Draft
Legal · As of October 2026
Privacy notice
What you copy never leaves your device. To run your account and your license we process your email address, your trial, your purchases and the devices you sign in on. This website sets no cookies and does not measure visits. This notice says which data are processed, what for, and which rights you have.
1. Controller
Responsible for processing personal data in connection with Pano and getpano.app is:
webberz — Özdemir KadirWegenstrasse 2
9436 Balgach
Switzerland
hello@getpano.app
For questions about privacy or to exercise your rights, an informal message to this address is enough.
2. What this notice covers
It covers the website getpano.app, the connections the Pano app makes to our servers (license.getpano.app for licenses and updates.getpano.app for updates), purchases of Pano licenses and emails to addresses at getpano.app.
Your clipboard history is not covered because we never receive it. Pano stores the clips you copy in a database file on your device. They are never sent to us or to anyone else. Detected secrets (such as API keys, private keys, card numbers or IBANs) and passwords that password managers mark as concealed are kept in memory only, are never written to disk and are deleted automatically. The app contains no analytics, no tracking and no crash reporting. You can clear your history at any time in the settings; uninstalling Pano and deleting its data folder removes it completely.
3. Applicable law
We follow the Swiss Federal Act on Data Protection (FADP) and its ordinance. Where the General Data Protection Regulation of the European Union (GDPR) applies because we offer Pano to people in the EEA, we meet its requirements as well.
[EU REPRESENTATIVE UNDER ART. 27 GDPR: Pano is sold to customers in the EEA on a regular basis, so the exception for occasional processing (Art. 27(2)(a)) probably does not apply. Have a lawyer decide whether a representative must be appointed and name it here.]
4. Which data we process
4.1 Account and trial
When you first start Pano, you sign in with your email address: we email you a six-digit code, there is no password. This applies to every plan, including the free version and the 14-day trial. For your account we store your email address, when your trial started and the devices you are signed in on (see 4.2).
4.2 Sign-in, license and devices
- Sign-in: your email address and a six-digit sign-in code that we email to you. We store only a hash of the code; it is valid for 15 minutes and for at most five attempts. To stop guessing, we record failed sign-in attempts (email address and time) for 30 days and allow at most ten a day.
- Devices: for each device you sign in on, a device identifier (a one-way hash derived from the device's hardware ID, so the hardware ID itself never leaves your device), the device name (for example “MacBook Pro”), and when it was first and last seen, so you can see and manage your devices. A license works on up to three devices.
- License check: about every three days the app renews its signed license from the server; we record when each device was last seen.
- Free licenses: if we give you a license for free, we store your email address, until when it is valid and a short internal note.
4.3 Offers and news (optional)
When you sign in, you can tick an optional box, unticked by default: “Send me occasional offers and news”. Only if you do, we email you offers and news about Pano. To be able to prove your consent, we store that you gave it, when, and the wording you agreed to, and later your withdrawal. Every such email contains a link to unsubscribe, and you can withdraw your consent in the app at any time; this does not affect emails sent before. Like the sign-in codes, these emails are sent through Mailgun (EU region) from the domain mails.getpano.app (see 4.5).
4.4 Purchases
Payments are handled by Stripe using Stripe Managed Payments. For your purchase, Stripe is the merchant of record and your contractual partner for the payment: Stripe processes your payment details, calculates and collects taxes and sends your receipt and invoices, under its own responsibility and its own privacy policy. Card numbers and bank details are never transmitted to us. From Stripe we receive and store:
- your email address;
- the plan you bought, its status, until when it is paid and whether it ends;
- a Stripe customer reference, so you can open the customer portal from the app;
- refunds and lost payment disputes, which end the license they belong to.
With each purchase we also store your consent to have Pano unlocked immediately and to waive the statutory right of withdrawal: when you gave it and which version of the wording you agreed to. We pass it to Stripe as metadata of the purchase, and it is repeated in the purchase confirmation.
4.5 Emails
Sign-in codes and, if you agreed to them, offers and news are sent through Mailgun (Sinch Mailgun) from its EU region, which is hosted in Germany, from the domain mails.getpano.app; Mailgun processes your email address and the message on our behalf. Apart from sign-in codes and, if you agreed to them, offers and news (4.3), we send you no emails except those about your license and purchases. When you write to an address at getpano.app, we process the details you give and the content of your message to answer you. The mailbox hello@getpano.app is hosted on a mail server that webberz operates itself, in [COUNTRY]; no third-party mail provider is involved.
4.6 Update checks
About 30 seconds after it starts and then once a day, the app asks updates.getpano.app whether a new version exists, and when you click Check now. It downloads a small file describing the latest version; the request contains no identifier of you or your device. As with any download, the server receives the usual connection data, such as your IP address and the app version. Nothing is downloaded or installed until you choose to. You can switch the automatic check off in the settings.
