Privacy policy
Last updated: 2026-10-31
This policy explains which personal data Velmar processes when you visit this site, download Velmar Cut, buy a licence, use My licences or write to us. The Velmar Cut program works offline and sends no data to us.
Controller
The controller is Branimir Čavrag, Croatia. For any question about your data, write to us at contact@
Buying a licence
To issue and deliver a licence, we process the licensee's name (a company or a person), the e-mail address, the billing address and country, the VAT or tax number if you enter one, and the order details. The licence text itself contains the licensee's name, e-mail address, country and tax number, because the program displays them. We process this data to perform the contract and to meet our accounting and tax obligations.
Payments
Payments are processed by Stripe. You enter your card details on Stripe's page, and they never reach our server. We receive the payment status, the amounts, the billing details you entered and the VAT calculated by Stripe. Stripe processes data under its own privacy policy and may transfer it outside the EU under appropriate safeguards. When you pay through Stripe, we store the payer's name, company, billing address, country, VAT number and, where the payment page asks for it, phone number with the order or subscription. We keep the records of Support subscriptions in the same way as orders.
Your account and My licences
For your account we store your e-mail address, your password only as a salted hash from which it cannot be read, when the account was created and when you last signed in, and the number of failed sign-ins with a temporary lock after repeated wrong passwords. The links for creating the account and for setting a password work once, we store them only as a hash, and they expire after 24 hours and 60 minutes respectively. Your licences and your Support subscription are matched to the account by the e-mail address. The sign-in cookie lasts until you close the browser or for 8 hours without activity, or for 30 days if you choose to stay signed in. We keep the account until you ask us to delete it; to do so, write to us. Licences and orders are kept as described under How long we keep data.
Downloading Velmar Cut
To send you a download link, we process your name, your company if you enter one, your e-mail address, the language of the page, your IP address and the time of the request. We refuse disposable and temporary e-mail addresses, and we check by a DNS lookup that the domain of the address can receive mail. Only the domain is looked up. For each download we record the file name, the time, the IP address and the browser identification (user agent). We process the request data because it is needed to send the link you asked for. Preventing misuse, checking that the download worked and answering your questions are our legitimate interests. Before the 7-day trial ends, we send you one reminder with its dates, and possibly a second on its last day. The program works offline, so we count the days from the download. The reminder is part of the service you asked for, and it stops once you have bought a licence. Tips during the trial and an offer when it ends are sent only if you tick the box on the download form; this consent can be withdrawn at any time through the link in each of these e-mails, and they stop once you have bought a licence. We send no newsletters and no other marketing e-mails. This data is deleted automatically after 24 months. The download link in a licence e-mail is kept with the licence in the licence register. Downloads made with it are recorded in the same way (file name, time, IP address, user agent), and these download records are also deleted automatically after 24 months.
E-mail and contact
Licences, download links, account e-mails such as links to set your password, and our replies are sent through our e-mail provider. When you write to us, we use your message and e-mail address to reply, and we keep the correspondence for as long as the matter requires.
Server logs
Our web server records technical data about each request (IP address, browser, time and requested address) to keep the site secure and to find faults. These logs are kept for a limited time and are not used for profiling.
Cookies
The site sets only the cookies it needs to work: your language choice, a security cookie that protects forms, and the sign-in cookie of your account. There are no analytics, advertising or tracking cookies and no third-party scripts.
Recipients
We pass data only to the service providers that run the site for us (the hosting and e-mail providers, and Stripe for payments and tax calculation) and to authorities where the law requires it. We do not sell data.
How long we keep data
We keep orders, invoices and payment records for as long as Croatian accounting and tax law requires (currently eleven years). We keep the licence register, with the download link of each licence, for as long as the licences can be used, so that we can send them again. Requests from the download form, their download records and the records of downloads made with a licence download link are deleted automatically after 24 months. Links for creating an account expire after 24 hours, links for setting a password after 60 minutes. We keep your account until you ask us to delete it. Server logs are deleted after a short period.
Your rights
Within the limits of the law, you have the right to access your data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format. You can also lodge a complaint with the Croatian data protection authority (Agencija za zaštitu osobnih podataka, azop.hr) or with the authority in the country where you live.
Changes
We update this policy when our processing changes. The date at the top shows the current version.