Privacy Policy

1. Scope and Controller

1.1 This Privacy Policy (the “Policy”) describes how IsonQ LLC, a Colorado limited liability company having its principal place of business in Lakewood, Colorado (“ISONQ”), collects, uses, discloses, and retains personal information in connection with the ISONQ software (the “Software”) and the website located at isonq.com and its subdomains (the “Site”).

1.2 For the purposes of the General Data Protection Regulation (EU) 2016/679 and the UK GDPR, ISONQ is the controller in respect of the personal information described in this Policy. For the purposes of the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”), ISONQ is a business.

1.3 This Policy does not apply to any third-party website or service to which the Site may link. ISONQ does not control and is not responsible for the privacy practices of such third parties.

2. Definitions

2.1 “Personal Information” means information that identifies, relates to, or could reasonably be linked with an identified or identifiable natural person.

2.2 “Customer Data” means the engineering drawings, files, inspection records, customer information, and other content that a user processes, generates, or stores by means of the Software.

2.3 “Processing” has the meaning given to it in the General Data Protection Regulation.

3. Information Not Collected by the Software

3.1 The Software executes on the user's equipment. ISONQ does not operate any service that receives, processes, analyses, or stores Customer Data. No code path in the Software transmits Customer Data.

3.2 Without limitation, the following are never transmitted by the Software:

• engineering drawings, PDF documents, STEP files, and other CAD data;
• dimensions, measurements, inspection results, and file contents;
• filenames, part numbers, customer records, quotations, jobs, and shop records;
• email addresses, hostnames, and usernames.

3.3 The Software transmits no telemetry and no usage analytics, sends no User-Agent header, and sets or transmits no cookies. ISONQ has no mechanism by which it may access a user's equipment or Customer Data remotely.

3.4 This architecture is adopted deliberately. Users of the Software routinely handle confidential customer information, proprietary designs, and in certain cases technical data subject to export control, including under the International Traffic in Arms Regulations.

4. Information Transmitted by the Software

4.1 Hosts contacted. The Software contacts exactly two hosts: isonq.com and api.keygen.sh. It contacts no other host.

4.2 Data transmitted. Across all requests, the Software transmits only the following: the licence key, where the user has entered one; an opaque machine hardware fingerprint; and the installed version number. Nothing else is transmitted.

4.3 The machine fingerprint. The fingerprint is derived from the user's hardware and identifies that machine, since it is the means by which a licence is node-locked to it. It is opaque and does not reverse to any personal information: it discloses no name, no email address, no hostname, no username, and no file or Customer Data.

4.4 Request types. Six request types exist:

• licence key validation, where the user submits a key;
• machine registration;
• trial activation;
• trial re-validation;
• update check, on user click;
• update download, on user click.

4.5 Licence synchronisation. The Software performs a licence synchronisation automatically at application startup, on every launch, on trial and paid installations alike. It transmits the machine fingerprint only. It is not triggered by user action and does not require user interaction to occur.

4.6 Updates. The update check and the update download occur only when the user clicks to initiate them. The download retrieves an installer from a URL supplied by the isonq.com server response.

4.7 Operation without a network connection. A machine that has never contacted the server runs its full 90-operation-day trial with no network activity whatsoever. A machine that has contacted the server at least once must re-validate within twenty-one (21) days; if it cannot reach the server within that period, the Software ceases to operate until server contact is restored. A paid perpetual licence operates without a network connection indefinitely.

4.8 Network ledger. Every network attempt made by the Software is written to an append-only, hash-chained log at %PROGRAMDATA%\ISONQ\net_ledger.jsonl on the user's own machine. The user may inspect this log at any time. The uninstaller displays the log and leaves it in place.

4.9 Licence storage. Licence files are stored on the user's equipment encrypted using AES-256-GCM with a key derived from the machine's hardware identity. A licence file copied to different hardware does not decrypt.

5. Information Collected Through the Site

5.1 General. The Site does not employ analytics software. ISONQ does not construct profiles of visitors, does not conduct remarketing or retargeting, and does not sell or share Personal Information for cross-context behavioural advertising.

5.2 Contact form. Where a visitor submits the contact form, the fields completed (name, company, email address, telephone number, request-for-quotation volume, operating environment, and message) are transmitted over an encrypted connection to a server operated by ISONQ and forwarded to sales@isonq.com. Submissions are not routed through any third-party form service.

5.3 Requests for access. A request for access to the Software is submitted through the contact form. Submission constitutes acceptance of this Policy and of the ISONQ Terms of Service in their entirety. The information submitted is processed in order to assess the request, to correspond with the requester, and, where a request is granted, to issue installation media and administer the resulting licence.

5.4 Advertising conversion measurement. ISONQ advertises the Software and, in order to measure the effectiveness of that expenditure, the Site loads the Google Ads conversion tag. The tag sets a cookie in the visitor's browser and reports to Google LLC whether a visit originated from an ISONQ advertisement and whether that visit resulted in a download or an enquiry. ISONQ uses this information solely in aggregate, for the purpose of evaluating advertising expenditure. ISONQ does not use it to identify individual visitors, to track visitors across other websites, or to serve subsequent advertising. Google LLC receives this information as an independent controller and processes it in accordance with its own privacy policy, over which ISONQ exercises no control. A visitor may opt out of Google advertising cookies at adssettings.google.com, and browser configuration or content-blocking software will likewise prevent the tag from loading. The Software does not load this tag.

