Privacy Policy

1. Who we are

Starix PDF is provided by Starix Technology CO., LTD. (“Starix,” “we,” “our,” or “us”), a company registered in Taiwan under unified business number 96825585. The official product contact is service@starix.com.tw.

2. What stays on your device

Opening, viewing, searching, annotating, organizing, OCR, form filling, redaction, signing, exporting and printing are performed locally by the desktop application. Starix does not receive your document contents, document text, filenames or file paths.

The following information may be stored locally on your device:

• Preferences such as theme, language and recent-file paths.
• Saved signature images and certificate settings you choose to configure.
• A signed license cache and a locally generated machine fingerprint used to prevent copying an activation between devices.
• Diagnostic logs, rotated at approximately 10 MB. Logs remain local unless you choose to send them to support.

You can remove this local information by clearing application data or uninstalling the Software, subject to normal operating-system behavior.

3. Account and entitlement data

The 14-day Pro trial requires sign-in with a verified email. To prevent repeat trials, the server records the account identifier, SHA-256 hashes of the normalized email and device fingerprint, and the original start and expiry dates. Removing the app, clearing local data or releasing a device does not reset eligibility. These eligibility records are retained to prevent repeated claims; they contain no PDF contents. Contact service@starix.com.tw for data requests.

When you sign in, sync Pro access, or release a device, the app communicates with our cloud account service. Depending on the action, that request includes:

• Your email address and account identifier.
• A machine fingerprint, platform, app version, and readable device label, used to enforce and display the three-device limit.
• Subscription status received from the payment provider after a purchase, renewal, cancellation, or refund.
• Technical connection data ordinarily visible to an HTTPS service, including IP address and request time.

No PDF content, document filename, path or feature-usage telemetry is sent with account or entitlement requests. The desktop app stores its account session and signed entitlement cache using Windows-protected local storage.

4. Purchases and the merchant of record

Purchases are completed through a payment provider that acts as merchant of record and authorized reseller for Starix PDF. That provider and its payment processors collect the billing, tax, fraud-prevention and payment data required to complete your purchase. Starix does not receive your full payment-card number. Because the provider is the seller of record, the merchant name on your card statement may be theirs rather than Starix; its identity is shown to you at checkout, and we will confirm it on request at service@starix.com.tw.

The provider processes that data under its own privacy policy and checkout buyer terms, which are shown to you at checkout. Data may be processed outside Taiwan as described in those policies.

5. Website analytics and preferences

With your permission, Google Analytics 4 measures public page visits, download button clicks and plan selections. Analytics cookies last up to 180 days; your choice and language preference are stored in your browser. Choose “Essential only” or change “Privacy preferences” at the bottom of the site to stop analytics. Advertising personalization is disabled. Google may process browser, device and connection data outside Taiwan under its privacy policy. We do not send PDF contents, filenames, email addresses, account identifiers, authentication codes or checkout details to Google.

Separately, our server keeps aggregate daily download-request counts and uses existing account trial dates and confirmed payment orders for a private administrator report. These figures do not establish completed downloads, installations or who currently has the app open. The download counter stores no IP address or visitor cookie ID; temporary request IDs for retry deduplication expire after 7 days. Hosting services may still process standard connection logs to deliver and secure the site. When purchase notifications are enabled, Telegram receives the plan, amount, currency, order reference and payment time for our administrator; no customer email or payment-card data is included.

6. Support communications

If you contact support, we receive the information you choose to send, such as your email address, order reference, device details and problem description. Please do not attach confidential PDFs unless support specifically requests a sample and you are authorized to share it.

Support records are retained only as long as reasonably necessary to answer the request, document a refund or activation decision, meet legal obligations and prevent abuse.

7. Legal bases, transfers and retention

We process personal data only where necessary to perform a contract, provide support, comply with law, protect the Software and our users, or pursue a legitimate business purpose that does not override your rights. Where consent is legally required, we will request it separately.

For users in the EEA, the United Kingdom or Switzerland, the specific bases are:

• Performing your contract (GDPR Art. 6(1)(b)) — creating your account, activating and releasing devices, keeping your Pro entitlement in sync, and answering support requests about your licence.
• Complying with a legal obligation (Art. 6(1)(c)) — records we must keep for accounting, tax and consumer-law purposes.
• Legitimate interests (Art. 6(1)(f)) — keeping the service available, preventing abuse of trials and licences, and securing our systems, balanced against your rights.

International transfers. Starix is established in Taiwan, and the cloud account service and payment provider we use operate from the United States and other countries. Personal data of users in the EEA, the UK or Switzerland is therefore transferred outside those areas, and Taiwan is not covered by a European Commission adequacy decision. Where a transfer is not covered by an adequacy decision, it is made under the European Commission’s Standard Contractual Clauses, which form part of the data-processing terms of the providers concerned (with the UK International Data Transfer Addendum where UK GDPR applies). You may request details of the safeguards for a specific transfer at service@starix.com.tw.

How long we keep things. Account and entitlement records are kept while your account exists and for up to 24 months after it is closed, so a licence dispute, chargeback or reactivation can still be resolved. Records we must retain for accounting and tax purposes are kept for the period Taiwanese law requires, which is at least five years. Support correspondence is kept for up to 24 months. Technical connection logs are kept for a short period, normally no more than 12 months, and only for availability and abuse prevention.

8. Your rights

Depending on your location, you may ask to access, copy, correct, delete or restrict the use of personal data, and may object to certain processing. Taiwan’s Personal Data Protection Act also provides rights to review, copy, correct, stop collection or use, and erase personal data.

Where processing rests on your contract or your consent, you may also ask us to provide the data you gave us in a structured, commonly used, machine-readable format, or to send it to another controller where technically feasible. Where we rely on consent, you may withdraw it at any time; withdrawal does not affect processing already carried out.

We do not make decisions about you by automated means that produce legal effects or similarly significantly affect you, and we do not profile you for marketing.

Send requests to service@starix.com.tw. We may need to verify your identity. Deleting an active license record may prevent future validation, so we will explain that effect before completing the request.

If you are not satisfied with how we handle a request, you may complain to a supervisory authority: in the EEA, the data protection authority of the country where you live, work, or where the issue arose; in the UK, the Information Commissioner’s Office; in Switzerland, the Federal Data Protection and Information Commissioner; in Taiwan, the competent authority under the Personal Data Protection Act. You may do this without contacting us first, although we would rather have the chance to put it right.

9. Security and children

We use reasonable administrative and technical measures appropriate to the information we handle, but no system is completely secure. Starix PDF is not directed to children under 13, and we do not knowingly collect personal data from them through the site.

10. Changes and contact

We may update this policy when the product, website, service providers or legal requirements change. The effective date above will be revised, and material changes will be communicated through the site or product where appropriate.

Questions or requests: service@starix.com.tw.