Privacy Policy

01Introduction and who we are

This Privacy Policy explains how EvlarSoft, LLC, a Missouri limited liability company (“EvlarSoft,” “we,” “us,” “our”), collects, uses, discloses, retains, and protects personal information in connection with our websites, applications, APIs, and related services (the “Products”), and describes the rights and choices available to you. It applies across all of our Products — the Verve family (APIVerve, VerveKit, VerveSheets, VerveContext), DigestYourFinances, EvlarSoft One (our account at my.evlarsoft.com), and our applications, including our Windows applications on the Microsoft Store such as Evlar Markets. Because a single entity stands behind every Product, one policy governs them all; where a specific Product requires additional detail, it will point back to this document.

For personal information we collect about our own users, EvlarSoft acts as the “controller” (or “business”). Where we process personal data on behalf of a customer that uses our Products to process its own users' data, we act as a “processor” (or “service provider”) under our Data Processing Addendum, and that customer's privacy notice governs. By using the Products, you acknowledge the practices described here.

The short version.Most of our Windows applications keep your data on your PC. When an application needs something from the internet, such as a stock quote or a forecast, it asks our servers for that one thing. If you create an EvlarSoft One account, we keep your profile and, if you turn it on, a backup of each application's settings. We do not sell your personal information, we do not share it for cross-context behavioral advertising, and our current Windows applications use no third-party advertising networks or tracking SDKs. You can download or delete your One account yourself at any time. Questions go to [email protected].

02Information we collect

We collect the following categories of personal information:

• Identity and account data — name, username, email address, password (stored in hashed form), and organization details you provide when registering or configuring an Account. For an EvlarSoft One account, sign-in is handled by Google Firebase Authentication. If you sign up with an email address, your password passes through our API once so it can create your account, and is then held only by Firebase in hashed form; we never store or log it. The sections below on EvlarSoft One and our Windows applications describe exactly what those Products collect.
• Contact data — email address and any information you include when you contact us for support, sales, or other requests.
• Billing and transaction data — plan, billing contact, transaction history, and limited payment details. Full payment-card numbers are handled by our payment processor and are not stored by us.
• Content you submit — the inputs, queries, prompts, files, and other data you send to a Product so it can return a result, together with the resulting Output.
• Usage and log data — API requests and request counts, feature usage, timestamps, referring pages, and diagnostic logs we generate as you use a Product. Request counts are used to meter usage against your plan.
• Device and technical data — IP address, browser type and version, operating system, device identifiers, language, and similar technical information.
• Cookies and similar technologies — as described in our Cookie Policy.

You are not required to provide all of this information, but some of it is necessary to create an Account or use certain Products; without it, those Products may be unavailable.

03How we collect it

We collect information: (a) directly from you, when you register, configure a Product, submit content, make a payment, or contact us; (b) automatically, through cookies, logs, and similar technologies as you interact with the Products; and (c) from third parties, such as our payment processor, analytics and infrastructure providers, and, where you sign in through a third-party identity provider, that provider — in each case as described in our Subprocessors page.

04EvlarSoft One (your EvlarSoft account)

EvlarSoft One is a free account you can use with our Windows applications from the Microsoft Store and with our websites and services, such as APIVerve, VerveKit, VerveSheets and VerveContext. You manage it at my.evlarsoft.com. Using One is optional: the applications work without an account.

Signing up and signing in. You sign in in your web browser with Google or with your email address, and sign-in is handled by Google Firebase Authentication. With Google, Google gives us your name, email address and the address of your Google profile photo. With email, you give us your name, email address and a password, and Cloudflare Turnstile checks in the background that you are not a bot. Either way we record when you accepted our Terms of Service and whether you want news emails. In some countries the news box starts ticked; in the EEA, the UK, Switzerland and other countries whose law requires it, it starts unticked. We use the country Cloudflare derives from your IP address to decide which.

When you sign in from a Windows application, the browser hands the application a one-time code over a local connection on your PC (a “loopback” address that never leaves the PC). The code expires after two minutes and works once; the application exchanges it for a session. That session is stored on your PC, encrypted with Windows' own data protection (DPAPI), and is shared by the EvlarSoft applications on that PC so you sign in once.

