OmepheusSoftware
LEGAL

Privacy Policy

Last updated: October 8, 2026

1. Who is responsible

The controller of your personal data on this Site is Floria Ovidiu Mircea, an individual in Romania ("Omepheus", "we"). Contact us through the contact form or the support page, or email support@omepheus.com.

2. What we collect and why

  • Account: email address, display name, a hashed password, whether your email is verified, the date you accepted our Terms and when you last signed in. We use it to run your account and keep it secure. Legal basis: contract.
  • Purchases and licenses: the purchase email, order details (items, amounts, currency, taxes, discount used, dates), your license key and its status. Payment itself, including your card or bank details, is handled by Paddle; we never see or store them. We use this to deliver and support your license and to keep accounting records. Legal basis: contract and legal obligation.
  • Community Styles: style files and cover images you upload, their title, description, genre and tags, your display name as author, and the date of your authorship declaration. Published styles and your display name are visible to visitors. Legal basis: contract and legitimate interests (running the community).
  • Messages: what you write when you contact us, and your email, to reply. Legal basis: legitimate interests.
  • Security and technical data: IP address and request data in server logs and for rate limiting (login, registration and downloads), to protect the Site against abuse. Legal basis: legitimate interests.
  • Licensing: when Chordiva validates your license it sends the license key and data about the computer needed to enforce "one computer at a time". Legal basis: contract.

3. Cookies

We use one strictly necessary session cookie to keep you signed in and protect forms. We do not use advertising or analytics cookies. The checkout, provided by Paddle, may set its own cookies; see Paddle's privacy notice.

4. Who receives your data

  • Paddle (Merchant of Record) processes payments, taxes and refunds and acts as an independent controller for that data. See Paddle's privacy policy.
  • Hosting and email providers that run our server and send our messages (such as verification and claim emails), acting for us.

We do not sell your data and do not use it for advertising.

5. How long we keep it

We keep account data while your account exists. If you delete your account, your name and email are removed from your profile; order records keep the purchase email for as long as accounting and tax law requires. Password reset and verification tokens expire quickly and are deleted. Server logs are kept for a limited time.

6. Your rights

Under the GDPR you can ask for access to your data, correction, deletion, restriction, portability and object to some processing. From your account page you can edit your name, download a copy of your data and delete your account. For anything else, contact us. You can also complain to your data protection authority; in Romania this is the ANSPDCP (dataprotection.ro).

7. Transfers and security

Paddle and our providers may process data in other countries, using the safeguards required by law. Passwords are hashed, forms are protected against forgery, uploaded files are stored privately, and we limit access to the data we hold.

8. Changes

If this policy changes materially, we will update the date above and, where required, tell you.