Privacy Policy

Beckham Enterprises, LLC ("we", "us") is a one-person software company in Vacaville, California. This page describes what our programs and this website collect, why, and who else gets to see it. It is written to be read, not to be survived.

In short

• Your work stays on your computer. Labels, designs, images, spreadsheets you merge from — none of it is uploaded anywhere. LabelVault has no cloud account and no sync. (KeysWalletWatch's optional sync uploads only end-to-end encrypted vaults; see its own policy.)
• LabelVault sends nothing except licence checks. None of our programs has analytics, telemetry or crash reporting built in.
• We never see your card. Payments go through Stripe.
• We do not sell or share personal information, and we do not use it for advertising.

What the programs send, and when

A program contacts our licence service at licenses.beckhamenterprises.com only when it has a reason to: you start a free trial, you enter a licence key, you sign out, or the program re-checks a licence it already has (roughly once a day while it is open). For LabelVault, nothing else goes out, and nothing goes out at all before you start a trial or activate. KeysWalletWatch also checks keyswalletwatch.com for updates and, only if you use them, talks to its sync relay and Have I Been Pwned. Its policy describes exactly what each one sends.

When it does, it sends:

• Your email address, if you are starting a trial or we already have it from a purchase. It is how we mail you your key and how you get it back if you lose it.
• A machine id. This is a one-way hash — sha256 of the product name plus your Windows installation id. The underlying Windows id never leaves your computer, and the hash cannot be turned back into it. We use it to count the computers a licence is on and to stop one computer taking an unlimited number of free trials. The same computer produces unrelated hashes for different products of ours, so the two cannot be linked.
• A machine label — your computer name and Windows username, e.g. SHOP-PC (bob). This exists only so you can tell your machines apart in the licence portal when you want to free up a seat. It is a display label, nothing more.
• The program version and your Windows version, so we can tell whether your licence covers that build and so support questions can be answered.

Our server also records a hashed IP address against licence events. It is hashed together with the date, so it changes every day and cannot be used to follow anyone over time; it exists to rate-limit abuse of the free-trial endpoint.

We do not collect the names of your label files, what is on your labels, what you print, which printers you own, or anything about how you use the program.

What we keep, and for how long

Our licence database holds your email address, the licences issued to it, which machines they are activated on (as the hashes and labels above), and a log of licence events — issued, activated, deactivated, revoked and so on. We keep it for as long as you have a licence with us, because a perpetual licence has to be re-activatable years later, and afterwards as long as we need it for tax and accounting records.

Free-trial records are kept too, including after the trial ends. That is deliberate: it is what stops the same computer taking a new trial every month.

Who else sees it

We use a small number of services, and only for the job named:

• Stripe — payments. You enter your card on Stripe's own checkout page; we never see or store card numbers. Stripe sends us your email address, what you bought, and a customer reference.
• Resend — the emails that carry your licence key and receipts.
• Have I Been Pwned — KeysWalletWatch only, and only when you run a breach check. It receives the first 5 characters of each password's SHA-1 hash, never the password or the full hash.
• Cloudflare — hosting for this website, the licence service and the download files.
• Microsoft — if you install a program from the Microsoft Store, Microsoft handles that download and tells us nothing about you beyond anonymous install counts.

That is the whole list. We do not sell personal information, we do not share it with advertisers, and nobody buys access to our customer list.

This website

The site sets no cookies of its own and has no advertising or cross-site trackers. We use Cloudflare Web Analytics, which is cookieless and reports page counts and referrers in aggregate; it does not build a profile of you or follow you to other sites.

The how-to guides play their videos from our own storage, in your browser's built-in player. No third party is involved and nothing is reported to anyone when you watch one.

Two pages — the LabelVault product page and its video page — embed a YouTube player instead, through youtube-nocookie.com, so YouTube sets nothing until you actually press play. Once you do, YouTube is handling that playback under Google's privacy policy, and we have no control over or visibility into it.

If you send us a message through the contact form, we get your email address and what you wrote, and we use it to reply to you.

Children

These are tools for work. They are not directed at children, and we do not knowingly collect anything from anyone under 13.

Your choices

You can ask us what we hold about you, ask for it to be corrected, or ask us to delete it — just ask, and we will do it within 30 days. Deleting your record means any licence attached to it stops working and cannot be restored, so we will say so before we do it. If you are in California, the EEA or the UK, the rights your law gives you apply here regardless of where we are; we do not charge you for exercising them and we will not treat you differently for it.

You can stop LabelVault contacting us entirely by signing out of your licence, but then it will stop printing, since that is what the licence check is for. KeysWalletWatch without a licence still opens your vault, read-only, and it still asks keyswalletwatch.com whether a newer version exists, once each time you start it and unlock your vault. That request carries only your IP address and the app version, nothing from your vault. Its sync and breach check only ever run if you turn them on.

Security

Traffic to our services is encrypted in transit. Licence keys are stored hashed, with an encrypted copy so support can re-send you the key you already paid for. We hold no card numbers and no account passwords, because we do not have accounts in the usual sense — a licence key is the only credential. If you turn on KeysWalletWatch sync, our relay stores copies of your vault, but only as they leave your PC: already encrypted, with keys that never leave your devices. We cannot open them, and neither could anyone who got into our servers.

Changes

If this policy changes in a way that matters, we will update the date at the top and, for anything significant, say so on the product page. We will not quietly start collecting something this page says we do not.

Contact

Beckham Enterprises, LLC, Vacaville, California, USA — contact us. See also our Terms of Sale and Software License.