What we store. Your account data is kept in Google Firebase Realtime Database, and profile photos you upload in Cloudflare R2. Our Windows applications reach it only through our API at api.evlarsoft.com, which runs on Cloudflare Workers, and never contact Firebase directly. It holds:

• your profile: your name, your email address, your photo if you add one (or your Google photo's address), whether you want news emails and when you set that, when you accepted the Terms, when the account was created and last updated, when you last signed in, and when your password was last changed;
• the EvlarSoft applications you have signed in to, with when each was first and last seen. This is recorded when you sign in, and at most every few hours when an application starts;
• your devices: one entry for each PC session, with the application, when it was created and last used, and the approximate city and country it signed in from;
• recent activity: your newest 50 sign-ins and account changes, each with the time, the application, the sign-in method, and the approximate city, region and country that Cloudflare derives from your IP address. To spot a sign-in from a new network we keep a one-way hash of the network your IP address belongs to, never the address itself;
• the services you have allowed, such as APIVerve, with when you first and last signed in and when you allowed or removed access. A service asks before it receives your name, email address, photo and whether your email is confirmed;
• settings backups, if you turn them on: each application's settings, up to 256 KB each, with the time they were saved, so a new PC can bring them back. Window positions are not included. What a backup holds depends on the application; for Evlar Markets, for example, it includes your watchlists, price alerts, portfolio holdings and preferences. Backups are kept in a separate database (evlarsoft-appbackups);
• application-specific data you choose to create: for our music studios (Rap Studio, Beat Maker, Mastering), a studio profile with your artist name, photo and studio preferences, shown to others only if you make it public; for Crosshair Overlay, the crosshairs you publish, which are public along with your account name and photo, and the ones you save.

Emails.We send account emails through Twilio SendGrid: a welcome message, email confirmation and password-reset links, a notice when your email address is changed, and security notices when your account signs in on a PC from a network and town it has not used before, allows a new service, or changes its password. These are part of the service and cannot be turned off while you have an account. News emails go only to confirmed addresses that opted in, and you can turn them off at any time on your account's Profile page or with the unsubscribe link in each one.

Your choices.Backups can be turned off for each application on each PC, and turning them off offers to delete the saved copy. You can delete any backup on the Backups page, sign out any PC or every PC, remove a service's access, change your name, email address, password and photo, and download everything on your account as one file.

Links. Links from the account pages carry tags that tell us which page and placement was used: UTM parameters on web links, and a Microsoft Store campaign ID on Store links. One adds no third-party advertising trackers.

Deleting your account. You can delete your account yourself at my.evlarsoft.com, under Profile, by typing your email address to confirm. This permanently deletes your backups, your studio profile, the crosshairs you published and saved, your photos, your application, device and activity lists, your profile and your sign-in account at once, and applications on your PCs sign out the next time they check in. Counts you added to other people's crosshairs, which do not identify you, remain. Deletion is immediate; copies may remain in our providers' backups for their standard retention periods.

05Our Windows applications

This section describes our current Windows applications published on the Microsoft Store. Unless an application says otherwise, what you create in it — files, settings, watchlists, notes, recordings — is stored on your PC and is not sent to us. An application sends data to us only for the purposes below.

Data requests. Some applications fetch information for you, such as stock and market data (Evlar Markets), weather and radar (Rain Radar), fuel prices, vehicle details from a VIN, or a daily horoscope. They ask our API at api.evlarsoft.com, which answers from APIVerve, our own data API, and from public sources. To keep that service from being abused:

• each installation creates its own signing key (Ed25519) on your PC, and signs every request with it. We see the key's public half, which works as a random identifier for that installation, not for you;
• we see what was asked for: the endpoint and its parameters, such as ticker symbols, a location, a VIN, or a birthday and place for a horoscope. Answers are cached by those parameters, not by who asked, and when a request is passed to a data source it carries the parameters only, never your IP address, key or account;
• Cloudflare passes us your IP address with each request, as it does for any website. We use it to limit how many sessions and requests one address can make in a day; those counters expire within about two days. If an application asks for your approximate location (Rain Radar does, to center the map), we answer with the city-level location Cloudflare derives from your IP address and do not store it;
• answers are encrypted to your installation, so other software on your network cannot read them.

