Privacy policy
What we hold, why we hold it, and the rather larger list of things we do not. Effective 10 August 2026.
The short version
- Your documents never leave your machine. Rendering, barcode reading, splitting and filing all happen locally.
- We hold your email address, your purchase records and which machines hold seats. That is essentially it.
- The website has no cookies, no analytics and no third-party scripts. Nothing to consent to, because nothing is tracking you.
- We have never sold personal information and never will.
Who we are
sQRted is made by Sugata Software, Australia. We are responsible for the personal information described here. Contact us any time at support@sqrted.com.
What we collect
| What | Why |
|---|---|
| Email address | Seats are attached to it. We use it to send your verification code, your receipt, and replies to your support emails. |
| Machine fingerprint | A one-way SHA-256 value derived from your Windows installation ID and computer name, truncated. It ties a seat to a machine so a seat cannot be used on more machines than you bought. It cannot be reversed, and it tells us nothing about the machine, its contents or who uses it. |
| Purchase records | Edition, quantity, amount, currency, the Stripe session reference and the date. Needed to know what you own, and for our tax records. |
| Registration records | Which seat is on which machine, when it was claimed, when it last confirmed, and when it was released. This is what makes seats transferable between machines. |
| Verification codes | Only a hash of the code, never the code itself, deleted once used and expiring after 30 minutes. |
| Support emails | If you email us, we keep the conversation so we can help you and remember the context next time. |
What we never collect
This list matters more than the one above, so it is worth being specific.
- The contents of your documents. Scans are rendered and read entirely on your machine.
- Your file names, folder paths or destination roots.
- The barcode values in your documents, which is to say the identifiers your business runs on.
- Run logs and history. These are written beside your source folders and stay on your machine.
- Usage analytics, feature tracking, telemetry, crash reports or heat maps. There is no such code in the product.
- Your name, address or phone number. We never ask for them.
- Your card details. See payments below.
The website
sqrted.com sets no cookies, runs no analytics, and loads no third-party scripts, fonts or images. Every asset comes from our own domain. There is no consent banner because there is nothing to consent to.
Our hosting provider, Cloudflare, processes standard server log information such as IP address, request time and browser user agent, for delivering the site and protecting it from attack and abuse. We use this only in aggregate and to investigate abuse, and we do not use it to build a profile of you.
What the app talks to
Day to day filing is entirely offline. The app makes outbound requests only in the five situations below, and none of them sends anything about your documents:
| When | What is sent |
|---|---|
| Checking for an update | A plain request for our version manifest at sqrted.com. It sends no information about you or your machine beyond what any web request necessarily reveals, such as your IP address. |
| Claiming a seat | To our licence service at api.sugata.com.au: your email address, the six digit code you were sent, the machine fingerprint, and which edition you chose if you hold both kinds. |
| The monthly check-in | The seat identifier, its counter and the machine fingerprint. No email address is sent. |
| Releasing a seat | The seat identifier and the machine fingerprint. |
| Buying seats inside the app | Your email address, the edition and how many seats, so we can create the Stripe checkout that then opens in your browser. |
If the machine has no internet connection at all, sQRted still files documents. Only claiming or releasing a seat requires the network.
Payments
Payments are processed by Stripe, which acts as merchant of record. Your card number and billing details are entered on Stripe's checkout and go to Stripe, not to us. We never see, hold or store card details.
We receive back only what we need to credit your seats: the email address used, what was bought, the amount, and a Stripe reference for the transaction. Stripe handles your payment information under its own privacy policy.
Where it is stored
Our licence service and its database run on Cloudflare, and support email is handled through Cloudflare Email Routing and Google Workspace. This means your information may be stored or processed outside Australia, including in the United States. We rely on these providers' contractual and technical protections, and we keep the amount of information we hold deliberately small.
We do not sell personal information, and we do not share it with anyone except the providers named on this page who need it to deliver the service, or where the law requires it.
How long we keep it
- Purchase records: seven years, because Australian tax law requires us to keep financial records for that long.
- Registration records: for as long as the seat exists, since they are what make it transferable. Released activations are kept as history.
- Verification codes: 30 minutes, or until used. Expired codes are deleted automatically.
- Support emails: generally three years, so we have context if you come back.
Your rights
You can ask us to show you what we hold about you, correct it, or delete it. Email support@sqrted.com and we will respond within 30 days. There is no charge.
One honest limit: we cannot delete purchase records we are legally required to keep for tax purposes, and deleting your registration records will release any seats currently in use. We will tell you before doing anything that would affect a licence you paid for.
If you are in the United Kingdom or the European Economic Area, you also have the rights given by the UK GDPR and the GDPR, including data portability and the right to object. Our lawful basis for holding the information above is performance of our contract with you, and our legitimate interest in preventing licence abuse.
Complaints
If you think we have mishandled your information, please tell us first at support@sqrted.com so we can put it right. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au, or to your local data protection authority if you are in the UK or the EEA.
Changes
If we change this policy we will update the effective date at the top. If a change materially affects what we collect or how we use it, we will email people who hold seats rather than quietly editing the page.