Privacy policy

Last updated: 8 September 2026

This Privacy Policy explains how KeyScript, a sole proprietorship (eenmanszaak) registered with the Dutch Chamber of Commerce (KvK) under number 96003413, VAT number NL005189581B23, registered address Groenoord 3, 2401 AA Alphen aan den Rijn, the Netherlands, collects and uses personal data in connection with:

1. the Table Branding Manager desktop application (the "Software");
2. the keyscript.nl website; and
3. the purchase process for a Software license.

KeyScript is the data controller for the purposes of the General Data Protection Regulation (GDPR). If you have questions about this policy or how your data is handled, contact us at privacy@keyscript.nl.

1. Summary

The Software itself is a local desktop application: it reads and writes Office template/document files on your own computer and does not transmit their contents anywhere. Beyond license activation and verification including the renewal link (Section 3.2) and the lightweight update/announcement checks (Section 3.3), the Software sends no personal data anywhere. The policy also covers the website and purchase process, which do involve personal data today.

2. Scope

This policy applies to anyone who downloads, purchases, or uses the Software, or who visits keyscript.nl. It does not apply to third-party sites linked from keyscript.nl, or to services operated by our processors (Paddle, Keygen, Plausible, Google, Formspree, see Section 5) under their own privacy policies.

3. What We Collect, and Why

3.1 Using the Software

The Software runs entirely on your own device. It reads and writes the Office files you open, and writes diagnostic log files (containing technical information such as timestamps, the operation being performed, and, in the event of a crash, an exception stack trace) to a folder on your own computer (%localappdata%\KeyScript\TableBrandingManager\Logs). None of this ever leaves your computer automatically: there is no telemetry, no analytics, and no automatic crash-reporting channel. If you contact support and choose to share a log file with us, that is a voluntary disclosure covered by Section 3.4.

3.2 License Activation and Verification

The Software contacts Keygen (Keygen.sh), our license management provider, to activate and verify your license. This happens when you activate a license key (via Manage License…), and automatically at startup, to re-validate whichever license was last activated on your machine. This involves:

• your license key;
• a machine identifier (derived from your Windows installation, to enforce the device/user terms of your license under the EULA);
• the date and time of activation and subsequent verification check-ins;
• for the Import-only edition, a "heartbeat" ping sent as part of each successful check described above, confirming the machine is still in active use, so that a machine no longer in use can be automatically released, freeing its seat for reuse elsewhere within your organization;
• your IP address, incidentally, as part of any network request.

Why we process this: to enforce the license terms you agreed to, to provide evidence of use in the event of a refund or chargeback dispute (see the EULA's refund policy), and to allow us to deactivate a license when a refund is issued. Legal basis: performance of the license agreement (GDPR Art. 6(1)(b)) and our legitimate interest in preventing licensing fraud (GDPR Art. 6(1)(f)).

An offline grace period of 7 days allows continued use without connectivity, based on the result of the last successful online check.

If your license's updates & support period has lapsed, the Software's in-app banner may offer a "Renew" action. Clicking it sends your license key to a small backend service we operate (hosted on Microsoft Azure), which uses it to look up your license and request a pre-filled Paddle checkout link for that license only, then discards the key. If this request fails for any reason (e.g. you're offline, or the license predates this feature), the button falls back to a generic link to our website instead, with no error shown to you either way.

3.3 Update Checks and In-App Announcements

The Software checks for available updates automatically once per session (and on demand, via "Check for Updates…"), and separately checks for occasional in-app product announcements. Both work the same way, deliberately without ever sending an account or license identifier:

• Update checks: the Software fetches a small, publicly-readable file listing the current version number and download link. This request carries no identifier beyond your IP address, incidentally, as part of any network request. The comparison against your installed version happens entirely on your own device. If a newer version is available, the Full edition is offered a direct download link; the Import-only edition is instead told to contact its organization's IT administrator, who manages deployment centrally. Whether your license is still within its updates & support period, and therefore actually entitled to that update, is determined separately via the routine license check described in Section 3.2; it is never part of this update check itself.
• In-app announcements: the Software separately fetches a small, publicly-readable file listing occasional product announcements (e.g. a new feature, or a related KeyScript tool). Like the update check, this request carries no identifier beyond your IP address. Which announcements you've already seen is tracked only locally, on your own device.

3.4 Support Requests

If you email support@keyscript.nl, we process the information you provide (your name, email address, message content, and any attachments such as log files or sample documents you choose to share) solely to respond to your request. Legal basis: legitimate interest in providing customer support (GDPR Art. 6(1)(f)), or performance of the license agreement where the request relates to your purchase.

3.5 Purchases

Purchases of the Software are processed entirely by Paddle.com Market Ltd (or its applicable regional affiliate), acting as Merchant of Record. Paddle collects your name, email address, billing address, and payment details directly, under Paddle's own privacy policy. KeyScript receives from Paddle the minimum information needed to issue and administer your license: your name, email address, order reference, and purchase/refund status. We do not receive or store your payment card details.

