DownKit Privacy Policy

This Privacy Policy describes how Nunuworks, Inc. handles information for the DownKit website, download experience, one-time purchase, license delivery and recovery, support, and desktop application.

The general Nunuworks Privacy Policy continues to apply to the company website and other Nunuworks relationships. This policy controls for DownKit where it is more specific.

DownKit performs core analysis, preview preparation, downloading, validation, merging, and output publication on the user's Mac. Nunuworks does not operate a remote media-processing service for DownKit.

DownKit does not send Nunuworks the user's submitted URLs, remote URL history, detected media, thumbnails, output files, filenames, output paths, or download history through its purchase or licensing systems. A source website and intervening networks receive ordinary requests needed to access the link the user chose.

DownKit stores bounded local preferences, download job state needed for safe operation, redacted diagnostics, update state, the number of successfully completed free output files, a random installation key pair, and any signed license entitlement.

Commerce state and key material are encrypted using operating-system protected storage where available. The app fails closed if that protection or stored state cannot be safely read. Removing local application data can remove activation state and does not create an additional license seat automatically.

When a user starts a purchase, DownKit sends a random purchase-attempt identifier, app version, supported platform identifier, and installation public key to the Nunuworks commerce service. It does not include the submitted media link or download selection.

Stripe collects the purchaser's email, payment details, billing information, tax information, fraud signals, and ordinary transaction metadata under Stripe's own privacy terms. Nunuworks receives the customer email, Stripe identifiers, payment status, amount, currency, tax and dispute information needed to fulfill and administer the purchase.

Nunuworks creates a random license record, an encrypted recoverable license key, pseudonymous lookup values, and a device-bound signed activation certificate. The certificate contains a random license ID and cryptographic installation-key hash, not the purchaser's email, name, hardware serial number, media links, or download history.

Nunuworks uses Stripe to process payment, calculate or document applicable tax, and handle disputes and payment remedies. Stripe receives information ordinarily required for those services.

Nunuworks uses Firebase Cloud Functions and Firestore for server-side checkout, fulfillment, orders, durable email delivery, license activation, and rate limiting. Google may process ordinary infrastructure, security, request, and operational data.

Nunuworks uses Postmark to deliver and redeliver the license key. Postmark receives the recipient email, message content, delivery metadata, IP and provider logs ordinarily needed to transmit and troubleshoot email. Open and link tracking are disabled for DownKit license messages.

A signed DownKit package may check a fixed Nunuworks-controlled HTTPS update feed. The request may include app version, operating system, architecture, package type, release channel, and bounded updater protocol information.

Update requests do not include submitted links, download history, purchase email, license key, payment details, hardware serial number, advertising ID, or behavioral analytics identifier.

Nunuworks uses DownKit commerce information to create Checkout Sessions, verify payment, issue and recover a license key, activate or deactivate devices, provide support, prevent abuse, reconcile payments, respond to disputes, maintain security, and meet accounting or legal obligations.

Nunuworks does not sell DownKit personal information or share it for cross-context behavioral advertising. DownKit contains no advertising SDK, core account, behavioral analytics, or remote URL-history database.

Information may be disclosed when reasonably necessary to providers described above, professional advisers bound by appropriate duties, a lawful corporate transaction, or legal process and safety obligations.

Purchase, license, email-delivery, dispute, tax, and accounting records are retained for the period reasonably needed to administer a perpetual license, meet legal obligations, prevent fraud, and resolve disputes. Rate-limit records and temporary purchase credentials use shorter bounded retention periods where practical.

Nunuworks uses measures designed for the sensitivity of the information, including server-only Stripe and Postmark credentials, signed Stripe webhook verification, idempotent fulfillment, restricted administrative access, encrypted license material, signed device entitlements, bounded logs, and local operating-system protection.

No security measure is perfect. Users should keep their Mac, email account, and license key secure and should not publish or send the complete key in support messages.

Users can stop using DownKit, deactivate a licensed device from the app, delete local application data through the operating system, and contact Nunuworks about access, correction, deletion, or other privacy rights that apply. Some transaction records may need to be retained for legal, security, accounting, or dispute purposes.

An eligible purchaser can request redelivery from the DownKit recovery page. The generic response is designed not to reveal whether an address has a DownKit purchase.

Nunuworks and its providers may process information in Canada, the United States, and other places where they operate, subject to their safeguards and applicable law.

DownKit and its purchase flow are not directed to children under 13. Nunuworks does not knowingly collect purchase information from a child who cannot lawfully enter the DownKit License Terms.

Nunuworks may update this policy as DownKit, its providers, or legal requirements change. The updated page will show a new date, and material changes may be communicated through the site, app, update notes, license email, or another reasonable channel.

Privacy and support inquiries can be sent to contact@nunuworks.com.