GDPR

How the Services handle personal data for people in the EU, EEA, and UK.

Last updated: July 15, 2026

1. Who is responsible

Terminus Client is the data controller for the personal data described in our Privacy Policy. Reach us for anything data-related at hello@terminusclient.com. We have not appointed a Data Protection Officer because the scale of what we process does not require one; the same address handles every request.

2. What we process and why

The full inventory lives in the Privacy Policy. Under the GDPR, each part of it rests on a lawful basis:

ProcessingLawful basis
Accounts, purchases, license keys, downloads, supportPerformance of a contract (Art. 6(1)(b))
Device binding, session security context, fraud and abuse preventionLegitimate interest in protecting the Services and enforcing licenses (Art. 6(1)(f))
Anonymous website analyticsLegitimate interest; the data is anonymized at collection and never tied to you
Order records kept after a purchaseLegal obligation to retain financial records (Art. 6(1)(c))
Optional connections such as DiscordConsent (Art. 6(1)(a)); withdraw it by unlinking

We do not use your data for automated decision-making with legal effects, profiling, or advertising.

3. Your rights

If you are in the EU, EEA, or UK, you can:

  • Access the personal data we hold on you (Art. 15)
  • Correct inaccurate data (Art. 16)
  • Erase your data (Art. 17); deleting your account ends your license
  • Restrict or object to processing based on legitimate interest (Arts. 18, 21)
  • Take your data with you in a portable format (Art. 20)
  • Withdraw consent at any time where consent is the basis (Art. 7(3))

Display name, password, and device bindings you can change yourself from the dashboard. For everything else, email us; we answer within a month and verify that requests come from the account holder before acting on them.

4. Where data goes

Our infrastructure and service providers (hosting, payments, email delivery) may process data outside the EEA, including in the United States. Where that happens we rely on the safeguards those providers offer, such as standard contractual clauses. We share data only with the processors listed in the Privacy Policy, never for advertising, and never by sale.

5. Retention

Retention periods are described in the Privacy Policy: account data for the life of the account, order records for as long as financial rules require, rotating diagnostic logs, and analytics only in anonymous aggregate.

6. Complaints

If you think we are handling your data unlawfully, we would rather hear about it first at hello@terminusclient.com. You also have the right to lodge a complaint with your local supervisory authority (Art. 77).