DelimixxDelimixx Privacy Policy
1. Who we are
Delimixx (the "Software") and this website are provided by Quintastella, a sole proprietorship in Japan ("we", "us"). We are the controller of the personal information described in this policy, except for the purchase details that Paddle collects as an independent controller (see section 3).
- Operator: Quintastella, a sole proprietorship in Japan
- Contact for privacy matters: privacy@delimixx.com
- Operator's name and address: we will provide them without delay on request to the address above.
2. The basic idea
The Software runs on your computer. The contents of your files, your edits and your usage are not sent to us. We have not built any tool into the Software to measure how you use it, and it sends no crash reports.
3. What we collect, and how it is handled
The rows about licenses, keys, renewal and purchases describe the full release, once Pro is on sale. The current prototype build (Free only) contains no licensing, no revoked-key list, no renewal check and no key storage. Its only network use is the optional update check.
| Situation | What is collected | Purpose | Who handles it |
|---|---|---|---|
| Using the Software | Nothing about your files or your usage. No file contents, no records of what you do, no crash information, no device identifiers are sent to us. Network requests are described in the next rows. | — | — |
| Checking for updates; revoked-key list (Pro) | Free makes no connection unless you turn the update check on or press Check for updates; only then does the Software ask a public server whether a newer version exists. While a valid Pro key is in use, the Software also downloads a small signed list of revoked license keys about once every 7 days. Neither request carries a device ID or anything that identifies you; the only thing sent besides the request itself is the program's name and version (delimixx/<version>) as the User-Agent. The servers may keep ordinary connection records (such as your IP address). | To tell you about a new version, and to switch off revoked license keys (for example after a refund, or a leaked key) | GitHub (update check, downloads); Cloudflare (signed revoked-key list) |
| Subscription key renewal (Pro subscriptions only, when Pro is on sale) | Only after a subscription key's expiry date has passed, and only for 14 days, the app asks the renewal server for a renewed key when it starts and, while it keeps running in the system tray, every 6 hours. It sends the key's identifier (an opaque ID) and nothing else: no device ID, no name, no email address. The server may keep ordinary connection records (such as your IP address). The server checks the payment status with Paddle. Before the expiry date, and for Free and one-time licenses, the app never does this. The automatic check happens only in those 14 days. While the app stays in the system tray, the update check (if you turned it on) is also repeated every 6 hours. If you press Check again on the License page: with a revoked key, the Software downloads the signed revoked-key list again and sends nothing; with a subscription key that is not revoked, it sends the key's identifier to the renewal server, whenever you press it; a one-time key that is not revoked needs no check. While issuing or renewing a key, our server reads your name from Paddle for the moment it takes and does not store it. | To renew a paid subscription key automatically, so you do not have to paste a new key | Renewal server (on Cloudflare); Paddle (payment status) |
| Pro license activation (when Pro is on sale) | Nothing is sent on activation. The license key is verified inside the app with a public key, offline. No device ID is used and nothing is sent. | — | — |
| Buying | Paddle collects your name, email address, billing country, payment details and so on directly, as Merchant of Record. We receive only what we need for the order: your name, email address, country, order number, product, amount and payment status. | To process the purchase, issue the license and give support | Paddle (Merchant of Record); us |
| Sending your license key (when Pro is on sale) | Your email address and the key (the key contains your name or email address, the plan and, for a subscription, an expiry date) | To send or re-send the key. Our server reads your name and email address from Paddle only for the moment it takes to create and send the key, and does not store them. | Resend (email delivery); Cloudflare (our server); us |
| License management records (Pro only; on our licensing server) | The key ID (an opaque ID), Paddle's order and subscription IDs, the plan, the issue and expiry dates, the status (active, revoked, waiting for our check, or ended), the reason and date of a revocation, and a mark that the key email was sent. For each Paddle notification we also keep its ID, kind, time and result (no content). They do not contain your name, your email address or the key itself. | To renew and revoke keys, and to support you | Us; Cloudflare (hosting) |
| Transaction records (kept by us in an encrypted folder on the operator's own computer, not on the licensing server) | Name, email address, country, order number, product, amount and payment status of each purchase, copied from the Paddle records, together with the key ID, plan, expiry date and revocation status of the license. They do not include the license key itself, a postal address or card details. The folder is encrypted, and an encrypted backup copy is kept. | Keeping accounting and tax records, supporting you, meeting legal duties | Us (no outside service holds this record) |
| Contacting us | The content of your email, your email address and any attachments | To reply and to investigate problems | Us (Google Workspace); an AI assistant (Anthropic) that helps sort messages and draft replies |
| Reporting on GitHub | What you post in Issues or Discussions (public) | To handle bugs and requests | GitHub; us |
| Visiting this website | The website is hosted by Cloudflare, which may keep ordinary access records (such as IP address and requested page). We use no analytics tools and set no cookies. The page may store your choice of language (English or Japanese) in your own browser, and does not send it anywhere. You can remove it by clearing this site's data in your browser. | To provide the website | Cloudflare |
4. How we use information
Only for these purposes: providing this website and telling you about new versions; processing purchases and issuing, verifying, renewing and managing licenses; sending and re-sending license keys; answering inquiries and investigating problems; preventing misuse such as leaked or shared keys; and meeting legal duties such as keeping accounting records. We do not use information for advertising and we do not sell it.
