← Back to home

Privacy Policy

Wise Owl Software — Version 2026-04-13

This Privacy Policy describes how Wise Owl Software ("Wise Owl", "we", "us") collects, uses, and discloses personal information in connection with the wiseowlsoftware.comwebsite (the "Site") and the Demeanor for .NET software and license services (together with the Site, the "Services"). Wise Owl Software is located at 2405 Vista Mountain Dr, Vista, CA 92084, United States.

1. Information we collect

1.1 Information you provide at purchase

When you purchase an Enterprise subscription, you provide:

  • Company name (the legal Licensee on the license key)
  • Email address (for license delivery and service communication)
  • Billing name and address (collected by Stripe during checkout)
  • Payment instrument (credit card; processed directly by Stripe — Wise Owl does not see or store your full card number, CVC, or expiration date)
  • Agreement to the End User License Agreement (the acceptance event is recorded on the Stripe Checkout Session)

1.2 Information Stripe provides to us

Following a successful purchase, Stripe provides us:

  • A Stripe Customer ID and Stripe Charge ID (tokenized identifiers for the transaction)
  • Billing country (ISO country code) for identity attribution and tax compliance
  • The last 4 digits of the card, card brand, and country of card issuance (for fraud-attribution purposes only)
  • Dispute and chargeback notifications, if any, associated with the transaction

1.3 Information embedded in issued license keys

The license key we issue to you is cryptographically signed and contains: your company name, email, license tier, issuance and expiration dates, a unique license identifier, and the Stripe Customer and Charge IDs associated with the purchase. This allows us to attribute a license key to its purchaser if the key is later leaked, disclosed, or otherwise appears outside authorized use.

1.4 Information collected automatically

When you visit the Site, our hosting provider (Cloudflare) may automatically collect standard log information including IP address, browser type, referring URL, pages visited, and timestamps. This is used for security, abuse prevention, and aggregate analytics. The Site does not use third-party advertising trackers, cross-site tracking cookies, or behavioral profiling.

1.5 Information we do not collect

  • We do not collect telemetry from the Demeanor software running on your build machines. Demeanor validates its license offline; it does not phone home.
  • We do not collect the content, names, or structure of the software you obfuscate with Demeanor. Obfuscation happens entirely on your machine.
  • We do not sell personal information to third parties.

2. How we use personal information

  • To issue, deliver, and support your Demeanor license
  • To process payments, issue receipts, and comply with tax and accounting obligations
  • To communicate with you about your subscription (renewal reminders, security or service notices, support responses)
  • To detect, prevent, and respond to fraud, chargeback abuse, and unauthorized use of the Software, including by identifying the source of a leaked license key via watermark attribution
  • To enforce the End User License Agreement, including by adding compromised license identifiers to a revocation list distributed with future Demeanor releases
  • To comply with law, respond to lawful legal process, and protect the rights and safety of Wise Owl, our customers, and others

3. How we share personal information

We share personal information only with the service providers needed to operate the Services, and only to the extent necessary for them to perform their functions:

  • Stripe, Inc. — payment processing, fraud scoring (Radar), and chargeback handling. Stripe's privacy policy is at stripe.com/privacy.
  • Cloudflare, Inc. — website hosting, DNS, DDoS protection, and the Cloudflare Pages Functions that issue license keys. Cloudflare's privacy policy is at cloudflare.com/privacypolicy.
  • Microsoft Corporation — email delivery via Microsoft 365 Exchange Online for transactional emails (license delivery, billing notices).
  • Legal, regulatory, and enforcement recipients — when compelled by lawful process, or as reasonably necessary to enforce our rights (including license enforcement actions).
  • Successors — in connection with a merger, acquisition, financing, or sale of assets, in which case the successor will be bound to honor the commitments in this Policy.

4. Retention

We retain personal information for as long as needed to provide the Services, to comply with legal and tax obligations (typically at least seven years for financial records under California and federal requirements), to enforce our agreements, and to resolve disputes. Issued license keys and their bound identifiers are retained indefinitely for forensic attribution purposes, because the protection they provide (identifying the source of a leaked key) depends on the attribution record outliving the subscription.

5. Security

We use commercially reasonable administrative, technical, and physical safeguards to protect personal information. Payment card data is handled exclusively by Stripe in a PCI-DSS-compliant environment; we never receive or store full card numbers, CVCs, or expiration dates. Personal information stored on our infrastructure (Cloudflare KV) is protected by account-level authentication and access controls. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

6. California privacy rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act gives you the following rights with respect to personal information we hold about you:

  • Right to know — you may request that we disclose the categories of personal information we have collected about you, the sources, the purposes, the categories of recipients, and the specific pieces of personal information we hold.
  • Right to delete — you may request that we delete personal information we have collected from you, subject to exceptions including our need to complete a transaction, comply with a legal obligation, or exercise or defend legal claims (including license-enforcement claims).
  • Right to correct — you may request that we correct inaccurate personal information we hold about you.
  • Right to opt out of sale or sharing — we do not sell personal information and do not share it for cross-context behavioral advertising, so there is nothing to opt out of. We will honor "Global Privacy Control" signals in any case.
  • Right to limit use of sensitive personal information — we do not use sensitive personal information for purposes beyond those reasonably necessary to provide the Services.
  • Right to non-discrimination — we will not deny, degrade, or price our Services differently because you exercised any of the above rights.

