Privacy Policy

Last updated: January 2026

1. Who We Are

Steadfast Tools is operated by Steadfast Codeworks, a sole proprietorship founded by Rudi Burger, based in South Africa. We comply with the Protection of Personal Information Act (POPIA) and applicable international privacy laws.

2. Information We Collect

Account data: Name, email address, and hashed password when you register.

Payment data: Processed by Lemon Squeezy. We do not store credit card numbers.

License data: Server IP address and hostname hash for license verification.

Usage data: Server logs (IP address, user agent, timestamps) for security and analytics.

Support data: Information you provide in support tickets and contact forms.

3. How We Use Your Information

  • To provide and maintain our services and software licenses
  • To process payments and manage subscriptions
  • To verify license compliance via server fingerprinting
  • To respond to support requests
  • To send product updates, security alerts, and (with consent) marketing
  • To detect and prevent fraud and abuse

4. License Verification

BotSurgeon Pro performs a daily heartbeat check to license.steadfasttools.com/verify, transmitting: the license key, server IP address, and a hostname hash. This data is used solely for license compliance verification. No customer data, server content, or personal files are transmitted.

5. Data Sharing

We do not sell or rent your personal information. We share data only with:

  • Lemon Squeezy: Payment processing
  • Hetzner: Server hosting (data processing agreement in place)
  • Law enforcement: When required by law or to protect our rights

6. Data Security

We implement industry-standard security measures including: encrypted communications (TLS), hashed passwords (bcrypt), two-factor authentication, and regular security audits. No system is 100% secure, but we take security seriously — it's what we do.

7. Data Retention

Account data is retained while your account is active. Upon account deletion, personal data is removed within 30 days. License verification logs are retained for 90 days. Financial records are retained as required by South African law.

8. Your Rights

Under POPIA and GDPR (where applicable), you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Object to processing of your data
  • Export your data in a portable format

To exercise these rights, contact support@steadfasttools.com.

9. Cookies

We use essential cookies for session management and authentication. We do not use third-party tracking cookies. Analytics are self-hosted.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date.

11. Contact

Privacy concerns? Contact us at support@steadfasttools.com.