4a. Legal bases
If the law of your country asks for a legal basis (for example the GDPR in the EU and UK), we rely on these:
- Performing a contract (or steps before a contract): processing orders, issuing, verifying and renewing licenses, sending license keys, and answering questions about your order.
- Our legitimate interests: providing this website and the update check, answering your messages, keeping the service secure, and preventing leaked or shared license keys. We balance these against your rights, and we collect as little as we can.
- Legal obligation: keeping accounting records. Where the law of your country does not treat a Japanese legal duty as a legal obligation (for example under the GDPR), we keep these records based on our legitimate interest in complying with Japanese law.
- Consent: only where we ask for it, and you can withdraw it at any time. Withdrawing consent does not affect processing that took place before.
Using the Free edition does not require you to give us any personal information. To buy Pro, you need to give Paddle the details it asks for at checkout, such as your email address and payment details; without them, the purchase cannot be completed and no license key can be issued.
5. Who we share information with
| Company | Role |
|---|---|
| Paddle (Paddle.com Market Ltd.; for buyers in the United States, Paddle.com Inc.; in Canada, Paddle.com (Canada) Ltd.) | Merchant of Record: payment, invoicing, tax and refunds, and the payment status used for subscription key renewal. Buyer information is handled under Paddle's privacy notice. |
| Cloudflare, Inc. | Hosting of this website and of the signed list of revoked license keys. The renewal server (for subscription key renewal) also runs here. |
| Resend | Delivery of license-key emails (when Pro is on sale). |
| Google (Google Workspace) | Sending, receiving and storing support email. |
| Anthropic, PBC (AI assistant) | Helps the operator sort support email and draft replies. It sees the support emails you send (your email address, your name if you give it, and the text). It sends nothing: the operator reads and sends every reply. It does not see the transaction records. |
| GitHub, Inc. | Issues and Discussions, the download files, and the update check. |
We do not give personal information to anyone else, except where the law requires it.
6. Transfers across borders
We are in Japan. The companies above are located in the United States, the United Kingdom and other countries, so information may be handled outside Japan, and information from the EU or UK is moved to Japan. Where the law asks for a safeguard, we rely on adequacy decisions (Japan has been recognized as adequate by the EU) or on the standard contractual clauses that each company offers. Each company also applies its own safeguards under its own contracts and policies. Paddle collects your purchase details itself, as an independent controller, and shares with us only what section 3 lists; Paddle's privacy notice explains how it protects that information. For the companies that handle information on our behalf (for example Resend and Cloudflare), we rely on each company's data processing agreement, under which the company handles the information only on our instructions and with security measures. We check at least once a year that Resend and Cloudflare keep to these agreements. On request to privacy@delimixx.com, for each of these two companies we will tell you how the contract is set up, an outline of its measures, how and how often we check, the country concerned, whether that country's law affects the measures, and any problems and what we did about them. The main country concerned is the United States. On request to privacy@delimixx.com, we will provide information about these safeguards without delay.
7. How long we keep it
- License management records (key ID, order IDs, plan, dates, status): until 120 days after the key's expiry date; a one-time (perpetual) license is kept.
- Records of Paddle notifications (ID, kind, time, result): 90 days after receipt; 180 days if processing failed or stopped. A refund that arrived before its purchase is noted for 180 days.
- Transaction records (kept by us in an encrypted folder on the operator's own computer): for the longest period that Japanese tax and bookkeeping rules set for business records, which is 7 years counted from the day after the income-tax filing deadline for the year of the purchase (so up to about 8 years and 3 months after the purchase). The license details stored with them (key ID, plan, expiry date, revocation status) are kept for the same period, because they are needed to answer questions about the purchase and to prove which license a payment relates to. The licensing server keeps its own, smaller records for the shorter periods above.
