PRIVACY.

Information used to provide your account

Account information includes your name, email address, password hash, and information needed to verify access or recover your account. Licensing records include the products and licenses you own, related order identifiers, and activation details such as machine names, network or hardware identifiers, and activation and verification dates. Information supplied through support correspondence is also used to help resolve your request.

Why we use this information

We use account and licensing information to provide access to purchased software, manage licenses and activations, and provide support. Security information helps us verify sign-ins, prevent misuse, manage sessions, and process password changes and recovery. We also use information where needed to meet legal obligations or resolve disputes.

Where data-protection law requires a legal basis, providing purchased products and account services generally relies on performing our contract with you. Protecting accounts and maintaining reliable services generally relies on legitimate interests, subject to your rights. Legal recordkeeping relies on the relevant legal obligations.

Security and password recovery

New passwords are stored as salted password hashes. Browser and application sessions have expiry dates and can be revoked. Recovery links expire after 30 minutes and work once. Password changes generate an account-security email.

When you choose a new password, Greenlight checks it against known breached passwords using the Pwned Passwords service. Only a short prefix of a password hash is sent to that service; your password, full hash, and email address are not sent with that check.

Service providers and hosting

The website uses Bunny.net for content delivery, and the account and licensing backend is hosted on IronSong servers in Dallas, Texas. Transactional email uses SMTP2GO. Hosting, email, and security providers may process technical information needed to deliver their services, including network addresses and delivery records. Processing may occur outside your country.

Cookies and browser storage

The account interface does not set cookies or save credentials in localStorage or sessionStorage. Sign-in information is held in memory while the account page is open. The site code does not include advertising or analytics trackers. Ordinary browser caching and infrastructure security logs may still occur.

If optional tracking is introduced, this notice and any required consent controls will be updated before it is enabled.

Retention

Account, purchase, and licensing records support ongoing access to your software, support requests, disputes, and applicable legal obligations. Closing an account does not automatically remove those records.

We currently retain account records, security logs, session records, and backups indefinitely because automatic retention limits have not yet been implemented. Session expiry and revocation prevent further use of a session but do not delete its record. We are reviewing these practices. Contact us to ask about your information or to make a deletion request; applicable legal obligations and your ongoing licenses may affect what can be removed.

Your choices and rights

You can change your password, review and revoke sessions, and deactivate licensed machines from your account. Depending on where you live, you may also have rights to access, correct, delete, restrict, object to certain uses of, or receive a copy of your personal information, and to complain to the relevant data-protection authority.

Send privacy requests to the contact above. We may need to verify your identity before acting on a request. Certain information may need to be retained to meet legal obligations or protect legitimate rights.

Changes to this notice

This notice will be updated when the way information is used changes. Last updated September 20, 2026.