Privacy policy

Last updated: 10 September 2026

This policy explains which personal data we process when you visit the TrueNest store, buy or try TrueNest Pro, use the software or contact us, why we process it, for how long, and what your rights are. It exists in French and in English; if the two versions differ, the French version prevails.

1. Who is responsible

The controller is LECALINA, société par actions simplifiée (SAS), 33 impasse des Lilas, 83560 Saint-Julien, France, SIREN 894 129 592, trading as TrueNest ("we"). For any question about your data, or to exercise your rights, write to support@gettruenest.com.

Our customers are businesses. This policy concerns the people whose data we process in that context: the person who places the order, the staff who use TrueNest Pro, and visitors of the store.

2. Orders, payments, subscriptions and customer account

Data: company name, first and last name, e-mail address, billing address, phone number and VAT number if you give them, order details (plan, price, taxes, dates), subscription status and billing dates, customer account details, and limited payment information (such as the card type and its last four digits). Your full card number is handled by Shopify Payments and its payment partners and is never sent to us. When you use the store, Shopify also collects technical data, such as your IP address and browser information, to secure checkout and prevent fraud.

Why: to process your order and payments, renew and manage your subscription, give you access to your customer account, issue invoices, answer your questions about your orders, and prevent fraud.

Legal basis: performance of the contract; our legal obligations for invoicing and accounting; our legitimate interest in preventing fraud.

How long: for the duration of our business relationship, then 5 years (limitation period for commercial claims). Invoices and accounting records are kept for 10 years from the end of the financial year, as required by the French Commercial Code.

3. Licence keys and activations

TrueNest Pro uses a licence server to deliver licence keys and to check how many computers use each key.

Data stored on the licence server:

  • the e-mail address of the order;
  • the licence key;
  • the plan or plans, the number of computers allowed and the validity dates;
  • an identifier for each computer on which the key has been activated;
  • the references of the store orders linked to the licence, and the date each one was processed;
  • whether the licence comes from a free trial, and the length of the trial;
  • the date and type of the last licence e-mail sent;
  • whether the licence has been deactivated.

The computer identifier is a random code created by the software the first time it runs on a computer, and saved in a file in the Adobe user data folder. It is not a hardware serial number and it does not contain your name. To detect an identifier file copied to another computer, the software also keeps, on the computer only, a short code calculated from the computer name and the user account; this code is not sent to us.

What the software sends: the licence key, the computer identifier and a technical version number, when you activate the software and then regularly (usually every few days) to renew the activation. The software keeps the licence key and its activation on your computer, so that it keeps working without a connection for a limited time. Your artwork is processed on your computer and is never sent to us.

IP address: like any internet service, the licence server receives the IP address of the computer that connects to it. We do not record it in your licence. For some functions, it can be used in an automatic anti-abuse counter that deletes itself within about one hour. Cloudflare also processes it to deliver and protect the service.

Why: to deliver and validate licences, apply the number of computers of your plan and the validity dates, grant a single free trial per e-mail address, prevent the sharing of keys, and free a computer when you ask us to.

Legal basis: performance of the contract; our legitimate interest in preventing misuse of licences and repeated trials.

How long: while the licence is valid, then 3 years after it ends, so that a returning customer keeps the same key and a trial is not granted twice.

Automatic checks: the licence server checks automatically whether a key is valid and how many computers use it. This check is necessary to perform the contract. If you believe a key was refused by mistake, contact us and a person will review the situation.

4. Licence e-mails

New licence keys, the start of a trial, renewals and changes of plan are notified by e-mail. Data: e-mail address, licence key, number of computers, validity date and content of the message. These e-mails are sent through Resend (Plus Five Five, Inc., United States), which keeps the messages and delivery logs for a limited period (30 days on its standard plans) and then deletes them. Legal basis: performance of the contract. These are service messages about your licence: they contain no advertising.

5. Support by e-mail and WhatsApp

Data: your name, your company, your e-mail address or your WhatsApp number and profile name, the content of your messages, and any screenshots, files, licence key or order number you send us.

