March 7th, 2022 A macOS Monterey 12.3 compatible GPG Suite is now available. Download here!
Please have a look at our troubleshooting guide, should the GPG Mail Upgrader fail to activate GPG Mail.

Privacy Policy

1. General Information

Your privacy is very important to us at GPGTools GmbH (“GPGTools”). We created this Privacy Policy to inform you about how we collect, use and store data personally related to you (“Personal Information”). If you have any questions or concerns, please let us know at privacy@gpgtools.org.

This Privacy Policy covers all apps which are part of GPG Suite as well as the website, and our GPG Mail Support Plan activation web service. Any information, personal or not, we collect serves the purpose of providing and improving our service as well as providing support.

We will only collect, use, and store your Personal Information securely in order to ensure confidentiality. We will not share your Personal Information with other parties without your prior consent, and unless it is necessary to provide our services to you. It may also be necessary to share your Personal Information to comply with the law or protect our rights.

Furthermore, you have the right to be informed, at your request, about Personal Information we have collected from you and stored, as well as its origin, and the purpose of storage. In addition, you have the right to have such Personal Information corrected or deleted; in the latter case, however, we may have to cancel the service, if it is connected with that piece of information.

Notice concerning the party responsible for this website

The party responsible for processing data on this website is:

  • GPGTools GmbH
    Zieglergasse 84/1
    1070 Vienna
    Austria

  • E-Mail: business@gpgtools.org

2. Definitions

Personal Information is data which relate to a specific identifiable person

Non-personal Information is data that does not relate to a specific person. We may combine personal and non-personal information, in which case we will treat this bundle of information as Personal Information for as long as it remains combined.

Service Partners are entities different to GPGTools that provide services to GPGTools that contribute to the functioning and improvement of the all apps which are part of GPG Suite as well as the website, and our GPG Mail Support Plan activation web service.

3. GPGTools Website

1. Traffic Analysis

For traffic analysis we use Matomo, an open source web analytics platform. We collect our website visitors’ nonpersonal information. All data, including the IP address, is anonymized before storing. As we only use this data for statistical analysis and website improvement, we do not combine it with other data or information. This data is deleted after 6 months.

2. Server-Log-Files

As a website provider we have commissioned Uberspace, Kaiserstr. 15, 55116 Mainz, Germany. The provider automatically collects and stores information that your browser automatically transmits in “server log files“. These include but are not limited to:

  • Internet Protocol (IP) addresses
  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Time of the server request

These data will not be combined with data from other sources. The basis for data processing is Art. 6 (1) (f) DSGVO, which allows the processing of data to fulfill a contract or for measures preliminary to a contract.

4. GPG Mail Trial & GPG Mail Support Plan

At the activation of the GPG Mail Support Plan or the start of the 30-day-trial, as a technical requirement to run the GPG Mail Support Plan activation web service, we collect the following non-personal information:

  • Version of GPG Suite
  • Version of GPG Mail
  • macOS Version
  • Anonymized Device ID
  • Activation Code
  • E-Mail Address
  • Device Name

5. GPG Suite Updates

In order to update GPG Suite to the latest version, the GPG Suite Updater app checks if there is a new update available. The following data will be submitted to our update web service:

  • macOS Version
  • GPG Suite version
  • Libmacgpg version
  • Sparkle version
  • Anonymized Device ID (in future versions)

If you opt-in to send us crash logs, the crash log and any additional information you provide, is stored by our Service Partner Microsoft Inc, One Microsoft Way, Redmond, WA 98052-6399, United States. Have a look at Microsoft's privacy policy to learn more: https://privacy.microsoft.com/en-us/PrivacyStatement.

6. GPG Mail Support Plan activation web service

If you purchase a GPG Mail Support Plan via our Merchant of Records Paddle, we store the email address submitted by Paddle to us. We may use it to send you important notifications regarding the web service (e.g. your unique activation code for your support plan) and its use. In addition, we connect your email address with the information we colletected at activation of GPG Mail Support Plan for support purposes. If your email address submitted to us reveals your identity, the information submitted to us becomes personally related you and hence, qualifies as Personal Information. You agree that with activation of GPG Mail Support Plan with the activation web service, we store that email address connected with the information referred to in Section 4 above in our, respectively in our Service Partner’s, systems in order to serve important notifications regarding the Service and its use, and for support purposes.

For the purpose of providing the Service we have commissioned ALL-INKL.COM - Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. The servers, on which we process and store this information, are located within the European Economic Area (EEA).

We generally do not store your Personal Information longer than absolutely necessary to provide the Service to you. At termination of the service agreement between us we will delete any Personal Information we collected from you.

7. Support platform

For the purpose of providing technical support for our website, GPG Suite and our activation web service we collect and store your email address, as well as any additional information that is included in the support requests. As a means to properly deal with incoming support requests, we will use the submitted information (email address) to contact you in order to help you with your request.

As a helpdesk deskprovider we have commissioned ENTP, 917 SW Oak Street, #422, Portland, OR 97205, United States to whom we disclose the information contained in support request including your email address.

Users of GPG Suite submitting support requests consent to the disclosure of their Personal Information contained in such request to this Service Partner.

8. Payment service providers

Payment processing services enable GPGTools to process payments by credit card, bank transfer or other means. To ensure greater security, GPGTools shares only the information necessary to execute the transaction with the financial intermediaries handling the transaction.

Some of these services may also enable the sending of timed messages to the user, such as emails containing invoices or notifications concerning the payment.

Data is transmitted to Paddle based on Art. 6 (1)(a) (Consent) and Art. 6 (1)(b) DSGVO (Processing for contract purposes). You have the option to revoke your consent at any time with future effect. It does not affect the processing of data previously collected.

1. Paddle.com UK (Paddle.com Market Ltd) and Paddle.com Ireland (Paddle Payments Ltd)

Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. Paddle provides all customer service inquiries and handles returns. Paddle is operated by Paddle.com Market Ltd., 15 Bermondsey Square, SE1 3UN London, United Kingdom and Paddle Payments Ltd, Core B, Block 71, The Plaza, Park West, Dublin 12, Ireland.

Further information about handling user data can be found in Paddle's privacy policy at https://paddle.com/privacy.

9. Children

We do not knowingly collect Personal Information from children under the age of 14. In case we learn that we have collected personal information of a child under the age of 14 without parental consent, we will delete that information as quickly as possible.

10. Regulatory Authority

GPGTools is subject to supervision and regulation by the Austrian Data Protection Authority (DPA) Wickenburggasse 8, 1080 Wien, Austria.

11. Policy Changes

We may update this privacy policy from time to time. It is your responsibility to make yourself familiar with the latest version of this policy.

Last updated: November 15th, 2019