This Privacy Policy explains how Nightlab AB ("Nightlab", "we", "us")
processes personal data in connection with the MultiRec website (multirec.app)
and the MultiRec software. We are the data controller for that processing.
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Aggregate website visit counts; transient server logs (incl. IP address) | Understand traffic, keep the site secure and running | Legitimate interest |
| Purchase details — name, email, billing address, country, VAT ID, amount, order/invoice records | Process your purchase, issue licenses, send receipts/invoices, meet tax & accounting obligations | Contract; legal obligation |
| Payment card details | Handled solely by Stripe; we never see or store full card numbers | Contract |
| Machine fingerprint (a one-way hardware-derived identifier) and, for rentals, periodic online "heartbeats" | Lock a license to a machine and enforce floating rental seats / license terms | Contract; legitimate interest (licensing integrity) |
| App update & pricing checks (your IP and the app version reach our server) | Tell you about updates and show correct prices | Legitimate interest |
| Support messages, your email, and an install/fingerprint identifier used to thread tickets | Answer and track your support requests (in-app and by email) | Contract; legitimate interest |
We use a small number of service providers who process data on our behalf:
We do not otherwise disclose your personal data, except where required by law.
Most processing takes place within the EU/EEA. Where a provider (e.g. Stripe) processes data outside the EEA, it is done under appropriate safeguards such as the EU Standard Contractual Clauses.
Under the GDPR you may request access to, correction or erasure of your personal data, restriction of or objection to processing, and data portability, and you may withdraw consent where processing is based on it. To exercise these rights, contact support@multirec.app. You also have the right to lodge a complaint with the Swedish data protection authority, Integritetsskyddsmyndigheten (IMY), imy.se.
The marketing site does not use advertising or cross-site tracking cookies. The customer portal and the admin area use a single strictly-necessary session cookie to keep you signed in.
We protect data with measures including TLS encryption in transit, cryptographically signed licenses, and restricted access to our systems. No method of transmission or storage is completely secure, but we take reasonable steps to protect your information.
MultiRec is a professional tool and is not directed at children, and we do not knowingly collect personal data from them.
We may update this policy from time to time. The "Last updated" date above reflects the current version, and material changes will be reflected on this page.
Questions about this policy or your data: support@multirec.app.