EcoStatAI — Privacy Notice
Controller/contact: Dr. Faiz ul Haq · Last revised: 21 October 2026
1. Scope
This notice covers the EcoStatAI website, checkout, download authorization, and licence-validation service when those services are enabled. The actual processing depends on the deployed configuration and the providers used.
2. Data processed
Depending on the workflow, the service may process a name or email address, selected licence category and duration, payment-provider transaction identifiers and status, licence-key hash, activation/expiry timestamps, a pseudonymous installation identifier, and security/rate-limit logs. Do not submit research datasets, passwords, full payment-card numbers, or card security codes to the licensing service.
3. Payments
Payment is processed by the selected third-party payment provider. EcoStatAI should receive transaction status and relevant order metadata, not full card credentials. The provider's own privacy terms also apply.
4. Purposes and legal basis
Data is used to fulfil an order, issue and validate a licence, deliver the installer, prevent duplicate trial abuse and fraudulent transactions, provide support, maintain security, and meet legal obligations. Where applicable law requires consent or another legal basis, processing must be configured accordingly.
5. Service providers and transfers
Cloudflare may host website functions and database/storage services; the payment and email providers may process transaction and delivery information. These providers may process data in locations outside the user's country. Their terms and safeguards apply to their services.
6. Retention and security
Order and licence records should be retained only as long as needed for licence administration, support, dispute handling, fraud prevention, and legal obligations. Security logs should have a defined retention period. Secrets must be stored as encrypted server-side secrets, never in public website files or source-control commits.
7. Cookies and tracking
The site should not add advertising trackers or non-essential analytics without appropriate disclosure and consent where required. Hosting and security providers may generate technical logs.
8. Rights and contact
For access, correction, deletion, or privacy enquiries, contact drhaqfbm@gmail.com. Some transaction or licence records may need to be retained for legal, accounting, security, or contractual reasons.
9. Changes
This notice must be updated if the actual providers, data fields, or processing purposes materially change. Do not publish statements about features or providers that are not actually configured.