Privacy Notice

Version 1.7 · Last updated: 7 October 2026

This notice explains how Angelos Tsavdaris, trading as NetworkLink.EU in Dublin, Ireland, processes personal data for the website, accounts, licensing service and support. Angelos Tsavdaris is the controller for these activities. Contact: [email protected].

Documentation · Terms of Service (User Agreement)

1. Your local AWS and Azure inventory

The desktop application stores AWS and Azure inventory, snapshots and diagrams on the user’s computer. Licensing requests contain installation, device and licensing information, not the contents of that inventory. The licensing server stores registered AWS account IDs and Azure subscription IDs, together with their cloud provider, environment and scope type, to enforce the shared allowance. It does not receive AWS access keys, role-session credentials, Azure client secrets, cloud access tokens or resource configuration.

The operator of each customer installation is responsible for its own handling of personal data, including access and exported reports. Contact that operator about data in their installation. If you send us records for support, we receive what you send; please remove unnecessary personal information. Any publicly accessible demonstration should be used with fictional data, not real confidential or personal records.

2. Information we receive

• Account information: email address, name, password authentication records, and any telephone number, address, city, postal code or country you provide.
• Licensing information: installation IDs and names, authentication information, licence names, plans and periods, device public keys and activation identifiers, registered AWS account IDs and Azure subscription IDs with their provider, environment (such as AWS partition or Azure cloud) and scope type, shared allowance usage, and authorisation and renewal results.
• Device observations during periodic online licence validation and renewal of offline authorisation: app-specific hashes derived from available machine identifiers, mounted accessible non-removable local volume identifiers, network-interface MAC addresses and available motherboard and physical-drive serial numbers, together with operating-system type and collection status. The server further transforms these into licence-specific tokens before storing them with renewal history; raw identifiers and incoming identifier hashes are not retained in that history.
• Hardware specifications during periodic online licence validation and renewal of offline authorisation: readable CPU name/model, manufacturer, architecture, logical processor count and stepping; total RAM and available memory-module manufacturer, part number, capacity and type; motherboard manufacturer, model, revision and board-model identifier; and drive manufacturer and model. These specifications are stored with renewal history and are visible only to authorised administrators. Collection uses ordinary user permissions; unavailable information is omitted. CPU and RAM serial numbers are not collected.
• Technical and security information: IP addresses, browser information, session identifiers, timestamps, login attempts, audit events and diagnostic records.
• Agreement acceptance: your account identifier, acceptance timestamp, source IP address, agreement version, content hash and a copy of the accepted agreement. These records document the contract accepted during registration. Accepting the agreement is not consent to marketing.
• Support information: your messages, contact details and any attachments.

Information comes from you, your installation, your interaction with the service or an authorised account administrator. Required fields are identified when collected. Without necessary account and licensing information, we cannot provide the corresponding service. Paddle is the merchant of record for paid purchases. We share your account email and selected plan with Paddle to prepare checkout and link the purchase to your account.

3. Purposes and legal bases

We use account, licensing and support information to provide the service you request. Where you are our contracting customer, the basis is performance of our contract or steps you request before entering it.

We rely on legitimate interests to administer organisational customer relationships, secure the service, prevent fraud and licence abuse, investigate faults and handle legal claims, taking account of affected individuals' rights. We also process information when necessary to comply with legal obligations. Any optional consent-based processing will be explained separately.

Device-observation tokens and hardware specifications support our legitimate interest in investigating possible unauthorised licence sharing. They remain associated with the licence and are pseudonymous, not anonymous. Access through account pages and APIs is restricted to authorised administrators. These observations do not themselves automatically block renewal or bind a licence to hardware; missing or changed observations are not proof of misuse.

Automated checks validate credentials, licence status and shared AWS/Azure allowances. An unsuccessful check may restrict desktop application functionality. Contact us if you believe a restriction is incorrect.

4. Providers, Paddle and Cloudflare

Paddle processes checkout, payments, tax, subscriptions and refunds as merchant of record. We receive customer and transaction identifiers, purchased plan and billing-period details, payment amounts and status, and subscription and refund events to provide your licence and support. Card details are entered directly into Paddle Checkout; we do not collect or store your full card number or security code. See the Paddle Privacy Policy for Paddle’s processing, retention and international-transfer information.

