Privacy Policy

1. Introduction

This Privacy Policy describes how rqwstr ("we", "us", "our") collects, uses, and protects your personal information when you use our website (rqwstr.com) and software. We are committed to protecting your privacy and complying with applicable data protection laws, including the GDPR.

2. Data We Collect

Account Information

• Email address — required for account creation and communication
• Password — stored as a salted hash, never in plaintext

Payment Information

• Payment processing is handled entirely by Stripe
• We store your Stripe customer ID to link payments to your account
• We do not store credit card numbers, CVVs, or bank details

Usage Data

• License key validation requests (key hash, timestamp)
• Subscription tier and status
• Standard web server logs (IP address, user agent, timestamps)

What We Do NOT Collect

• HTTP requests or responses you send through rqwstr
• Target URLs or domains you test
• Content of your local SQLite databases
• Your rqwstr configuration files

The rqwstr binary operates locally. Your security testing data stays on your machine.

3. How We Use Your Data

• Account management and authentication
• License key generation and validation
• Processing payments via Stripe
• Sending transactional emails (password resets, billing notices)
• Improving the Service

4. Data Sharing

We do not sell, rent, or trade your personal information to third parties. We share data only with:

• Stripe — for payment processing (see Stripe's Privacy Policy)
• Law enforcement — when required by law or to protect our legal rights

5. Data Retention

We retain your account data for as long as your account is active. Upon account deletion:

• Account information is deleted within 30 days
• License keys are revoked immediately
• Payment history is retained as required by tax and accounting regulations
• Server logs are retained for 90 days

6. Your Rights (GDPR)

If you are in the European Economic Area, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict processing
• Data portability — receive your data in a structured format
• Object to processing

To exercise any of these rights, contact us at privacy@rqwstr.com. We will respond within 30 days.

7. Cookies

We use only essential cookies required for authentication and session management. We do not use tracking cookies, analytics cookies, or third-party advertising cookies.

8. Security

We protect your data with:

• HTTPS encryption for all communications
• Salted password hashing
• Ed25519 digital signatures for license keys
• No storage of sensitive payment data (delegated to Stripe)

9. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email. Continued use of the Service constitutes acceptance of the updated policy.

10. Contact

For privacy-related inquiries: privacy@rqwstr.com