To exercise any of these rights, email[email protected]from the email address on file with your account, or write to Wise Owl Software at the address in Section 10. We will verify your identity before responding to any verifiable consumer request. Authorized agents may submit requests on your behalf with written authorization and verification of identity.

6A. EU, UK, EEA, and Swiss residents (GDPR / UK GDPR)

If you are located in the European Union, the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR"), the United Kingdom General Data Protection Regulation ("UK GDPR"), and/or analogous Swiss law give you additional rights.

6A.1 Controller

Wise Owl Software is the controller of your personal data for the purposes of the GDPR and UK GDPR. Contact details are in Section 10. Wise Owl Software's processing of personal data of EU, EEA, and UK data subjects is occasional, does not include processing, on a large scale, of special categories of data or of personal data relating to criminal convictions and offences, and is unlikely to result in a risk to the rights and freedoms of natural persons; accordingly Wise Owl Software does not appoint a representative in the Union or the United Kingdom under Article 27(2)(a) GDPR and the corresponding UK GDPR provision. This position will be reassessed if the nature or scale of our processing changes.

6A.2 Lawful basis for processing

We rely on the following lawful bases under Article 6 GDPR:

  • Performance of a contract (Art. 6(1)(b)) — to issue, deliver, and support your Demeanor license and to process payments.
  • Legal obligation (Art. 6(1)(c)) — to comply with tax, accounting, consumer-protection, anti-money-laundering, and other legal obligations.
  • Legitimate interests (Art. 6(1)(f)) — to detect and prevent fraud and chargeback abuse, to enforce our End User License Agreement, to secure our systems, and to identify the source of leaked license keys via watermark attribution. We have assessed these interests against the rights and freedoms of data subjects and believe the processing to be proportionate; you may object as described in Section 6A.4.
  • Consent (Art. 6(1)(a)) — where specifically requested, for example for marketing communications (none are sent as of the date of this Policy).

6A.3 International transfers

Wise Owl Software is located in the United States and uses service providers (Stripe, Cloudflare, Microsoft) that may process personal data in the United States and other jurisdictions. Where personal data is transferred from the EU, EEA, UK, or Switzerland to the United States, transfers are made pursuant to appropriate safeguards under Articles 45–49 GDPR, including the Standard Contractual Clauses adopted by the European Commission (with the UK International Data Transfer Addendum where applicable, and the Swiss equivalent for Swiss data) included in our agreements with these service providers, or to recipients self-certified under the EU–U.S. Data Privacy Framework, the UK Extension, and the Swiss–U.S. Data Privacy Framework as applicable.

6A.4 Your rights under GDPR / UK GDPR

Subject to the conditions and exceptions in applicable law, you have the right to:

  • access the personal data we hold about you (Art. 15);
  • request correction of inaccurate personal data (Art. 16);
  • request erasure ("right to be forgotten", Art. 17);
  • request restriction of processing (Art. 18);
  • receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller (portability, Art. 20);
  • object to processing based on legitimate interests (Art. 21);
  • withdraw any consent you have previously given at any time, without affecting the lawfulness of processing based on consent before its withdrawal (Art. 7(3));
  • not be subject to a decision based solely on automated processing that produces legal or similarly significant effects (Art. 22) — we do not engage in such processing;
  • lodge a complaint with your local data-protection supervisory authority, such as the UK Information Commissioner's Office (ico.org.uk) or the supervisory authority in your EU member state.

Certain rights, particularly the right to erasure, are subject to our overriding legitimate interests in enforcing the End User License Agreement, maintaining forensic attribution of issued license keys, and operating the revocation-list mechanism described in Section 2. Where such interests apply, we will balance your request against these interests in accordance with Article 17(3) GDPR and respond accordingly.

6A.5 Retention

See Section 4. Financial and license-attribution records are retained for the periods required by applicable law and for as long as reasonably necessary to enforce the End User License Agreement, consistent with the storage-limitation principle (Art. 5(1)(e) GDPR).

6A.6 Requests

To exercise any GDPR or UK GDPR right, email[email protected]. We will respond within one month of receipt as required by Article 12(3) GDPR, subject to any permitted extension for complex or numerous requests. We may need to verify your identity before responding.

7. Do Not Track and Global Privacy Control

The Site does not use cross-site behavioral tracking and does not respond specifically to browser "Do Not Track" headers. The Site will honor the Global Privacy Control (GPC) signal as an opt-out of any personal-information sharing for advertising purposes, though as noted above we do not engage in such sharing.

8. Children

The Services are not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided personal information to us, please contact us and we will delete the information.

9. Changes to this Policy

We may update this Policy from time to time. The version identifier at the top of this page will be updated when changes are made. Material changes will also be communicated via email to active Enterprise subscribers. Continued use of the Services after changes become effective constitutes acceptance of the updated Policy.

10. Contact

Wise Owl Software
2405 Vista Mountain Dr
Vista, CA 92084
United States
Privacy requests: [email protected]
General: [email protected]

Privacy Policy version 2026-04-13.