Privacy Policy

Last updated: March 2026

Aequo Labs builds self-hosted software. Our whole philosophy is that your data belongs on your infrastructure, not ours. This privacy policy explains what we collect through this storefront — which is as little as we can get away with.

What We Collect

Account Information

When you create an account on this storefront:

  • Email address — Required. This is how we deliver license keys and communicate about your purchases.
  • Name — Optional. Used in correspondence if provided.
  • Password — Stored as a salted, hashed value. We cannot read your password.

Purchase Information

  • Order history — What you bought, when, and which license keys were issued.
  • License activation records — Machine identifiers used for per-machine activation. These are one-way hashes — we can verify a machine but can't identify your hardware from the hash.
  • Software version information — Collected during update checks so we can tell you if a newer version is available.

Email Campaign Tracking

When we send marketing or campaign emails, those emails may contain a tracking pixel — a small invisible image that tells us whether the email was opened. We use this to measure campaign engagement (open rates). We do not use it to track behavior on our website or build behavioral profiles.

If you do not want email open tracking, use the unsubscribe link in any campaign email. Transactional emails (license keys, purchase confirmations, account notices) do not contain tracking pixels.

What We Do NOT Collect

  • Payment card details — Stripe handles all payment processing. Card numbers, CVVs, and billing details never touch our servers.
  • Website analytics or tracking cookies — No Google Analytics, no Facebook pixels, no tracking cookies.
  • Your customer data — If you use our self-hosted products (Indie Legs, Indie Arms), we have zero access to the data on your servers. Your customers, your licenses, your database — all yours.

How We Use Your Information

  • Deliver what you bought — Process purchases, generate license keys, send confirmation emails.
  • Keep you updated — Notify you about important changes to your licenses or products you've purchased.
  • Provide support — Respond when you contact us with questions or issues.
  • Prevent abuse — Detect fraudulent purchases or license key sharing.

That's the complete list. We don't do behavioral profiling, ad targeting, or data brokering.

Who We Share Your Information With

We don't sell your data. Period.

We share information only with:

  • Stripe — Payment processing. They have their own privacy policy.
  • Email delivery service — To send purchase confirmations and license keys. We use transactional email only — no marketing lists.
  • Law enforcement — Only when legally required, and only the minimum information necessary.

Cookies

We use exactly one cookie:

  • Session cookie (indie_arms_session) — Keeps you logged in. Expires when you close your browser or after a reasonable inactivity period.

No tracking cookies. No analytics cookies. No third-party cookies.

Your Rights

You can:

  • View your data — Your account page shows your information, order history, and licenses.
  • Export your data — Contact us at support@aequo-labs.com to request a copy of your account data.
  • Update your information — Edit your account details at any time.
  • Delete your account — Contact us at support@aequo-labs.com to request permanent removal of your account and associated data.
  • Manage consent — Contact us at support@aequo-labs.com to adjust your communication preferences.

If you're in the EU, you have additional rights under GDPR including the right to data portability, the right to restrict processing, and the right to object to processing. Contact us to exercise these rights.

Data Retention

  • Account data — Kept until you delete your account.
  • Order history — Retained while your account exists. We need this to verify your licenses are valid.
  • Session tokens — Expired tokens are automatically cleaned up.
  • Support correspondence — Retained for reference unless you request deletion.

When you delete your account, your personal data is removed. We may retain anonymized, aggregated data (like "X licenses were sold this month") that cannot be traced back to you.

Data Security

These measures apply to the storefront — the account, order, and license-issuance data that Aequo Labs hosts. For software you install on your own infrastructure (Indie Legs, Indie Arms, etc.), server security, backups, and maintenance are your responsibility per Terms §5.

For the storefront:

  • All connections use HTTPS encryption.
  • Passwords are hashed with bcrypt.
  • License keys use cryptographic signing.
  • We keep our dependencies updated and our servers patched.
  • Payment card data is handled entirely by Stripe and never stored on our servers (see §8 of the Terms of Service).

We take security seriously. If you discover a vulnerability, please report it to support@aequo-labs.com.

Children's Privacy

Our products are developer tools. We don't knowingly collect information from children under 16. If you believe a child has created an account, contact us and we'll remove it.

Changes to This Policy

When we update this policy, we'll change the "last updated" date. For material changes, we'll email you. We won't retroactively weaken your privacy protections without your consent.

Contact

Privacy questions or data requests:

Back