Zippy Privacy Policy
Last updated 23 August 2026
The short version
Zippy stores project Backups in the hidden .zippy folder on your computer. Project files, names, paths, Backup notes, archives, reports and file contents are not uploaded to MALER SOFTWARE.
Online services are limited to purchasing, licensing, account/device management, updates, security, minimal installation counts and diagnostics that you deliberately submit.
Who controls your data
The controller is Societatea cu Răspundere Limitată "MALER SOFTWARE", also trading as MALER SOFTWARE S.R.L., Republic of Moldova.
Privacy requests: privacy@zippy.zip. Product and licence support: support@zippy.zip.
Data kept only on your computer
Zippy reads folders you explicitly select and creates each project's history inside that folder. It also stores the Dashboard registry, language, theme, global text/binary rules, protected device identity, signed entitlement and small redacted logs in the app's private Windows data.
The local diagnostic log is limited to app/core and Windows versions, architecture, language, coarse licence state, operation identifiers and stable error codes. It is designed to reject project names, paths, Backup notes, licence keys and file content. A readable diagnostic file leaves your device only if you save and send it.
Online data and why it is used
| Purpose | Data | Reason |
|---|---|---|
| Purchase and entitlement | PayPro order/item/product identifiers, licence status, plan and device limit; a keyed one-way licence-key representation | Provide the purchased licence, prevent duplicate or fraudulent use, and handle refunds or chargebacks |
| Activation and devices | Random device ID, public signing key, device label, platform, app version, activation/last-seen/deactivation times and signed request data | Activate, refresh and deactivate devices under the purchase contract |
| Customer account | Keyed one-way purchase-email representation, masked email, short-lived one-time links, sessions and device-management audit entries | Let the purchaser securely manage licence slots without storing a password |
| Security | Keyed one-way network-address representation, route, time and failure/replay status | Rate limiting, abuse prevention, incident investigation and service integrity |
| Installation counts | Random event and installation identifiers (the latter replaced by a keyed one-way representation), install/uninstall, time, platform, version, OS, architecture and channel | Measure approximate installs and removals without advertising or behavioural tracking |
| Diagnostics you submit | Structured, redacted error and environment fields shown before submission | Investigate a problem you choose to report |
Contract performance is the basis for purchase, licence and requested account services. Service security and minimal product-operation measurement are used for MALER SOFTWARE's legitimate interests. Legal obligations apply where records must be preserved. A diagnostic report is submitted only when you choose to send it.
PayPro Global and Cloudflare
PayPro Global is the merchant of record for Zippy purchases. It handles checkout, payment-card data, tax, receipts and licence-key delivery under its own terms. Zippy does not receive payment-card details. PayPro sends purchase-status events to Zippy's Cloudflare service.
Cloudflare provides the infrastructure used for Zippy's licensing, account, update, email, security, telemetry and optional diagnostic services. Network providers necessarily process connection data to deliver and protect requests. Processing may occur outside your country under the providers' applicable contractual and legal safeguards.
Retention
| Record | Retention rule |
|---|---|
| Project data and Backups | On your computer until you delete them. MALER SOFTWARE does not receive them. |
| Licence, PayPro event and device ledger | For the operating lifetime of the applicable Zippy 2.x licensing service, and longer only where required to honour or enforce a perpetual purchase, resolve a dispute, prevent replay, or meet law. |
| Installation events | 24 months. |
| Security failures | 7 days; expired temporary block records up to 30 days. |
| Account login requests and token attempts | 2 days. One-time links expire after 15 minutes and are removed by the next daily cleanup. |
| Account sessions | Up to 14 days; expired sessions are removed by the next daily cleanup and revoked sessions within 2 days. |
| Licence/account audit entries | 24 months. |
| Submitted diagnostics | 90 days; diagnostic abuse-control requests 2 days. |
| Local or exported diagnostics | Until you remove the app data or delete the file you exported. |
Your choices and rights
Depending on the law that applies to you, you may request access, correction, deletion, restriction, portability, or object to certain processing. You may also complain to the relevant data-protection authority.
Email privacy@zippy.zip from the PayPro purchase address and include the order ID if available. Do not email your licence key or project files. We may ask for additional proof before exposing or changing a licence record. Some minimal records may need to remain to provide a perpetual licence, prevent replay or fraud, preserve legal claims, or meet law; we will explain any such limit.
Children, security and changes
Zippy is a general-purpose productivity tool and is not directed to children. Do not place sensitive information in support messages unless it is necessary and you deliberately choose to provide it.
Zippy uses encryption in transit, secret-keyed identifiers, signed device requests, short-lived account links and access controls. No system can guarantee absolute security.
Material changes will be dated and published at this same URL before they apply.