- Revocation records: when a key is revoked, its identifier (an opaque value that contains no name, email address or reason) is added to the signed revoked-key list that every Pro installation downloads. The identifier of a revoked monthly or yearly key stays in that list until 14 days after the key's expiry date. The identifier of a revoked one-time key stays in the list indefinitely, for as long as the key must stay revoked, because a one-time key has no expiry date. The reason for the revocation is recorded only on the licensing server (see section 3), not in the list. We can match an identifier to you only through the records described above.
- Support email and leaked-key reports: we aim to delete them about one year after the matter is resolved.
- Records kept by Paddle, Cloudflare, GitHub and Resend (for example, server access records): they follow the policies of those companies.
After these periods, information is deleted or anonymized, except the two items marked above as kept for as long as the license or the revocation must remain in force.
8. Security
We take the following measures: (1) we collect only the information needed for the purposes above, and the Software never sends file contents; (2) personal information is handled only by the operator, by software that the operator runs (the licensing server and the operator's own accounting tool), by the service companies in section 5 under their data processing agreements and, for support email, by an AI assistant under the operator's control that helps sort messages and draft replies. The AI assistant can also read, read-only, the key ID, the order number and the subscription ID in the license management records. It sends nothing, cannot change anything and does not see the transaction records that hold your name and email address. Access to the systems that hold personal information is restricted to the operator; (3) the private keys used to sign license keys and revocation lists are kept as encrypted secrets on the licensing server, and only the operator holds an encrypted backup; (4) the website and the Software's connections use encrypted connections (HTTPS), and the transaction records are kept in an encrypted folder; (5) we keep information only for the periods in section 7, and we delete data before disposing of a device; (6) as a rule, the operator reviews the handling of personal information every month, and if a leak or similar incident occurs, we report it and notify the people affected where the law requires it. We will answer questions about these measures on request to privacy@delimixx.com without delay, except for details whose disclosure would weaken security. No transmission or storage on the internet can be completely secure.
9. Your rights
Depending on the law where you live (for example Japan's Act on the Protection of Personal Information, or the GDPR in the EU and UK), you may have these rights over the information we hold about you: access, correction, deletion, restriction of use, objection, receiving a copy in a portable form, and withdrawing consent. (Under Japan's Act on the Protection of Personal Information these are the rights to disclosure, correction, suspension of use or deletion, and suspension of provision to third parties.) You may also lodge a complaint with the data protection authority of your country. Write to privacy@delimixx.com. We will verify who you are and answer within one month, or within the time the law sets. Deletion. Some records cannot be deleted on request: we keep transaction records (name, email address, country, order number, product, amount, payment status, key ID) for the period that Japanese tax and bookkeeping rules set (see section 7), because the longest of those periods applies to our accounting records, and we keep them for that reason only. Where the GDPR applies, we keep them on the basis described in section 4a; you may object, and we will tell you if we think our grounds for keeping them prevail. Everything else that we hold about you can be deleted. If you ask us to delete the record of a license that is still valid, deleting it means the key stops working, so we first ask whether you agree. If you agree, we revoke the key and remove everything that links the licensing server's record to your purchase; that record keeps only the key's identifier, its status and its dates. The key's identifier (an opaque value that does not contain your name or email address) then stays in the signed revoked-key list, for the period stated in section 7, so that the key cannot be used again; we can still match that identifier to you through the transaction record we must keep. Whatever we decide, we will tell you what we did, and why, without undue delay. For information Paddle controls independently, use the request procedures in Paddle's privacy notice.
10. Data kept on your computer
The app stores settings in %USERPROFILE%\.delimixx, the license key in Windows Credential Manager, and backups and sidecar files beside your files. The app does not transmit these local files. The license key also appears in the delivery email. In detail:
- Settings, key bindings and themes.
- Sidecar files (
.cvdeco): column widths, comments and other information kept outside the CSV. - Backups made before saving, and the audit log (if you turn it on).
- The license key (when Pro is on sale), in the Windows Credential Manager. It was also emailed to you. Our license records and transaction records do not contain the key itself.
Uninstalling does not remove the settings in %USERPROFILE%\.delimixx or the license information in the Credential Manager. To remove everything, delete them yourself (see "How do I remove Delimixx completely?" in the FAQ). Removing local data does not remove email copies or information held by purchase and service providers.
11. Children
The Software and this website are not directed at children under 16, and we do not knowingly collect their personal information.
12. Changes to this policy
If we change this policy we will announce it on this page and update the date above. Important changes will be made clearly visible.
13. Contact
This page is the authoritative version. The Japanese page is a translation provided for convenience; if they differ, the English version applies.