E-mails sent to support@gettruenest.com are forwarded by Cloudflare's e-mail routing service to our mailbox, which is hosted by Google. If you write to us on WhatsApp, WhatsApp (provided in Europe by WhatsApp Ireland Limited) processes your messages under its own terms and privacy policy. In the software, the button used to ask for a new cutting machine opens WhatsApp with a ready-made message naming the selected machine; nothing is sent until you press send yourself.

Why: to answer you, help you install and activate the software, free a computer, and handle complaints. Legal basis: performance of the contract, or our legitimate interest in answering requests. How long: for as long as needed to handle your request, then 3 years after our last exchange.

6. Store visits and cookies

The store runs on Shopify. Shopify uses cookies and similar technologies that are necessary for the store to work (cart, checkout, security, customer account, and remembering your cookie choice). Other cookies, used for statistics or marketing, are only used if you accept them in the cookie banner, where your country requires consent (European Union, European Economic Area, United Kingdom and Switzerland). You can also delete cookies in your browser settings. We have not added any advertising or social network tracking tool to the store. The list of cookies used by Shopify stores, with the lifetime of each one, is available in Shopify's cookie policy.

Legal basis: our legitimate interest for necessary cookies; your consent for the others.

7. News e-mails

If you tick the box to receive news at checkout or in your account, we may send you occasional e-mails about TrueNest. Each e-mail contains an unsubscribe link. Legal basis: your consent, which you can withdraw at any time. How long: until you unsubscribe, or 3 years after your last contact with us.

8. Accounting and legal obligations

Invoices and payment records are sent to our chartered accountant, and to the tax authorities or the courts when the law requires it. Legal basis: our legal obligations. How long: 10 years.

9. Who receives your data

Your data is only accessible to the people at LECALINA who need it. It is also processed on our behalf by the following providers:

  • Shopify International Limited (Ireland): store hosting, checkout, customer accounts, subscriptions, and payments through Shopify Payments;
  • Cloudflare, Inc. (United States): licence server, and routing of e-mails sent to our support address;
  • Plus Five Five, Inc., trading as Resend (United States): sending of licence e-mails;
  • Google: hosting of our mailbox.

We also send invoices to our chartered accountant. If you choose to contact us on WhatsApp, WhatsApp processes your messages as a separate controller. For some features, such as Shop Pay, Shopify also acts as a separate controller: see the Shopify privacy policy and the Shopify privacy portal. We may disclose data to public authorities when the law requires it. We do not sell your personal data.

10. Transfers outside the European Union

Some of these providers process data outside the European Economic Area, in particular in the United States, and Shopify may also process data in Canada. These transfers rely on an adequacy decision of the European Commission (Canada, or the United States for companies certified under the EU-US Data Privacy Framework) or on the standard contractual clauses adopted by the European Commission. Cloudflare and Resend state that they are certified under the EU-US Data Privacy Framework and that they also use standard contractual clauses.

11. Security

Data travels over encrypted connections (HTTPS). Access to the store administration and to the administration of the licence server is restricted and protected by passwords. Activation tokens are digitally signed so that they cannot be forged.

12. Your rights

Under the GDPR and the French Data Protection Act, you have the right to access your data, to have it corrected or erased, to restrict its processing, to object to processing based on our legitimate interest, to receive the data you gave us in a portable format, and to withdraw your consent at any time when processing is based on consent. You can also give instructions on what happens to your data after your death.

To exercise these rights, write to support@gettruenest.com. We reply within one month. We may ask for information to confirm your identity if we have a reasonable doubt. Please note that while a subscription is active, erasing the licence data would stop the licence from working, and that some data must be kept to meet our legal obligations.

13. Complaints

If you think your rights are not respected, you can lodge a complaint with the French data protection authority, CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr, or with the authority of the European Union country where you live or work.

14. Changes

We may update this policy, for example if we add a provider. The date at the top shows the latest version. We inform customers by e-mail of any important change.