Microsoft Store purchases.Purchases, subscriptions and refunds are handled by Microsoft under its own terms and privacy statement. We never receive your payment details. To check what an installation owns, the application obtains a short-lived key from the Microsoft Store and our servers ask Microsoft which of the application's products and add-ons it holds. We keep the answer with that installation's session for about two days and record the result in our logs. For applications that count use per buyer (VIN Decoder counts lookups per month), we use a one-way hash of the anonymous ID Microsoft gives us for your Microsoft account, so a limit follows you to another PC without us knowing who you are, and we count the items looked up as one-way hashes that are deleted after the month ends. Microsoft also gives us sales, acquisition and review reports through Partner Center, which do not identify you by name.

Usage statistics, error reports and feedback. Our applications send usage counts and error reports to telemetry.evlarsoft.com. A usage count is a daily total per application, version, event (for example, “launched” or “exported a file”), free or paid plan, and Windows build; no row identifies an installation or a person. Each report carries a random installation ID, which we use only to limit how much one installation can send. An error report contains the error message and where in our code it happened, with your Windows user name removed from file paths. The Send usage data switch in an application's settings turns usage counts and error reports off. If you send us a message or answer a feedback prompt, we store what you wrote with the application, version, plan, Windows build and the installation ID, plus your email address only if you choose to give it so we can reply. Feedback you choose to send is delivered even with usage data off.

In-app banners. Some free applications show banners for our own applications and partners. They are served from cdn.evlarsoft.com, which sees your IP address like any website, and are chosen by the application and placement, not by anything about you. How often each one has been shown is remembered on your PC to cap repeats. Clicking one opens a link tagged with the application and campaign (UTM parameters).

Other services. EvlarSoft One, settings backups and EvlarSoft Link are described in their own sections. An application that opens a website or loads public content from another provider exposes your IP address to that provider, as any browser would.

06Our websites

When you visit evlarsoft.com or my.evlarsoft.com, Cloudflare serves the pages and processes your IP address and request details to deliver them and protect them from attacks. On evlarsoft.com, Google Analytics and Microsoft Clarity measure how pages are used: in the EEA, the UK, Switzerland and other countries that require consent they load only if you allow them, and elsewhere they load by default until you turn them off with Your Privacy Choices in the footer. Both run with advertising storage denied. The account pages at my.evlarsoft.com use no analytics. Details are in our Cookie Policy. If you contact us, we keep your message and email address to answer it.

07How we use your information

We use personal information to:

• provide, operate, maintain, secure, and improve the Products;
• create and administer your Account and authenticate you;
• store, sync and restore the settings backups you turn on;
• answer the data requests our applications make, and check with the Microsoft Store what an installation owns;
• meter usage, process payments, and manage billing;
• respond to your requests and provide customer and technical support;
• send service and transactional messages, and, where permitted, product updates;
• monitor, detect, prevent, and investigate fraud, abuse, security incidents, and violations of our Acceptable Use Policy;
• analyze usage to understand and improve reliability, performance, and features;
• comply with legal obligations and enforce our agreements.

We do not sell your personal information, we do not share it for cross-context behavioral advertising, and we do not use the content you submit to a Product, or your backups, to train machine-learning models except where you have explicitly opted in.

08Legal bases for processing

Where the EU or UK General Data Protection Regulation applies, we rely on these legal bases:

• Performance of a contract — to provide what you ask for: your One account and sign-in, the backups you turn on, the data our applications request for you, the services you allow, account emails, and paid features you buy.
• Legitimate interests — to keep the Products secure and available (rate limits, abuse checks, security notices, sign-in activity), to check purchases with the Microsoft Store, to understand how the Products are used through aggregate usage counts and error reports, to show banners for our own applications, and to improve the Products. We weigh these against your rights, and you can object to them as described below.
• Consent — for news emails, for website analytics in countries that require it, for the optional email address you add to feedback, and for making a studio profile or a crosshair public. You can withdraw consent at any time without affecting what happened before.
• Legal obligation — where we must keep or disclose information to comply with the law.

