Buyer data and erasure
Who is responsible
Your buyers buy from you, not from Licensr. For their personal data you are the controller: you decide to sell to them and what to collect. Licensr is your processor: it stores and uses buyer data only to run licensing for you. Your payment provider (Stripe, Mercado Pago, PayPal or Razorpay) has its own relationship with the buyer for the payment itself.
So a buyer's request to see, correct or erase their data goes to you. Need a data processing agreement with Licensr? Contact us.
What Licensr stores
| Data | Why |
|---|---|
| Email address | Delivering the license key; the customer portal sign-in. |
| Customer portal sign-in account | Created at purchase unless you turned customer accounts off. |
| Device identifiers and labels | Counting activations against the plan's device or website limit. |
| Emails Licensr sent them | Your record of what was sent, and resending a failed email. |
| Payment-provider customer id | Linking renewals, refunds and cancellations to the right license. |
| Raw payment-provider events | Processing payments; deleted automatically after 90 days. |
| Webhook deliveries to your server | Retrying and replaying events; deleted automatically after 30 days. |
Licensr never stores card numbers or bank details; those stay with your payment provider. License keys are stored hashed.
Erase a buyer
Open the customer in Customers and click Erase personal data. Only admins can do this, and it cannot be undone.
- Their email is replaced with an anonymous address, and their customer portal sign-in account is deleted. If the same person also bought from another Licensr seller, that account stays for the other seller.
- Device identifiers and labels are replaced, and their devices are deactivated: the seats are freed, and a device activates again the next time it is used.
- Emails Licensr sent them keep their type and date but lose the recipient and contents.
- Webhook deliveries naming them are deleted, and their email is removed from your activity log.
- Their licenses, payments and subscriptions stay as your sales records, now anonymous. A license they paid for keeps working.
- Their customer id at your payment provider stays on the record, so the provider's later events (a refund, a subscription ending) still match it. The provider keeps the buyer's name and email; erase them there too.
- Their sign-in account is also kept if the email belongs to an admin or invited admin of a Licensr organization.
Erasure is refused while the buyer has a subscription that is still active, trialing or past due, because the payment provider would keep charging them. Cancel it first; the message names the subscription. A subscription the provider already gave up on (never completed, or unpaid) does not block.