Privacy Policy

Ridge Labs (“Ridge
Labs”, “we”, “us”, or “our”) develops and sells software
plugins for Autodesk products through our website, ridge-labs.net (the “Site”). This
Privacy Policy describes the data we collect through our Site and our plugins (the “Services”),
how we collect and use that data, the third parties we share it with and why, how long we keep it,
and the rights you have over it.

1. Information We Collect

We collect the following
categories of information:

• Account and contact information. When
you create an account, purchase a license, or contact us, we collect your name, email address,
company name, and country.
• License and activation data. Information
needed to issue, activate, and manage your plugin license, including your license key, license type,
purchase date, and activation status.
• Hashed machine identifier. To bind a
license to a specific computer, our plugin computes a SHA-256 hash of the machine’s BIOS
serial number. This hash is computed locally on your device, is one-way and non-reversible, and
cannot be used to recover the underlying serial number. The plugin does not transmit this hash
automatically; you send it to us yourself as part of the activation process (see Section 2).
• Payment information. Payments are
processed by our payment provider, Kashier. We do not collect or store your full card details; we
receive payment confirmation and basic transaction details from Kashier.
• Usage and diagnostic logs. Our plugins
may generate local log files to help diagnose problems. These logs are collected by us only if you
choose to share them with our support team.
• Website analytics. Our Site uses Google
Analytics, which collects information such as pages visited, approximate location, device and
browser type, and referral source through cookies and similar technologies.
• Support correspondence. When you contact
us by email or other channels, we collect the contents of your messages and any attachments you
provide.

2. How We Collect Information and
How We Use It

How we collect it. We collect information
directly from you when you fill in forms on the Site, make a purchase, or correspond with our
support team. The hashed machine identifier is generated locally on your computer by the plugin and
is sent to us manually by you (for example, by email or through the activation form) — it is
not transmitted automatically by the plugin. Website analytics data is collected via Google
Analytics cookies when you browse the Site. Payment confirmations are sent to us by Kashier when you
complete a purchase.

How we use it. We use the information described
above to: create and manage your account; process payments and deliver license keys; activate
licenses and bind them to your machine using the hashed machine identifier; verify license validity
and prevent unauthorized use; provide technical support and respond to your requests; diagnose and
fix problems in our plugins (where you have shared diagnostic logs); understand how our Site is used
and improve our Services; and comply with legal, tax, and accounting obligations.

We do not sell your personal data, and we do not use your data for third-party advertising.

3. Third Parties We Share Data
With

We share personal data
only with the service providers below, only for the purposes stated, and only to the extent
necessary:

• Kashier — payment processing.
Kashier receives the information needed to process your payment and sends us confirmation of
completed transactions.
• Hostinger — website hosting, DNS,
and email services. Data stored on or transmitted through our Site and email accounts is processed
on Hostinger infrastructure.
• Google Analytics (Google LLC) —
website analytics. Google processes usage data collected from the Site through cookies on our
behalf.

We do not share your data with any other third parties, except where required by law or to protect
our legal rights.

4. Data Retention

We keep personal data
only as long as needed for the purposes described above:

• License and billing records: for the
duration of your active license, plus 7 years thereafter to meet legal, tax, and accounting
requirements.
• Hashed machine identifiers: for the
duration of your active license; if the license expires and is not renewed, the hash is deleted
within 12 months after expiry.
• Support emails and correspondence: 3
years from the date of the last communication.
• Website analytics data: retained
according to Google Analytics’ default retention settings (approximately 14 months).

5. International Data
Transfers

Ridge Labs is based in
Egypt. Depending on the service providers involved, your data may be processed in Egypt, the United
States, or the European Union (for example, on Hostinger hosting infrastructure or Google Analytics
servers). Where personal data is transferred internationally, we rely on appropriate safeguards,
such as our providers’ standard contractual clauses and equivalent contractual protections, to
ensure your data remains protected.

6. Your Rights under GDPR
(EU/UK)

If you are located in the
European Economic Area or the United Kingdom, you have the following rights under the General Data
Protection Regulation (GDPR) and UK GDPR:

• the right to access the personal data we
hold about you;
• the right to rectification of inaccurate
or incomplete data;
• the right to erasure (“right to be
forgotten”), subject to our legal retention obligations;
• the right to restrict processing in
certain circumstances;
• the right to data portability —
receiving your data in a structured, commonly used, machine-readable format;
• the right to object to processing based
on legitimate interests;
• the right to withdraw consent at any
time, where processing is based on consent, without affecting the lawfulness of prior processing;
and
• the right to lodge a complaint with your
local data protection supervisory authority.

7. Your Rights under CCPA/CPRA
(California)

If you are a California
resident, you have the following rights under the California Consumer Privacy Act (CCPA), as amended
by the California Privacy Rights Act (CPRA):

• the right to know what personal
information we collect, use, and disclose about you;
• the right to access a copy of your
personal information;
• the right to correct inaccurate personal
information;
• the right to delete your personal
information, subject to legal exceptions;
• the right to opt out of the sale or
sharing of personal information — note that Ridge Labs does not sell or share
personal information as defined by the CCPA/CPRA; and
• the right to non-discrimination for
exercising any of these rights.

8. How to Exercise Your
Rights

To exercise any of the
rights described above, email us at info@ridge-labs.net. We may need to verify your identity before
acting on your request. We will respond within 30 days of receiving your request.

9. Children’s Privacy

Our Services are not
directed at anyone under the age of 18, and we do not knowingly collect personal data from children.
If you believe a child has provided us with personal data, please contact us at info@ridge-labs.net
and we will delete it.

10. Data Security

We use industry-standard
technical and organizational safeguards to protect your personal data against unauthorized access,
alteration, disclosure, or destruction, including encrypted connections (HTTPS), access controls,
and secure hosting infrastructure. No method of transmission or storage is completely secure, but we
work to protect your data using measures appropriate to the risk.

11. Changes to This Policy

We may update this
Privacy Policy from time to time. When we do, we will post the revised version on this page and
update the effective date at the top. Material changes will be communicated through the Site or by
email where appropriate. We encourage you to review this page periodically.

12. Contact

If you have any questions
about this Privacy Policy or how we handle your data, contact us at:

Email: info@ridge-labs.net
Website: ridge-labs.net