Privacy policy

Last updated: 19 October 2026

Who we are

EnneAgraM is made by Murat Tutu (EnneAgraM DSP), Türkiye. Murat Tutu is responsible for the personal data described here (data controller). Contact: support@enneagramdsp.com.

What we collect

• Purchases. The full version is sold through Gumroad, which handles the checkout and the payment. Gumroad gives us your email address, your name if you entered one, your license key and the order details; we never see your card details.
• License activation. When you activate a computer at enneagramdsp.com/activate, we check your license key with Gumroad and store a fingerprint of the key (a one-way SHA-256 hash, not the key itself) together with the machine codes of the computers you activated, at most two. A machine code is a short one-way code computed from your computer’s hardware ID; it can’t be turned back into that ID. The license text you receive contains your email address and that machine code.
• Mailing list. If you fill in the “Stay in the loop” form we store your email address and your choice of news (sign-ups before 19 October 2026 asked for the full-version announcement, and those before 18 October 2026 also stored a Mac-interest choice). We first send one email asking you to confirm your address; you are only added once you confirm. Our newsletter provider also records the time and the IP address of the sign-up and the confirmation, as proof of your consent.
• Emails you send us. Your email address and what you write, including anything you attach (feedback, bug reports, support requests).
• Visiting the website. Like any web server, our hosting provider processes your IP address and basic request data to deliver the pages and downloads and to protect the site against abuse. We don’t use analytics, advertising or tracking cookies.
• The plugin itself does not send anything over the internet. Its “Send Feedback” and “Send Bug Report” items only open your own email program.

Why we use it, and on what basis

• To sell you the full version, deliver and activate your license, move an activation when you replace a computer, and answer support requests — to perform our contract with you (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)).
• To send you news about new versions and preset banks — based on your consent (GDPR Art. 6(1)(a); explicit consent under KVKK). You can withdraw it at any time with the unsubscribe link in every email or by writing to us.
• To answer and act on your emails — because you asked us to (GDPR Art. 6(1)(b) and (f); KVKK Art. 5(2)).
• To deliver and secure the website and the demo download — our legitimate interest in running the site (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).

We don’t sell your data or share it with anyone for marketing.

Who processes it for us

• MailerLite — keeps the mailing list and sends the newsletter.
• Zoho Mail (EU data centre) — receives and sends our support emails. Emails from before 15 October 2026 were handled with Google Gmail.
• Gumroad — sells the full version and processes payments.
• Cloudflare — serves the website and the downloads, and runs the activation service that stores the activation records.

These providers may store or process data outside Türkiye and the European Union, for example in the United States, under their own safeguards for international transfers.

How long we keep it

Activation records: as long as your license is valid, because we need them to keep to the two-computer limit and to move activations. Order details: as long as the law requires for accounting. Mailing-list data: until you unsubscribe or ask us to delete it. Emails: as long as needed to handle your request and keep a record of it. Hosting logs are kept by the hosting provider under its own retention rules.

Your rights

You can ask to see, correct or delete your data, to restrict or object to its use, to receive a copy of it, and to withdraw your consent at any time (GDPR Articles 15–21; KVKK Article 11). Write to support@enneagramdsp.com. You can also complain to a data-protection authority — in Türkiye the Personal Data Protection Authority (KVKK), in the EU the supervisory authority of your country.

Changes

If this policy changes, we update this page and the date at the top.