Legal
Privacy Policy
How DaVinci Ghost collects, uses, shares and protects your personal data when you visit this website, create an account, pay or use the software.
1.Who we are
DaVinci Ghost is a brand operated by TechLT (techlt.net), the data controller for the personal data described in this policy. Contact for any privacy question or request: [email protected]. We process personal data in accordance with the privacy laws that apply to you, including the CCPA/CPRA for California residents and equivalent laws elsewhere.
2.Data we collect
- Account and billing details that you give us at checkout or on your account page: first and last name, e-mail address, WhatsApp number, country, and optionally company / workshop name and VAT or registration number.
- Payment data: the payment is processed by Stripe. We receive the transaction identifiers, the amount, the date, the payment status and the last four digits and brand of the card. We never receive or store your full card number.
- Technical and security data: IP address, browser and operating system, the Reg ID (hardware identifier) of the PC bound to your license, and the login, activation and license-check logs of the app. This data is used to verify the license and to prevent fraud and abuse.
- Usage data of the software: for every file processed, the date and time, the file name, the ECU identified, whether the file was tunable and whether a token was charged.
- ECU files you upload: the file is sent to our analysis engine only when you open it in the app, and it is processed only to identify the ECU and apply the solutions you select (see section 6).
- Support correspondence: e-mails and WhatsApp messages you exchange with support, including their attachments.
3.How we use it
- To create and manage your account, deliver the software, verify the license on the bound PC, count daily tokens and provide support.
- To process payments, issue invoices, send purchase confirmations and renewal reminders, and manage subscriptions through Stripe.
- To prevent and investigate fraud, account sharing, multiple test-pass purchases, abuse of support and chargebacks, and to build the evidence file submitted in payment disputes.
- To keep the service secure, diagnose problems and improve the analysis engine (for example when a file was not tunable).
- To send you service messages about your account, your license and important changes. We do not send marketing newsletters without your consent.
4.Legal bases
- Performance of the contract: account, delivery of the software, license verification, tokens, support, payments and renewals.
- Legal obligation: accounting and tax records, invoices, responding to lawful requests.
- Legitimate interest: security, fraud and abuse prevention, license enforcement (one account = one PC), defence of legal claims including chargeback disputes, and improvement of the service.
- Consent (Art. 6(1)(a)): any optional communication or feature that we explicitly ask you to opt in to. You can withdraw consent at any time.
5.Sharing
- Stripe (payment processing, invoices, billing portal, fraud prevention): receives your name, e-mail, country, the amount and the card data you type on Stripe's own pages.
- Cloudflare (network security, DDoS protection and content delivery for this website and our API): processes IP addresses and request metadata.
- E-mail provider used to send purchase confirmations, renewal reminders and support replies: receives your e-mail address and the content of those messages.
- Legal claims: in a chargeback or dispute we submit to the bank, the card network and Stripe the evidence described in the Refund & ECU Policy (IP, timestamps, policy acceptance, activation, Reg ID, usage logs). We may also disclose data to authorities when required by law or to defend our rights.
- Where data is processed: our servers and providers (Stripe, Cloudflare, the e-mail provider) process data in the United States and in Europe, under contracts that require them to protect it.
- We do not sell personal data and we do not share it with advertisers.
6.Customer-uploaded content
- ECU files you open in the app may contain vehicle identifiers such as a VIN. You are the data controller of any personal data contained in the files you upload, and you are responsible for having the right to process them (for example on behalf of your customer).
- We act as processor for those files: they are processed only to identify the ECU and apply the solutions you select, the result is returned to your PC, and the files are not used for any other purpose or shared with third parties.
- Files may be kept for a limited time for support and diagnosis (for example to investigate a file that was not tunable) and are then deleted.
7.Retention
- Account, license and usage logs: for as long as your account exists and, after closure, for the time needed to defend legal claims (in particular the chargeback window of the card networks, typically up to 18 months after the last payment).
- Invoices, payment records and policy acceptances: for the period required by accounting and tax law (generally 5 to 10 years).
- Uploaded ECU files: a limited time for support and diagnosis, then deleted.
- Support correspondence: up to 3 years after the last exchange.
- Fraud and chargeback records (including the bound Reg ID of a suspended account) may be kept longer, to the extent necessary to prevent repeat abuse.
8.Security
- All traffic between your browser or the app and our servers is encrypted with TLS. Passwords are stored hashed, never in clear text.
- Card payments are handled entirely by Stripe, a PCI-DSS Level 1 certified provider. Card numbers never touch our servers.
- Access to personal data is limited to the people who need it to operate the service and support you.
9.Your rights
Under the privacy laws that apply to you (for example the CCPA/CPRA in California) you have the right to know what data we hold about you, to access it, to have it corrected or deleted, to a copy of it, to object to or restrict certain processing, and to withdraw consent; we never sell personal data, so there is nothing to opt out of. You can update your billing details and password on your account page. For anything else, write to [email protected] from the e-mail of your account; we answer within one month. Erasure cannot remove data that we must keep for legal, accounting or fraud-defence reasons. You also have the right to lodge a complaint with your national data protection authority.
10.Cookies
- This website uses only essential storage: the session token that keeps you logged in on your account page (stored in your browser for the current session) and, where applicable, a per-browser preference such as a chosen theme or a collapsed section.
- We do not use advertising cookies, tracking pixels or third-party analytics. Cloudflare may set a technical cookie needed for security.
- Because only essential storage is used, no cookie banner is shown.
11.Changes & contact
We may update this policy; the date at the top shows the current version and significant changes are announced on the account page or by e-mail. Questions and requests: [email protected].