09How we share your information

We disclose personal information only as described here:

• Service providers who process it on our behalf, under contracts requiring them to protect it and use it only for us:
  • Cloudflare hosts our websites, our API, our telemetry and EvlarSoft Link, stores profile photos and anonymous counters, and runs the Turnstile bot check;
  • Google provides Firebase Authentication and Realtime Database for EvlarSoft One and backups, Google sign-in if you choose it, Google Analytics on evlarsoft.com, and a STUN server for EvlarSoft Link;
  • Microsoft sells our applications and add-ons on the Microsoft Store and tells us what an installation owns, and provides Microsoft Clarity on evlarsoft.com;
  • Twilio SendGrid sends our account and news emails;
  • a payment processor, for subscriptions bought on our websites rather than the Store.
  See Subprocessors for more detail.
• Data sources.When an application asks for data, APIVerve, our own data API, may pass the request's parameters (for example, a ticker symbol or a location) to a third-party or public data source. Those requests come from our servers and carry nothing that identifies you.
• Services you allow. When you sign in to a service with EvlarSoft One, it receives your name, email address, photo and whether your email is confirmed, after asking you.
• What you make public. A public studio profile shows your artist name and photo, and a published crosshair shows your account name and photo, to anyone. A photo you upload is served at a public address so it can be shown where you appear.
• Legal and safety — where we believe disclosure is reasonably necessary to comply with a law, regulation, legal process, or governmental request, to enforce our terms, or to protect the rights, property, or safety of EvlarSoft, our users, or the public.
• Business transfers — in connection with a merger, acquisition, financing, reorganization, or sale of assets, in which case this policy will continue to govern the information transferred, or you will be notified of any materially different policy.
• With your direction — when you ask us to share information or integrate a Third-Party Service.

10No sale, no sharing for advertising

We do not sell personal information, and we do not “share” it for cross-context behavioral advertising, as those terms are defined in the California Consumer Privacy Act and similar state laws. We have not done either in the past 12 months, and we have no actual knowledge of selling or sharing the personal information of anyone under 16. We do not use personal information for targeted advertising or for profiling that produces legal or similarly significant effects.

In the past 12 months we have collected these categories of personal information, from the sources and for the purposes described above, and disclosed them only to the service providers listed above for those purposes: identifiers (name, email address, account and installation IDs, IP address); customer records (your profile and photo); commercial information (what an installation owns from the Microsoft Store); internet or network activity (requests, sign-in activity, usage counts, error reports, website analytics); approximate location derived from your IP address (never precise geolocation); and other information you provide, such as backups, feedback and messages. Account sign-in credentials are sensitive personal information; we use them only to sign you in and do not use any sensitive personal information to infer characteristics about you.

11International data transfers

EvlarSoft is based in the United States. Firebase stores EvlarSoft One accounts and backups in the United States, and Cloudflare processes requests in the data center nearest you and stores data in the United States or globally. If you use the Products from outside the United States, your personal information is transferred to the United States, whose data-protection laws may differ from yours. Where a transfer requires a safeguard, we rely on an appropriate legal mechanism, such as the standard contractual clauses our providers offer, the EU–U.S. Data Privacy Framework where a provider is certified under it, or an equivalent protection recognized under applicable law.

12Data retention

We keep personal information only as long as we need it for the purposes above, and then delete or anonymize it. In particular:

• EvlarSoft One: your profile, application list and services until you delete your account; device entries until that PC is signed out; recent activity is trimmed to the newest 50 entries; one-time sign-in codes last two minutes.
• Backups: until you delete the backup or your account. We may delete backups, or an account, that have been inactive for an extended period; where we can, we will email the account's address first.
• Application data requests: per-address and per-installation counters and Store ownership answers expire within about two days; monthly lookup counts expire after the month ends. Cached answers are kept by their parameters, not by who asked.
• Usage statistics are daily totals that identify no one and may be kept indefinitely. Error reports are kept while we need them to fix the problem. Messages and feedback are kept while we need them to respond and to improve the application, and deleted on request.
• Server logs, which can include IP addresses and request details, are kept by Cloudflare for a short period, currently no more than 7 days. Our API does not keep a log of every request; it keeps its own error lines and the result of Store ownership checks.
• Website analytics follow the periods in our Cookie Policy.
• Support correspondence is kept while needed to resolve your request and for our records.

We may keep information longer where the law requires it, or to resolve disputes, prevent fraud and abuse, and enforce our agreements.