We disclose information where necessary to providers supporting hosting, infrastructure, email and security, and to professional advisers or authorities where justified by legal obligations or claims.

We use Cloudflare to help deliver and protect the website. Cloudflare processes technical information about website requests. Where enabled, Cloudflare Turnstile protects registration and login against automated abuse using signals such as IP address and browser information. See the Cloudflare Privacy Policy and Turnstile Privacy Addendum.

5. Hosting and international processing

Account and licensing data is stored on the server operating this service. The controller is based in Ireland; this does not mean all processing by service providers is confined to Ireland or the EU. Cloudflare operates globally and describes processing in the United States and other countries in its Privacy Policy.

Cloudflare describes its international-transfer arrangements, including the EU–US Data Privacy Framework and standard contractual clauses where applicable, in its Privacy Policy and Data Processing Addendum. Contact us for information about the providers and safeguards applicable to your data, or to request a copy of relevant safeguards.

6. Retention and manual deletion requests

Account and licensing records are retained to provide the account and administer its installations, licence terms and device authorisations. Expiration of a licence does not automatically delete the account or its history.

Device-observation records are normally retained for at least 12 months from the licence-validation event to support investigation of patterns across the annual subscription period. Further retention is reviewed against ongoing licence-misuse investigations, disputes or legal claims. Applicable data-protection rights and legal requirements may require earlier deletion. Retention reviews and deletion are currently manual.

Audit, agreement-acceptance, billing and licence-validation history currently has no automatic deletion schedule. Retention reviews and deletion requests are handled manually using the criteria below.

Account closure does not necessarily result in deletion of all associated records. When assessing retention or a deletion request, we consider whether records are still needed to operate the account, investigate a specific security or abuse incident, resolve an outstanding support matter or dispute, document the agreement accepted, meet a legal obligation or establish or defend a legal claim. Retention after closure is limited to the information and duration necessary for those lawful purposes.

For paid licences, applicable accounting and tax records may need to remain after account closure or a deletion request. Irish business tax records generally must be retained for six years, subject to applicable requirements and exceptions. Paddle retains its own merchant-of-record records under its privacy policy and applicable obligations.

We may retain anonymised statistical information that no longer identifies individuals.

Backup copies are handled separately from live records. When responding to a deletion request, we will explain applicable backup retention periods or criteria and any limitations affecting deletion.

To request account closure or deletion of associated personal data, email [email protected]. We may verify your identity. We will explain if a legal reason prevents deletion of particular records.

7. Cookies and browser storage

The website uses session cookies for authentication and security. Browser storage may remember interface preferences. Blocking necessary cookies can prevent login or other functions from working. Cloudflare's security features may also use necessary cookies, as described in its cookie documentation. Any optional analytics or tracking introduced later will be explained separately, with consent requested where required.

Cookies are small values stored by your browser and sent back to this website. Local storage keeps information in your browser for the interface to use.

• networklinkeu_session is our sign-in cookie. It expires after eight hours and is cleared when you log out.
• networklinkeu-theme in local storage remembers your chosen light/dark theme.
• networklinkeu-server-cookie-notice in local storage remembers when you select “I understand” on the informational banner.

The local-storage entries have no automatic expiry; they remain until you or your browser remove them. Clearing site data, using another browser, or accessing a different website address can make the notice appear again. If browser storage is blocked, your preferences and dismissal may not be remembered.

8. Your rights

Subject to applicable conditions, you can request access, correction, deletion, restriction or portability of your personal data, and object to processing based on legitimate interests. Where we rely on consent, you can withdraw it without affecting the lawfulness of earlier processing.

Contact [email protected] to exercise these rights. We handle requests manually and respond within applicable legal deadlines, explaining any permitted extension.

You may complain to Ireland's Data Protection Commission or another competent supervisory authority, including where you live or work or where an alleged infringement occurred.

9. Updates

We may update this Privacy Notice from time to time. The revised notice will show its last-updated date. We will provide additional notice where required by applicable law.