Legal

Privacy Policy

This Privacy Policy explains how Farnai handles personal data when you use farnai.com, a Farnai account, licensing services, or Farnai desktop applications.

Effective date: 20 September 2026

1. Who is responsible for your data

Farnai is operated by Fardin Shiraghaei, Italy, who acts as the data controller for the personal data described in this policy.

Privacy contact: farnaiapp@outlook.com

2. Data we collect

Depending on how you use Farnai, we may process:

  • Account data: email address, account identifiers, authentication and session information.
  • License and subscription data: product entitlement, subscription status, plan, trial status, renewal/expiry information, and identifiers used to connect a Farnai account with a payment record.
  • Device and anti-abuse data: a device identifier/hash, device name, device public key, activation status, and verification timestamps used to enforce device limits, protect trials, and prevent license abuse.
  • Support communications: information you provide when you contact us for help or privacy requests.
  • Basic technical data: network and service information that may be processed by our hosting, security, authentication, and payment providers when you connect to Farnai services.

3. Files processed by Farnai Archive Manager

Archive contents and files that you open, compress, extract, encrypt, or otherwise process in Farnai Archive Manager are processed locally on your device. Farnai does not upload those archive contents to Farnai servers as part of normal archive operations.

4. Why we use personal data

  • To create and maintain your Farnai account.
  • To provide trials, subscriptions, licensing, device activation, and offline entitlements.
  • To prevent fraud, repeated trial abuse, unauthorized license sharing, and attacks on our services.
  • To process purchases and maintain subscription records.
  • To provide customer support and respond to privacy requests.
  • To comply with legal, tax, accounting, security, and regulatory obligations where applicable.

5. Legal bases under the GDPR

Where the GDPR applies, we rely on one or more of the following legal bases:

  • Contract: when processing is necessary to provide your account, trial, license, subscription, or requested service.
  • Legitimate interests: to secure Farnai, prevent fraud and abuse, enforce device limits, and improve service reliability, where those interests are not overridden by your rights.
  • Legal obligation: where records must be retained or disclosed to comply with applicable law.
  • Consent: where consent is specifically requested for an optional activity. You may withdraw consent at any time.

6. Service providers

We use carefully selected providers to operate Farnai. These currently include:

  • Supabase for account authentication and backend data storage.
  • Cloudflare for website/API hosting, delivery, and security.
  • Paddle for checkout, payments, subscription billing, tax handling, and related payment records. Paddle acts as merchant of record for purchases processed through Paddle.
  • Microsoft where you obtain Farnai through Microsoft Store or use Microsoft distribution services.

These providers may process data under their own privacy terms and applicable data-processing arrangements. Farnai does not receive or store your full payment-card details when payment is handled by Paddle.

7. International data transfers

Some service providers may process data outside Italy or the European Economic Area. Where required, transfers are made using recognized legal safeguards provided by the relevant service provider, such as adequacy decisions or approved contractual safeguards.

8. Data retention

We keep personal data only for as long as reasonably necessary for the purposes described above, including providing your account and license, maintaining security and anti-abuse records, resolving disputes, and meeting legal or accounting obligations. Retention periods may differ depending on the type of record and applicable law. Data that is no longer needed is deleted or anonymized where appropriate.

9. Cookies and local storage

Farnai may use strictly necessary browser storage or cookies to keep you signed in, maintain account sessions, provide security, and complete requested checkout flows. Third-party checkout services may use their own necessary technologies. Farnai does not currently use advertising cookies or sell personal data to advertisers.

10. Your privacy rights

Subject to applicable law, including the GDPR, you may have the right to:

  • request access to your personal data;
  • request correction of inaccurate data;
  • request deletion of your data;
  • request restriction of processing;
  • object to certain processing based on legitimate interests;
  • receive certain data in a portable format;
  • withdraw consent where processing is based on consent; and
  • lodge a complaint with the competent data-protection authority, including the Garante per la protezione dei dati personali in Italy.

To exercise a privacy right, email farnaiapp@outlook.com. We may need to verify your identity before completing a request.

11. Account deletion and subscription records

You may request deletion of your Farnai account and associated personal data by contacting us. Some transaction, subscription, fraud-prevention, security, or legal records may need to be retained for a limited period where required by law or necessary to establish, exercise, or defend legal claims. Deleting a Farnai account does not automatically cancel an active third-party subscription unless cancellation is also completed through the applicable billing provider.

12. Security

We use technical and organizational safeguards designed to protect Farnai accounts, licensing records, and device-verification data. No method of transmission or storage can be guaranteed to be completely secure, but we work to limit access and reduce unnecessary collection of personal data.

13. Children

Farnai services are not directed to children and are intended for users who can lawfully enter into the applicable software and subscription terms. If you believe a child has provided personal data to us inappropriately, contact us so we can review the situation.

14. Changes to this policy

We may update this Privacy Policy when our products, providers, or legal obligations change. The effective date at the top of this page will be updated when we publish a revised version. Material changes will be communicated where required by law.