Privacy Policy
1. Who is responsible for your data
The controller is Marek Cibulka, Komjatná 551, 034 96 Komjatná, Slovakia ("MV Software", "we"). Contact for all privacy matters: support@mvsoftware.eu, telephone 0944 608 432. We have not appointed a data protection officer because the law does not require it for our activity.
2. What we process, why, and on what legal basis
a) Visiting this website
IP address, request data and time (server logs) — for security, abuse prevention and operating the site. Legal basis: legitimate interest.
b) "Notify me" form
If you submit your email address through our "Notify me" form, that address and the date you signed up are stored in our own website database (not a dedicated mailing-list platform) so we can let you know about new product launches. We keep it until you ask us to remove it. Legal basis: your consent, which you can withdraw at any time by contacting us; we will then delete your address.
c) Buying a paid plan (MV Gallery PRO, MV Photo Client Orders PRO or Lifetime)
The checkout form collects your email address, name (or company name and registration/tax details if buying as a business), billing address and country. This is sent directly to the MV Software Business Platform, which processes your order, tax determination, subscription, licence and billing documents. Legal basis: performance of the contract; for invoices, our legal accounting obligation.
d) Your declarations at checkout
The exact wording you saw, which boxes you ticked and when, the Terms/Privacy version and the confirmation we sent you. We keep this to prove the contract, your consent to immediate digital delivery, and the information we gave you — we are legally required to be able to prove this. Legal basis: legal obligation; legitimate interest in defending legal claims.
e) Payment
Card and payment details are collected directly by Stripe on its own secure Hosted Checkout page — they are never collected, seen or stored by our storefront or the Business Platform. Stripe acts as our processor for the payment itself and as an independent controller for its own fraud-prevention, regulatory and product purposes; see Stripe's own privacy policy.
f) Transactional e-mail
We use Resend to send account-setup, order, subscription, invoice and contract-confirmation e-mails necessary to fulfil your purchase and manage your account. Resend processes this content as our processor; it is an independent controller only for its own account, billing and usage data. These are transactional e-mails, not marketing — they are never sent as a result of the newsletter signup, and buying a product does not sign you up for marketing e-mail.
g) Customer account / portal
Your account lets you view your subscription or licence, billing documents and downloads, and generate a new licence key. Legal basis: performance of the contract.
h) Plugin licensing, trial and updates
The free and paid versions of our WordPress plugins contact our licensing service when you activate the plugin (which starts the 7-day trial of MV Photo Client Orders), when you activate, check or deactivate a licence, and when WordPress checks for updates. These requests contain: product name, plugin/WordPress/PHP versions, your website address and a site identifier derived from it, your IP address and the plugin's user-agent string, and — when you activate a licence — your licence key. Your website address can be personal data if the website belongs to an individual. The plugins do not send us your orders, your clients' names, e-mails, PINs, galleries or photographs — those stay on your own WordPress website; you, as the photographer or site owner, are the controller of your clients' data, and MV Software is neither the controller nor a processor of it. Downloading a free plugin from this website needs no account and no personal data. Legal basis: performance of the contract; legitimate interest in preventing misuse of licences.
i) Server and security logs
Our servers automatically log technical information (such as IP address and request details) for security and abuse-prevention purposes. Legal basis: legitimate interest.
j) Complaints, withdrawal declarations and support
Name, e-mail, order reference and your message, to handle your request and prove that we did so. Legal basis: performance of the contract / legal obligation; legitimate interest.
3. Cookies and tracking
This website does not use analytics, advertising or tracking cookies. We only use technically necessary session mechanisms required for the website and checkout forms to function (for example, security tokens that prevent forged form submissions). These do not require your consent under applicable e-privacy rules. Stripe's own payment page has its own cookie notice, outside our control.
4. How long we keep your data
The figure below marked statutory is a legal requirement (Slovak Accounting Act); everything else in this table is our own retention policy, not a legal requirement, which we may revise:
- Orders, invoices, credit notes, accounting documents — 10 years following the year they relate to (statutory).
- Customer account with no active subscription/licence — our policy: 7 years after the last order or activity, then anonymised.
- Checkout declarations, withdrawal requests, complaints — our policy: 5 years (evidence that is part of an order follows the order's own 10-year period).
- Licence/activation and trial records — our policy: while the licence is valid, plus 3 years.
- Order-e-mail delivery records — our policy: 2 years.
- Server and security logs — our policy: 90 days.
- "Notify me" address — until you withdraw consent; we review the list every 24 months.
- Support correspondence — our policy: 3 years after the case is closed.
5. Who receives your data
- Stripe (payments) — our processor for payment processing; independent controller for its own fraud-prevention, regulatory and product purposes.
- Resend (transactional e-mail delivery) — our processor for the content of order e-mails; independent controller only for its own account/usage data.
- Website hosting: Websupport, s.r.o. (Slovakia) — processor, hosts this website and its e-mail.
- Account / licensing server hosting: OVH Sp. z o.o. (Poland, EU) — processor, hosts the Business Platform and licensing service.
- Public authorities, where the law requires it (for example a tax authority).
We currently have no accountant or external bookkeeping service processing your data on our behalf; if that changes we will update this page. We do not sell your personal data and do not share it with advertisers.
6. International transfers
Stripe and Resend process data partly in the United States. Transfers rely on the EU Standard Contractual Clauses and, for certified US recipients, the EU–U.S. Data Privacy Framework (Commission Implementing Decision (EU) 2023/1795 — upheld by the EU General Court on 3 September 2025; an appeal is pending). Websupport and OVH host within the EU/EEA. On request we give you a copy of the safeguards.
7. Your rights
You have the right of access, rectification, erasure, restriction, data portability, to object to processing based on legitimate interest, and to withdraw consent at any time (this does not affect processing carried out before). Write to support@mvsoftware.eu; we answer within one month. You may lodge a complaint with the Slovak supervisory authority, the Úrad na ochranu osobných údajov Slovenskej republiky, Galvaniho Business Centrum II, Galvaniho 7/B, 821 04 Bratislava, Slovenská republika, https://dataprotection.gov.sk/, or with the authority of the country where you live.
8. Do you have to give us your data? Automated decisions
Data marked as needed for the contract are required to buy and use a paid plan; without them we cannot conclude the contract. Using the free plugin needs no data from you. We do not make decisions based solely on automated processing that affect you, and our prices are not personalised.
9. Security
We use encrypted connections, restrict access, store licence keys only as hashes, and never see or store your card data.
10. Changes to this policy
We may update this Privacy Policy from time to time. The version is shown at the top of this page. Earlier versions are available on request.