4.7 This website
getpano.app sets no cookies and uses no analytics, no advertising, no embedded content of third parties and no external fonts. When you open a page, your browser transmits technically necessary details such as your IP address, the time, the address requested and your browser's identification. Our web server uses them to deliver the page and does not write access logs. To show current prices, your browser loads them from license.getpano.app; no personal data is sent with that request apart from your IP address, which is needed to answer it.
4.8 Server operation
Like every server, ours receive your IP address with each request. The license server uses it to answer and to limit abuse, for example too many sign-in attempts from one address, by counting requests in memory for a short time; it is not stored in our database and our web servers write no access logs. The servers' technical error logs can occasionally contain an IP address; they are rotated automatically and kept to at most 10 MB per service.
5. Purposes and legal bases
| Processing | Purpose | Basis under the GDPR |
|---|---|---|
| Account, sign-in, trial, license, devices | Providing Pano, the free version, the trial and the license you bought | Art. 6(1)(b), performance of the contract |
| Offers and news | Telling you about offers and new features | Art. 6(1)(a), your consent, which you can withdraw at any time |
| Failed sign-in attempts, request limits | Protection against guessing and abuse | Art. 6(1)(f), legitimate interest in secure operation |
| Purchase data from Stripe | Unlocking the license, customer portal, refunds | Art. 6(1)(b); bookkeeping: Art. 6(1)(c) |
| Consent to immediate unlocking and waiver of the right of withdrawal | Performing the purchase, proving the waiver | Art. 6(1)(b) and (c) |
| Sign-in emails | Delivering the sign-in code | Art. 6(1)(b) |
| Update checks | Offering new versions | Art. 6(1)(f), legitimate interest in secure, current software |
| Serving the website and prices | Showing the pages | Art. 6(1)(f) |
| Your emails to us | Answering your request | Art. 6(1)(b), otherwise (f) |
Under the FADP we base this processing on the contract with you, on overriding interests in secure operation and, for offers and news, on your consent. The website needs no consent, which is why there is no cookie banner.
6. Processors and disclosure to third parties
We do not pass personal data on to third parties to sell them or for advertising. For operation we use these providers:
| Service | Provider | Location |
|---|---|---|
| Servers for the website, license server and updates | Hetzner Online GmbH, Gunzenhausen | Germany (EU/EEA) |
| Encrypted backups of the license database | Hetzner Online GmbH (Storage Box) | Germany (EU/EEA) |
| Sending sign-in codes and offers and news (mails.getpano.app) | Sinch Mailgun (Mailgun Technologies, Inc.), EU region | Germany (EU/EEA) |
| Payments, taxes, receipts (own responsibility as merchant of record) | Stripe [CONTRACTING STRIPE ENTITY FOR MANAGED PAYMENTS] | [LOCATION] |
7. Transfers abroad
Our servers for the website, licenses and updates are in Germany, our mail server in [COUNTRY]. Stripe and Mailgun may process data in other countries, including the United States. Such transfers rely on the EU-US Data Privacy Framework and its Swiss extension or on the standard contractual clauses of the European Commission. [CONFIRM WITH THE PROVIDERS' CURRENT DATA PROCESSING TERMS]
8. How long we keep data
- Sign-in codes: valid for 15 minutes, deleted after use or once expired.
- Failed sign-in attempts: 30 days.
- Free and trial accounts: deleted when nobody has signed in with them and no license has been renewed for 24 months. We email you a reminder 30 days before.
- Accounts with a paid license: kept while the license is active; afterwards the rule for free accounts applies.
- Purchase and accounting records, including the consent to waive the right of withdrawal: ten years, as the law requires (Art. 958f of the Swiss Code of Obligations).
- Consent to offers and news: as long as it applies; after you withdraw it, we keep the proof of consent and of the withdrawal for three years.
- Signed-out devices are removed from the device list right away.
- On request we delete your account earlier, unless a statutory retention duty prevents it.
- Backups: the license database is backed up every hour; snapshots are kept for at most twelve months (24 hourly, 7 daily, 4 weekly and 12 monthly) and then deleted automatically.
- Emails: as long as needed to deal with them and with any follow-up question; if an order results, the statutory retention period of ten years applies.
9. Security
The website, the license server and the update server are reachable over HTTPS only. Sign-in codes are stored as hashes only; licenses are signed, so they cannot be forged. Backups are encrypted before they leave the server. The servers are reachable only on the ports they need, protected by a firewall, and accessed with keys only. Complete protection of transmissions over the internet cannot be guaranteed.
10. Your rights
Within the applicable law you have in particular the right to access, rectification, erasure, restriction of processing, receiving or transferring your data, and to object to processing we base on overriding interests. A message to hello@getpano.app is enough. In some cases we have to verify your identity before we answer, usually by a code sent to your email address.
You can also complain to a supervisory authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the EEA the data protection authority where you live.
11. Changes
We adapt this notice when our processing of personal data or the law changes, for example when sync between devices arrives. The version published here applies.