Privacy Notice
Content
- Who we are
- Categories of users
- Sources of personal data
- Legal bases for processing
- Customers’ data
- Chat Requesters’ data
- Data received from third parties
- Sharing of personal data
- Security measures
- Cookies
- Your data protection rights
- United States residents
- California “Do Not Sell” notice
- Do-Not-Track signals
- EEA and UK residents
- International data transfers
- Updates to this Notice
Paranoid Software LTD (“Company”, “we”, “us”, or “our”) is committed to safeguarding personal data and maintaining appropriate privacy standards. This Privacy Notice (“Notice”) explains how personal data is handled when you use our website (“Website”) and desktop application (“App”). This Notice is intended to clarify what personal data we collect, how and why we process it, and what rights you have in relation to such processing.
Who we are
We are an independent team focused on developing technology solutions. For the purposes of applicable data protection legislation, we act as the controller of personal data processed through the Website and the App, meaning we determine the purposes and means of such processing.
Legal name:Paranoid Software LTD
Registered address:36-38 Cornhill, London, England, United Kingdom
Contact details:help@noid.net — general inquiries
privacy@noid.net — privacy-related inquiries
Categories of users
When you access or interact with the Website or App, you become a user (“User”).
Depending on your interaction with our services, you may fall into one or more of the following categories:
Customer — a User who purchases a license or subscription and uses the App.
Chat Requester — a User who contacts us via in-App chat support.
Sources of personal data
We obtain personal data directly from you when you use the Website or App and interact with available features. In certain cases, and depending on your settings or enabled functionalities, we may also receive limited data from third parties.
Legal bases for processing
We process personal data on the following legal grounds:
- Performance of a contract — where processing is necessary to negotiate, conclude, or perform a contract with you (including the End User License Agreement).
- Legitimate interests — where processing is necessary for service improvement and development, provided your rights and expectations are respected.
- Legal obligation — where processing is required to comply with applicable laws or binding requests from competent authorities.
- Consent — where you have provided consent for specific processing activities.
Customers’ data
When you install or use the App, certain technical information may be collected automatically. Most of this data is anonymous. In limited cases, technical identifiers (such as IP address or device ID) may be processed; however, we do not monitor or profile login activity by IP address.
Important: although the App may generate technical data, we generally do not access such data where it remains stored locally on your device.
Data processed
- Email — used to create and maintain your account (legal basis: performance of a contract)
- Payment information (unique payment ID) — used to verify an active license or subscription (legal basis: performance of a contract)
Retention periodCustomer data is retained for 180 days after subscription expiration or until account deletion, whichever occurs first.
Chat Requesters’ data
When you contact support through the App, we process the following:
- Messages
- Audio messages
- Attached files
Purpose: providing customer support
Legal basis: performance of a contract
Retention period: 30 days from the last communication.
Data received from third parties
We may receive limited personal data from external providers. The scope and legal basis of such processing are governed by the respective third party’s privacy documentation.
Example
- Payment ID and confirmation status — provided by NOWPayments Ltd (see their Privacy Policy).
Security measures
We implement risk-appropriate technical and organizational safeguards, including:
Organizational controls
- Personnel training
- Internal policies and procedures
- Confidentiality agreements
- IT and security governance
Physical safeguards
- Video surveillance
- Alarm systems
- Restricted premises access
- 24/7 security where applicable
Technical protections
- Two-factor authentication
- Data backups
- Pseudonymization
- Encryption
- Automated deletion mechanisms
- End-to-end encryption where applicable
Your data protection rights
Depending on your jurisdiction, you may exercise certain rights regarding your personal data by contacting us.
Identity verification may be required before fulfilling certain requests.
United States residents
Available rights vary by state and may include:
- right of access
- right to correction
- right to deletion
- right to data portability
- right to opt out of sale
- right to opt out of targeted advertising or profiling
- rights related to sensitive data
- rights concerning automated decision-making
- private right of action (California)
We generally respond within 30–60 days, depending on applicable law. Complaints may be submitted to the Federal Trade Commission where appropriate.
California “Do Not Sell” notice
We do not sell personal information and do not use personal data as a commercial resale asset. Nevertheless, California residents may submit opt-out requests for any potential future sale.
Do-Not-Track signals
Our services currently do not respond to browser-based Do-Not-Track signals. This may change as technical capabilities evolve.
EEA and UK residents
If you are located in the European Economic Area or the United Kingdom, you may have the following rights:
- access
- rectification
- erasure
- restriction of processing
- data portability
- objection to processing
- withdrawal of consent
- right to lodge a complaint with a supervisory authority
Requests are typically handled within one month.
UK residents may contact the Information Commissioner’s Office (ICO) if concerns remain unresolved.
International data transfers
Where personal data is transferred outside the United Kingdom, we ensure appropriate safeguards in accordance with the UK GDPR.
Transfer mechanisms may include:
- UK adequacy regulations
- participation in the Data Privacy Framework (where applicable)
- International Data Transfer Agreements (IDTAs)
- UK Addendum to EU Standard Contractual Clauses
Updates to this Notice
This Privacy Notice is prepared in accordance with the Data Protection Act 2018, the General Data Protection Regulation, and other applicable privacy laws.
We may update this Notice periodically to reflect legal or operational changes. Updated versions will be published on the Website and App. Where required, we will provide prominent notice and request consent for material changes.