Privacy Policy

1. Introduction

ASN Lab (“we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information when you use our website (asnlab.org) and services.

2. Information We Collect

2.1 Purchase Orders

When you place a purchase order through our website, we collect the following information:

  • Contact Information: Full name, email address, company name, and phone number.
  • Billing Address: Physical address and postal/ZIP code.
  • Product Selection: The compiler licenses you select (C, C++, Java, C#, Go).
  • Payment Information: Your payment is processed by Stripe, our third-party payment processor. We do not store your full credit card or payment method details. Stripe provides us with a session identifier and payment status.

2.2 Free Trial Requests

When you request a free 30-day evaluation license, we collect:

  • Full name
  • Job title
  • Work email address
  • Company or organization name
  • Phone number (optional)
  • Product of interest (C, C++, Java, C#, Go)

2.3 License Usage

When you compile an ASN.1 project using a licensed compiler, the following information may be transmitted to our licensing server for license validation and envelope signing:

  • Certificate serial number
  • Product identifier
  • Machine fingerprint (optional)
  • Client IP address

3. How We Use Your Information

3.1 Purchase Processing

  • Creating and managing your customer account and order records.
  • Issuing and managing license certificates and associated PKCS#12 credential files.
  • Generating time-limited download tokens for license delivery.
  • Sending license credentials and instructions to your email address.
  • Communicating with you about your order status.

3.2 Free Trial Processing

Free trial requests are processed ephemerally. We generate a 30-day trial certificate and send it to your email address. We do not persist free trial request data to our database — no customer record, order record, certificate record, or license file record is created for free trial requests.

3.3 License Validation

Compilation logs (certificate serial number, product ID, machine fingerprint, client IP) are collected for license validation and anti-piracy purposes. These logs are used to verify that licenses are not being used beyond their authorized scope.

3.4 Communication

We may use your email address to:

  • Deliver license files and download instructions.
  • Send order confirmations and status updates.
  • Respond to your support inquiries.

4. Data Storage and Retention

4.1 Purchase Data

Purchase-related data (customer information, order records, certificate records, and license files) is stored in our database and retained for the duration of your license validity plus a reasonable period thereafter for legal and accounting purposes.

4.2 Free Trial Data

Free trial request data is not persisted in our database. The information is used solely to generate and deliver your trial license and is discarded after the email is sent.

4.3 Compilation Logs

Compilation logs are retained for the duration of the associated license validity period for audit and compliance purposes.

5. Third-Party Services

5.1 Stripe (Payment Processing)

We use Stripe to process payments for license purchases. When you place an order, your payment information is transmitted directly to Stripe. Stripe’s use of your personal information is governed by their own privacy policy, available at stripe.com/privacy.

5.2 Email Delivery

We use SMTP-based email delivery to send license files and communications. Emails are sent from noreply@asnlab.org.

6. Data Sharing

We do not sell, rent, or trade your personal information. We may share your information only:

  • With third-party service providers (such as Stripe and our email infrastructure) as necessary to provide our services.
  • When required by law or to respond to legal process.
  • To protect our rights, property, or safety, and that of our users.

7. Security

We implement reasonable technical and organizational measures to protect your personal information:

  • License certificates are issued using RSA-4096 cryptography.
  • Admin API endpoints are protected by API key authentication.
  • Customer database access is restricted to authorized personnel.
  • PKCS#12 files are password-protected with randomly generated credentials.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data.
  • Object to or restrict certain processing activities.
  • Data portability.

To exercise any of these rights, please contact us at the email address below.

9. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

Last updated: July 2025