Privacy Policy
Last updated: April 2026
Who we are
Selectred operates the Aurora Platform, available at selectred.com. References to "we", "us", or "our" in this policy refer to Selectred. References to "you" refer to any person who purchases, activates, or uses our software or visits our website.
We are committed to protecting your personal data and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
What information we collect
When you purchase a license
- Your email address (provided at checkout via Stripe)
- Payment details — processed and stored by Stripe; we never see or store your full card number, CVV, or bank account details
- The product and tier purchased, and the date of purchase
When you create an account
- Your email address
- A hashed password (we store only a bcrypt hash — your plain-text password is never retained)
- The date and time your account was created and the date of your most recent login
When you activate a license
- Your license key
- A one-way hashed machine identifier (a SHA-256 hash of stable hardware characteristics — used solely to enforce the single-seat activation limit and cannot be reversed to identify your machine)
- The date and time of activation
When you submit feedback
- Your account email and the product your feedback relates to
- The content of your feedback submission (title, description, and version)
- Your license tier at the time of submission
When you contact support
- Your name and email address
- Any information you choose to include in your message
Website usage
We do not use third-party analytics, advertising trackers, or fingerprinting scripts on this site. We use a session cookie solely to keep you logged in to your account. This cookie contains no personal data and is deleted when you close your browser or log out.
How we use your information
| Purpose | Legal basis |
|---|---|
| Delivering your license key after purchase | Contract |
| Validating your license when the software calls our API | Contract |
| Maintaining your account and login session | Contract |
| Processing and responding to feedback submissions | Contract / Legitimate interest |
| Responding to support requests | Legitimate interest |
| Preventing license abuse (machine binding, deactivation) | Legitimate interest |
| Complying with tax and financial record-keeping obligations | Legal obligation |
We do not sell, rent, share, or otherwise transfer your personal data to third parties for marketing purposes.
Third parties
Stripe processes all payments on our behalf. When you purchase a license, you interact directly with Stripe's checkout interface. We receive only the email address and a session identifier from Stripe — never your full payment details. Stripe's privacy policy is available at stripe.com/privacy.
We do not use any other third-party services that receive your personal data.
Data retention
| Data | Retention period |
|---|---|
| License records and purchase history | Duration of the license + 7 years (tax and accounting compliance) |
| Account credentials | Until you request deletion or your account is closed |
| Machine activation hashes | Until the license is deactivated, transferred, or expires |
| Feedback submissions | Until you request deletion or your account is closed |
| Support correspondence | 2 years from the date of last contact |
Your rights
Under UK GDPR you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct inaccurate or incomplete data
- Erasure — ask us to delete your personal data (subject to legal retention requirements; for example, we are required to retain purchase records for 7 years)
- Restriction — ask us to restrict processing of your data in certain circumstances
- Portability — receive a copy of the data you have provided to us in a structured, machine-readable format
- Objection — object to processing based on legitimate interests
To exercise any of these rights, email support@selectred.com. We will respond within 30 days.
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Security
- Passwords are stored as bcrypt hashes and are never logged or transmitted in plain text
- All API communication is over HTTPS
- License and account data is stored in an encrypted database
- Machine activation identifiers are one-way hashes that cannot be reversed
- Access to our systems is restricted to authorised personnel only
Children
Our software and services are not directed at children under the age of 16. We do not knowingly collect personal data from children.
Changes to this policy
We will post any changes to this page and update the "Last updated" date at the top. For significant changes affecting how we use your personal data, we will notify existing customers by email at least 30 days before the changes take effect.
Contact
Questions about this policy or requests to exercise your data rights:
Email: support@selectred.com