13How we protect your information

We maintain administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction — including encryption in transit, signed and encrypted application requests, sessions stored encrypted on your PC, databases that only our API can write to, access controls, rate limits, and security notices when your account is used somewhere new. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your sign-in secure; if you believe your account has been compromised, sign out every PC from your account page at my.evlarsoft.com and tell us at [email protected]. If a breach affects your personal information, we will notify you and the authorities as the law requires.

14Your rights and choices

Depending on where you live, you may have some or all of the following rights regarding your personal information: to access it; to correct inaccuracies; to delete it; to port a copy; to restrict or object to certain processing, including processing based on legitimate interests; to withdraw consent where processing is based on consent; to opt out of sale, sharing, targeted advertising and profiling (which we do not do); and to be free from discrimination for exercising these rights.

Do it yourself. With an EvlarSoft One account, at my.evlarsoft.comyou can see and correct your profile, download everything on your account as one file, delete any backup, sign out any PC, remove a service's access, turn news emails off, and delete the account. In our applications, the Send usage data switch turns usage counts and error reports off. On evlarsoft.com, Your Privacy Choices turns analytics off.

Ask us. For anything else, email [email protected] from the address on your account, or tell us the application and roughly when you sent feedback, so we can find what we hold. We may need to verify your identity before acting, and we will respond within the time the law allows: one month under the GDPR, or 45 days under U.S. state laws, extendable where the law permits. You may use an authorized agent, who must show us your signed permission; we may still ask you to confirm your identity directly.

Appeals.If we decline your request, you can appeal by replying with “Appeal” in the subject line. We will answer within 45 days and explain our decision. If you are still unsatisfied, you may contact your state attorney general or, in the EEA, the UK or Switzerland, your data-protection supervisory authority.

You can unsubscribe from news emails using the link in those emails or on your One account's Profile page; we may still send you account and security emails.

15Region-specific disclosures

European Economic Area, United Kingdom and Switzerland.EvlarSoft, LLC is the controller of your personal data. You have the rights described above under the GDPR, the UK GDPR and Swiss law, and may lodge a complaint with your local supervisory authority. Our legal bases are set out in the “Legal bases” section.

California.Under the CCPA/CPRA, California residents have the rights to know, access, correct, and delete personal information, to opt out of its sale or sharing, and to limit the use of sensitive personal information, without discriminatory treatment for exercising these rights. The categories we collect and disclose are listed under “No sale, no sharing for advertising”. Email [email protected] to make a request.

Other U.S. states. Residents of states with comprehensive privacy laws, such as Colorado, Connecticut, Virginia, Texas and others, have similar rights to access, correct, delete, obtain a copy of, and opt out of targeted advertising, sale or profiling, and to appeal our decision as described above.

16Do Not Track, Global Privacy Control and automated decisions

There is no consistent industry standard for “Do Not Track”, and our Products do not respond to it. Our websites do not yet act on Global Privacy Control (GPC) signals automatically. Because we do not sell personal information or share it for cross-context behavioral advertising, there is nothing for those signals to opt you out of; you can turn off website analytics at any time with Your Privacy Choices, as described in the Cookie Policy.

We do not make decisions that produce legal or similarly significant effects about you solely by automated means. Rate limits and abuse checks may automatically slow or block requests from an address, installation or account; if you think one has blocked you in error, tell us.

17Children's privacy

The Products are intended for a general audience and are not directed to children under 13. Children under 13 may not create an EvlarSoft One account or send us personal information, and we do not knowingly collect personal information from them. If you are under 18, or under the age of majority where you live, you may create an account or make a purchase only with the permission of a parent or legal guardian. In the EEA and the UK, if you are under the age at which you can consent to data processing where you live (13 to 16, depending on the country), you need a parent's consent to create an account.

If we learn that we have collected personal information from a child under 13 without verified parental consent, we will delete it promptly, including the account. Parents and guardians who believe their child has given us personal information can email [email protected] and we will delete it.

18Google Workspace add-ons (VerveSheets, VerveKit)

Certain Products are distributed as Google Workspace add-ons for Google Sheets. When you run an add-on, it accesses the contents of the cell range you select in the spreadsheet you have open — and only that spreadsheet — using Google's spreadsheets.currentonly scope. Those input values are transmitted to the APIVerve API over an encrypted connection for the sole purpose of returning the data you requested, which is then written back into your sheet. We do not access spreadsheets you have not opened the add-on in, we do not use Google user data to train models or to serve advertising, and we do not sell it.

