Privacy Policy — Pegas Tools

This Privacy Policy explains how VIKKY UNIPESSOAL LDA (“Pegas Tools”, “we”, “our”, or “us”) collects, uses, and protects personal data when you visit www.pegastools.com or purchase our software products. We are committed to protecting your privacy in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Portuguese data protection law.

1. Data Controller

VIKKY UNIPESSOAL LDA
Rua 13 de Junho, No. 35, Oia, 3770-054 Oliveira do Bairro, Portugal
Email: vikky.corp@gmail.com
Phone: +351 938 464 702

2. What Personal Data We Collect

  • Account and purchase data: name, email address, billing address, country, and payment reference when you place an order.
  • Technical data: IP address, browser type, operating system, pages visited, and session duration collected via server logs and analytics.
  • Support communications: messages you send to our support email, including any attached files.
  • Cookies: session cookies required for shopping cart functionality, and optional analytics cookies (see Section 7).
  • Account Manager data: when you use Pegas Account Manager (the desktop component bundled with our Fusion 360 add-ins), your email address and the slug (identifier) of installed add-ons are sent to api.pegastools.com solely to validate your licence and issue free licences for free products. We do not collect machine fingerprints, usage analytics, file contents, or behavioural telemetry.

3. Legal Basis for Processing

  • Contract performance (Art. 6(1)(b) GDPR): processing your order, delivering your purchased product, and issuing invoices.
  • Legal obligation (Art. 6(1)(c) GDPR): retaining invoices and transaction records as required by Portuguese tax law (CIRS/CIRC) for a minimum of 10 years.
  • Legitimate interest (Art. 6(1)(f) GDPR): fraud prevention, security monitoring, and improving our products.
  • Consent (Art. 6(1)(a) GDPR): analytics cookies and marketing communications, only where you have explicitly opted in.

4. How We Use Your Data

  • Process and fulfil your purchase and deliver the software or license key.
  • Send order confirmation, invoice, and download instructions by email.
  • Respond to support requests and technical questions.
  • Comply with VAT reporting and accounting obligations under Portuguese and EU law.
  • Detect and prevent fraudulent transactions.
  • Improve website performance and user experience (analytics, aggregated and anonymised where possible).

5. Data Sharing and Third Parties

We do not sell your personal data. We may share data with the following categories of processors solely to fulfil your order:

  • Payment processors (e.g. Stripe, PayPal) — to handle payment transactions securely. Their own privacy policies apply to payment data.
  • Email service providers — to deliver transactional emails (order confirmations, invoices).
  • Hosting provider — server infrastructure located in the EU.
  • Tax and accounting software — for invoice generation and VAT compliance.

All third-party processors are bound by data processing agreements compliant with GDPR Article 28.

6. Data Retention

  • Order and invoice data: retained for 10 years as required by Portuguese tax law.
  • Support communications: retained for 3 years after the last interaction.
  • Analytics data: retained for a maximum of 26 months, then automatically deleted.
  • Account data: retained until you request deletion, subject to legal retention obligations.

7. Cookies

We use the following types of cookies:

  • Strictly necessary cookies: required for the shopping cart and checkout to function. These cannot be disabled without breaking core site functionality.
  • Analytics cookies: used to understand how visitors use our site. Only set with your consent. You may withdraw consent at any time by clearing your browser cookies.

8. Your Rights Under GDPR

As a data subject in the European Union, you have the following rights:

  • Right of access (Art. 15): request a copy of the personal data we hold about you.
  • Right to rectification (Art. 16): request correction of inaccurate or incomplete data.
  • Right to erasure (Art. 17): request deletion of your data, subject to legal retention obligations.
  • Right to restriction (Art. 18): request that we limit how we use your data.
  • Right to data portability (Art. 20): receive your data in a machine-readable format.
  • Right to object (Art. 21): object to processing based on legitimate interests.
  • Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting prior processing.

To exercise any of these rights, contact us at vikky.corp@gmail.com. We will respond within 30 days. If you believe your rights have been violated, you have the right to lodge a complaint with the CNPD (Comissao Nacional de Protecao de Dados) at www.cnpd.pt.

9. International Transfers

All personal data is processed within the European Economic Area (EEA). Where a processor operates outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The current version is always available on this page. Material changes will be communicated by email to registered customers. Last updated: June 2026.