5.5 Web fonts. Pages on the Site load typefaces from Google Fonts. When a browser requests those files, Google LLC receives the requesting IP address as an incident of serving the request. ISONQ does not receive that information.

5.6 Server logs. The hosting and content-delivery infrastructure serving the Site maintains standard access logs, which may include IP address, user agent, and requested resource, for the purposes of security, abuse prevention, and service operation.

6. Purposes of Processing

6.1 ISONQ processes Personal Information received through the contact form or by correspondence in order to:

• respond to the enquiry submitted;
• provide the product, deployment, or support information requested;
• administer licences and provide technical support; and
• evaluate feedback, defect reports, and feature requests for the purposes of product development.

6.2 ISONQ does not add correspondents to marketing distribution lists and does not send unsolicited promotional communications.

6.3 The ownership and permitted use of feedback and suggestions is governed by Section 9 of the Terms of Service.

7. Legal Bases for Processing

7.1 Where the General Data Protection Regulation or the UK GDPR applies, ISONQ relies upon the following legal bases:

• Performance of a contract (Article 6(1)(b)) — in respect of licence administration, technical support, and the supply of the Software;
• Legitimate interests (Article 6(1)(f)) — in respect of responding to enquiries, maintaining the security of the Site, and improving the Software, where those interests are not overridden by the rights and freedoms of the data subject;
• Consent (Article 6(1)(a)) — in respect of the advertising conversion cookie described in Section 5.4, where consent is required by applicable law; and
• Compliance with a legal obligation (Article 6(1)(c)) — where processing is necessary to meet a statutory or regulatory requirement.

8. Disclosure of Personal Information

8.1 ISONQ does not sell Personal Information and has not sold or shared Personal Information within the preceding twelve months, as those terms are defined under the CCPA.

8.2 ISONQ discloses Personal Information only to the following categories of recipient:

• service providers that host electronic mail, website infrastructure, and the contact-form endpoint, each of which is bound by contract to process such information solely on ISONQ's instructions;
• Google LLC, in respect of the advertising conversion measurement described in Section 5.4;
• professional advisers, where necessary for the establishment, exercise, or defence of legal claims; and
• a competent authority, where disclosure is required by law, court order, or lawful process.

8.3 In the event of a merger, acquisition, or sale of substantially all of the assets of ISONQ, Personal Information may be transferred to the acquiring entity, subject to the continued application of this Policy.

9. Retention

9.1 Correspondence is retained for so long as it remains relevant to the business relationship and thereafter for such period as is necessary to comply with legal, accounting, or reporting obligations, following which it is deleted in accordance with ISONQ's data retention practices.

9.2 Server logs are retained for the period determined by the relevant infrastructure provider for security and operational purposes.

10. Security

10.1 ISONQ maintains administrative, technical, and organisational measures appropriate to the nature of the Personal Information it holds, including encryption of correspondence in transit and at rest and restriction of access to authorised personnel.

10.2 No method of transmission or storage is entirely secure, and ISONQ cannot guarantee the absolute security of information transmitted to it.

11. International Transfers

11.1 ISONQ is established in the United States and processes Personal Information there. Where Personal Information is transferred from the European Economic Area, the United Kingdom, or Switzerland, such transfer is made on the basis of the Standard Contractual Clauses approved by the European Commission or such other transfer mechanism as is recognised under applicable law.

12. Rights of Data Subjects and Consumers

12.1 Subject to applicable law, an individual has the right to request access to the Personal Information ISONQ holds concerning them, to request its correction or deletion, to object to or request restriction of its processing, to request its portability, and to withdraw consent where processing is founded upon consent.

12.2 Residents of California have, in addition, the right to know the categories and specific pieces of Personal Information collected, the right to delete, the right to correct, the right to opt out of sale or sharing, and the right not to be subject to discrimination for exercising any such right. As stated in Section 8.1, ISONQ does not sell or share Personal Information.

12.3 Requests may be submitted to support@isonq.com. ISONQ will respond within the period prescribed by applicable law and may request information reasonably necessary to verify the identity of the requester. An authorised agent may submit a request on an individual's behalf upon provision of evidence of authority.

12.4 A data subject in the European Economic Area or the United Kingdom has the right to lodge a complaint with their national supervisory authority. ISONQ requests the opportunity to address the matter directly in the first instance.

13. Children

13.1 The Software and the Site are directed to business users. ISONQ does not knowingly collect Personal Information from any individual under eighteen (18) years of age. Where ISONQ becomes aware that it has done so, it will delete that information.

14. Amendments

14.1 ISONQ may amend this Policy from time to time. The effective date at the head of this page reflects the current version. Material amendments shall be notified by revision of that date and, where practicable, by written notice.

15. Contact

Enquiries, requests, and complaints concerning this Policy may be directed as follows:

• support@isonq.com
• IsonQ LLC, Lakewood, Colorado, United States of America