Privacy Policy

Last updated: April 20, 2026

What We Collect

We collect the minimum data needed to deliver the Service:

• Email address — for license delivery, support, billing
• Machine fingerprint — a hashed hardware ID to bind your license to one PC
• License validation logs — IP address and timestamp when your app checks in
• Payment info — handled entirely by Stripe; we never see your card details

What We Don't Collect

• Your Facebook credentials or session cookies — these stay on your PC
• Your inventory data — vehicles, photos, prices stay on your PC
• Your customers' info — we don't see leads or messages
• Browsing data, telemetry, or analytics from inside the app

Where Data Lives

• Your data (inventory, sessions, Facebook cookies) — on your own Windows PC, in the install folder
• Our data (license registry) — Railway-hosted server in US-East
• Payment data — Stripe (PCI-compliant)
• Emails — Gmail (transactional only)

How We Use Data

• Email — license delivery, billing receipts, support replies, important service announcements
• Machine fingerprint — verify you're using your license on the bound machine
• Validation logs — detect abuse (shared keys, etc.)

Who We Share With

• Stripe — payment processing (their privacy policy applies)
• Cloudflare — website hosting (no personal data sent)
• Railway — license server hosting
• Google (Gmail) — transactional email delivery

We never sell, rent, or share your data with marketers or third parties.

Cookies

Our website uses no tracking cookies. Stripe's checkout pages use their own cookies — see Stripe's privacy policy.

Data Retention

• License records — kept while subscription active, plus 12 months after cancellation
• Validation logs — 90 days rolling
• Email correspondence — 2 years
• Payment records — 7 years (legal requirement)

Your Rights

You can request:

• A copy of all data we have on you
• Correction of inaccurate data
• Deletion of your data (subject to legal retention requirements)
• Export of your data in a portable format

Email support@mpposter.com to make a request.

Security

• License keys generated cryptographically (32-byte URL-safe random)
• License server uses HTTPS only
• Machine fingerprints stored as SHA256 hashes
• Admin panel password-protected
• Stripe handles all payment data — we never touch it

Children

MP Poster is for businesses. We don't knowingly collect data from anyone under 18.

Changes

We may update this policy. Material changes will be emailed to active subscribers.

Contact

Privacy questions? support@mpposter.com