What we hold, and what we never see
This describes what the software and this website actually do with information about you. It is short because there is not much of it.
What we never receive
The servers you connect to, the usernames and passwords and SSH keys you connect with, and the files and databases you move. None of it reaches InitCap. The desktop application keeps saved credentials encrypted on your own disk. The browser version holds them for the length of your session and erases them when it ends.
What you give us when you buy
- Your email address, which is also your account and where your licence key is sent.
- Your name, your country for tax on the invoice, and your company if you give one.
- A phone number, only where the payment provider requires one, and only passed to them.
- The order itself: what was bought, when, and for how much.
Card details never arrive here. Payment happens on the payment provider's own page or window, and this site is told only whether it succeeded.
What the application sends when you activate
Three things: the licence key, a fingerprint of the computer, and the version of the application. The fingerprint is a truncated SHA-256 hash of a few machine-scoped values — it is not reversible, and it deliberately excludes network addresses, disk serials and your user name. The licensing service learns that a machine claimed a seat, not which machine or whose.
After that first activation the desktop application does not call us to run. It verifies its own signed licence locally, every time it starts.
If you use the browser version
- An append-only log records sign-in, sign-out, connecting, and files moved or deleted — who, where, when, and whether it worked. It cannot hold a secret: the fields are fixed and the one free-text field is scrubbed.
- To place a server on the map, its public address is looked up through a third-party geolocation service. Private and local addresses are never sent.
- Sessions are held in memory and end when you sign out or the session expires.
Cookies and tracking
One cookie, to keep you signed in. No analytics, no advertising, no trackers, and no fonts or scripts fetched from anyone else — except the payment provider's own script, on the page where you pay, and only there.
Email we send
Licence keys, receipts, password links, and one-time codes when you ask for a lost key. Renewal reminders before a licence runs out. We do not send marketing email and there is no list to leave.
Asking for your data, or its removal
Write to support@initcap.pro and we will send you a copy of what we hold, or delete it. Licence and invoice records have to be kept for accounting, so those survive an account deletion — everything else does not.