Privacy notice

The data controller is Netha, a company based in France. This means Netha determines why and how your personal data is processed in connection with the MAClens service.

• Account data: name, email address and login credentials when you create an account.
• Support messages: the content of conversations when you contact us.
• Usage data: technical logs, MAC addresses submitted to the tool or API, request counters.
• Technical data: IP address, device and browser type, API key identifiers.

Payment data (card details, billing) is collected and processed directly by Paddle, our Merchant of Record; we do not have access to it.

• Providing the service (account creation, API access, quota enforcement) — performance of a contract.
• Security and fraud prevention (logs, rate limiting) — legitimate interests.
• Product improvement (aggregated usage statistics) — legitimate interests.
• Customer support — performance of a contract.
• Marketing communications, where applicable — consent, which you can withdraw at any time.
• Legal obligations (accounting, tax) — legal obligation.

• Service providers: hosting, analytics and support tooling, limited to what is necessary.
• Paddle, our Merchant of Record: for the sale of the product, subscription management, payments, tax compliance and invoicing.
• Professional advisers (legal, accounting), when necessary.
• Authorities, where required by law.

Where data is transferred outside the European Union, we ensure it benefits from appropriate safeguards (European Commission standard contractual clauses or an adequacy decision).

We keep your data for as long as needed for the purposes described: account data is kept while your account is active, then deleted or anonymised; technical logs are kept for a few months; billing data is kept for the retention periods required by French accounting and tax law. When data is no longer needed, it is deleted or anonymised.

Under the GDPR, you have the following rights: access, rectification, erasure, restriction of processing, portability, objection, and withdrawal of consent at any time. We respond to any request within one month. To exercise your rights, contact us from the My account page.

You can also lodge a complaint with the CNIL (cnil.fr), the French data protection authority.

We implement appropriate technical and organisational measures: encrypted connections (HTTPS), hashed API keys, and strict access controls on our systems.

The site only uses technical cookies and storage strictly necessary for it to work (login session, language preference). No advertising or third-party analytics cookies are set. If this changes, this notice will be updated and your consent will be collected.