VerveSheets' and VerveKit's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

19EvlarSoft Link (connecting your phone)

This section applies to every EvlarSoft application that offers EvlarSoft Link, which connects your phone to the application on your PC. To pair, you scan a QR code that the application shows on your PC, and your phone opens a page at link.evlarsoft.com in its browser. There is nothing to install and no account to create. EvlarSoft Link is free and is part of the application.

What travels between your devices. What an application exchanges with your phone depends on what that application does: for example controls and settings, live readings and levels, text, audio, or camera images. Whatever it is, it goes only between your phone and your PC, over the encrypted connection described below.

How your phone and PC connect. Everything between your phone and your PC is encrypted, whichever way they connect. They try three ways, in this order:

• Directly between the devices, on the same Wi-Fi or over the internet on most networks, including most mobile data. This uses WebRTC, which is always encrypted end to end. There is no relay server: your data goes straight from one device to the other and never passes through EvlarSoft's servers.
• Over the same Wi-Fi, through a small server inside the application on your PC. Messages are encrypted (XChaCha20-Poly1305) with a key carried only in the QR code's link. That key sits in the part of a link that browsers never send to any server.
• Through your PC's own Wi-Fi network, as a last resort. The PC creates a network (Wi-Fi Direct) with a new password each session, and sends that password to your phone encrypted. Your phone joins that network and has no internet access while it is on it. This works only if your PC's Wi-Fi adapter supports it.

If one connection drops, your phone switches between Wi-Fi and the internet on its own, and rejoins by itself after a short drop.

The handshake server. link.evlarsoft.com runs on Cloudflare Workers, so Cloudflare processes it on our behalf (see Subprocessors). It only introduces your phone to your PC by passing along connection-setup messages, which include the devices' network addresses. It never sees what you send, and it stores nothing about you:

• each session room is deleted when it ends: after 2 hours at most, or 10 minutes idle;
• no request logs are kept;
• to limit abuse, it counts requests against a scrambled code that changes daily, not against your address itself;
• it logs only how many requests it turned away, with no addresses;
• it keeps only a hash of each code's key, never the key;
• it keeps daily totals for each app: codes made, pages opened, phones connected and how, and problems shown. Nothing in them identifies a phone, a PC or a person.

Bot check. On the phone page, Cloudflare Turnstile checks in the background that the visitor is not a bot.

Your IP address.Your phone's and your PC's IP addresses are seen in passing while they connect, and are never stored with anything you send. The handshake server sees them to pass along connection-setup messages and to limit abuse, as described above. Cloudflare Turnstile sees your phone's address for the bot check. To find each other, each device also asks a public STUN server, run by Cloudflare or by Google, for its own internet address; that server sees the device's address and nothing else.

Codes and control. A code expires after 2 hours at most. If a phone is connected when that happens, the connection carries on and your PC quietly issues a new code. Only one phone connects at a time, and a new scan takes over. Your PC shows what is connected, by name, and can disconnect it at any time.

Camera images and other captured content. If an application streams camera images, audio or anything else it captures to your phone, it travels over the same encrypted connection directly between your devices, only while the phone page is open. It is never sent to or stored by EvlarSoft: the handshake server accepts only small connection-setup messages and cannot carry it.

What is kept, and where.No content is stored online. What you record or type is saved on your PC. The phone page uses no tracking cookies. It reports how it connected, or which problem it hit, to add to those daily totals, and sends nothing else with it. It remembers only your theme, screen-on and phone-name choices, in your phone's own browser storage. See also EvlarSoft Link.

20Third-party links and services

The Products may link to or integrate with Third-Party Services that we do not control. This policy does not apply to those services, and we are not responsible for their privacy practices. We encourage you to read the privacy notices of any third party you interact with. See also our Affiliate Disclosure.

21Changes to this policy

We may update this Privacy Policy as our Products and legal obligations evolve. When we make material changes, we will update the effective date above and, where appropriate, provide additional notice, such as an email to EvlarSoft One account holders or a notice in the application. Your continued use of the Products after changes take effect means you accept the revised policy.

22Contact us

EvlarSoft, LLC is the controller responsible for your personal information. For any privacy question, to exercise your rights, or to report a concern, email [email protected] or use the contact page.