their owners.

Changes to this policy

When the way we handle data changes, we update this page and the date at the top. If a change affects buyers, we will also tell them by email.