3.6 The keyscript.nl Website

keyscript.nl is a static website and does not use cookies. We use:

• Plausible Analytics, a cookie-free, privacy-focused analytics service that reports aggregated visitor statistics (e.g. page views, referrers, country-level location derived from IP address) without storing IP addresses or using any persistent identifier that could re-identify an individual visitor across sessions.
• Google Search Console, used by us to understand how the site performs in Google Search results (e.g. search queries and click-through rates); it does not track individual visitors to our site.

Because neither service uses cookies or other tracking technology requiring consent under the Dutch Telecommunicatiewet/ePrivacy rules, no cookie consent banner is currently used on the website.

The contact form on the website is processed by Formspree, a form-handling service that forwards your submission (name, email address, chosen subject, and message text) directly to our email address. Formspree does not retain submissions longer than necessary to deliver them. Legal basis: legitimate interest in being able to handle contact requests (GDPR Art. 6(1)(f)).

3.7 Marketing Communications and Update-Availability Notices [consent captured at purchase; not yet acted on]

Our checkout, provided by Paddle, offers only a small, fixed set of checkboxes that Paddle itself defines (e.g. saving a payment method, marketing consent, applying checkout discounts); merchants cannot add their own custom consent questions to it. As a result, the only consent we can capture about receiving information from KeyScript at the point of purchase is Paddle's own general "marketing consent" checkbox; there is no way to ask a separate, purpose-specific question there. If you tick it, Paddle shares that consent status with us. Should we make use of it, the same consent would cover both occasional general product news and, for the Import-only edition, notifying your organization's designated administrator or IT contact about available software updates (see the EULA's Updates section), not individual end users.

As of the date of this policy, we have not yet built anything that acts on this consent: no marketing emails or update-availability notices are currently sent to anyone. This section is included so the policy stays accurate once that changes. When it does, we will process the name and email address of the consenting contact solely for the purpose(s) described above. Legal basis: consent (GDPR Art. 6(1)(a)). You can withdraw this consent at any time by contacting privacy@keyscript.nl.

4. Data We Do Not Collect

We do not collect the contents of the documents, templates, or table styles you create or edit with the Software. We do not use any third-party advertising trackers. We do not sell personal data.

5. Who We Share Data With (Processors)

Party	Purpose	Data involved
Paddle.com Market Ltd	Payment processing, Merchant of Record	Name, email, billing address, payment details, order/refund status
Keygen (Keygen.sh)	License activation/verification	License key, machine identifier, activation/check-in timestamps, IP address
Microsoft Azure (our own backend)	Hosting for the renewal-checkout-link service described in Section 3.2, and for purchase fulfillment	License key, order/license identifiers, in transit only
Plausible Analytics	Website traffic statistics	Aggregated, non-identifying visit data
Google (Search Console)	Search performance monitoring	Aggregated search query/click data for the site, not individual visitor data
Formspree	Processing contact form submissions	Name, email address, chosen subject, message text

We require our processors to handle personal data only on our instructions and in accordance with applicable data protection law.

6. International Data Transfers

Paddle, Plausible, Keygen, and Formspree may process data outside the European Economic Area. Keygen and Formspree are US-based providers. Our own backend infrastructure (Microsoft Azure, Section 3.2) may also process data outside the EEA depending on the hosting region in use.

7. Retention

• License and purchase-related data: retained for as long as your license is active, and thereafter for as long as required to comply with our tax and accounting obligations (in the Netherlands, generally 7 years).
• Support correspondence: retained for 2 years after the request is resolved, in line with the storage limitation principle (GDPR Art. 5(1)(e)), no longer than necessary for the purpose it was collected for.
• Local diagnostic logs on your own device: the 30 most recent daily archives are kept automatically by the Software's own logging mechanism; older archives are removed as part of this same process. This clean-up only happens while the Software is running and actively logging; if the Software is used infrequently, old log files may persist on your device for longer than 30 calendar days.

8. Your Rights

Under the GDPR, you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate data;
• request erasure of your data, where applicable;
• restrict or object to certain processing;
• request a portable copy of your data;
• lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

To exercise any of these rights, contact privacy@keyscript.nl.

9. Security

We take reasonable technical and organizational measures to protect personal data we process against unauthorized access, loss, or misuse. No system is completely secure, and we cannot guarantee absolute security.

10. Children

The Software and keyscript.nl are intended for business and professional use and are not directed at children. We do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be announced via the Software or the website, and the "Last updated" date above will be revised accordingly.

12. Contact

• KeyScript, Groenoord 3, 2401 AA Alphen aan den Rijn, The Netherlands
• KvK: 96003413
• VAT: NL005189581B23
• Privacy inquiries: privacy@keyscript.nl
• General support: support@keyscript.nl

Also see the End User License Agreement (opens in a new tab) and the Refund Policy (opens in a new tab) for Table Branding Manager, published on officebrandsuite.com.