NESTPLUG Precision Nesting

Privacy Policy

NestPlug Privacy Policy

Version 1.0. Effective: October 1, 2026

This policy explains what personal data NestPlug (“we”, “us”) processes when you buy or use NestPlug, and your rights. We deliberately collect as little as possible.

1. What we collect

  • Account & order data: your email address and order details. Payment is processed by Square; we receive the order confirmation but never your full card number.
  • License data: a cryptographic (SHA-256) hash of your license key (we do not store keys in readable form) plus your plan, status, and issue date.
  • Device identifiers (hashed): at activation, the software computes two one-way hashes (BLAKE2b, salted) of stable device identifiers on your machine and sends only the hashes. The underlying identifiers never leave your device and cannot be reconstructed from the hashes. The second hash is used solely to recognize your device after certain hardware changes so you can move your license without contacting support.
  • Activation metadata: timestamps, platform (macOS/Windows/Linux), app version, and the result of each activation request.
  • Support communications: whatever you choose to send us when you contact support.
  • Feedback submissions: if you use the feature request or bug report form, we store your submission text, your email address (so we can reply), optional app and system versions you provide, and your IP address (used only to limit spam submissions). Submissions are private: never published, never sold, never used for marketing.

We do not collect artwork, file names, usage statistics, or any content from your Adobe Illustrator documents. The software performs no telemetry.

2. Why we process it (legal bases)

  • Performance of contract: issuing your license key and delivering the software you bought.
  • Legitimate interest: enforcing the one-device seat limit, preventing key sharing and piracy, and helping customers move licenses between their own devices. We have balanced this interest against your privacy: identifiers are hashed on your device before transmission, raw values are never transmitted or stored, and hashes are not used for any purpose other than license enforcement.
  • Legal obligation: tax and accounting records for purchases.

3. Who we share it with

Our processors: our hosting provider (licensing server), Square (payments), and our email provider (license delivery and receipts). We never sell personal data and do not share it for advertising.

4. Retention

License and activation records are kept while your license is active and as required by law thereafter (e.g., tax records). Activation audit logs are retained for up to two (2) years. If you request deletion of a license, associated activation records are deleted; we keep only what law requires.

5. Security

License keys are stored only as hashes; the signing key for activation tokens is encrypted at rest and never leaves our server; all communication with the software is over TLS in production. No method of transmission or storage is 100% secure, but the design means a database breach could not mint valid licenses or expose readable keys.

6. Your rights

Depending on where you live (GDPR, UK GDPR, CCPA/CPRA, and similar laws), you may request access to, correction, export, or deletion of your personal data, object to or restrict certain processing, or withdraw consent. To exercise any right, email legal@nestingplugin.com. We respond within 30 days. You may complain to your local data protection authority.

Under CCPA/CPRA: we do not “sell” or “share” personal data as those terms are defined.

7. International transfers

Data is processed at United States (InMotion Hosting). Where transfers require safeguards, we rely on Standard Contractual Clauses with our processors.

8. Children

The Software is not directed at children under 16 and we do not knowingly collect their data.

9. Changes

We will post any policy changes on this page with a new effective date; material changes will also be announced by email to license holders.

10. Contact

Data controller: NestPlug, legal@nestingplugin.com, PO Box 2471, Gilbert, AZ 85297