This policy covers ZoomCanvas and the pages at
intellifields.com/zoomcanvas/. Intellifields (“we”, “us”) is the data controller.
Intellifields Horizon has its
own policy; this one is specific to
ZoomCanvas, because the two products send different things.
ZoomCanvas never sends your documents anywhere. There is no account, no sign-in, no synchronisation, no cloud storage, no analytics, no telemetry and no crash reporting. Your presentations, the images and video you import, and everything you export stay on your own disk.
The application makes exactly two kinds of network request, both listed below. Neither of them can be made to carry your work.
1. What the application sends
a. When you activate, re-check or release a licence
Activating a paid licence contacts our licence service. So does a quiet re-check that runs at most occasionally in the background, and releasing a computer from a licence. Each of those requests contains:
| What | Why | Note |
|---|---|---|
| Your licence key | To confirm the licence is real and still active | We store only a one-way hash of it, never the key itself |
| A device identifier | To count how many computers a licence is used on | A salted SHA-256 hash. The underlying machine identifier never leaves your computer and cannot be recovered from the hash |
| Your computer’s name | So you can tell your machines apart when you need to free a seat | Shown only to you, when you enter your own licence key |
That is the whole request. The free version never contacts the licence service at all.
b. When it checks for a new version
Once a day at most, ZoomCanvas fetches
intellifields.com/zoomcanvas/version.json to see whether a newer release exists. It
is an ordinary file download and sends no data about you or your installation —
no licence key, no identifier, no version number.
As with any web request, our host necessarily sees the IP address it came from, in server logs that are kept briefly for security and operational purposes. ZoomCanvas never downloads or installs an update by itself; it only tells you one exists.
2. What the application never sends
- your presentations, or any part of them;
- images, video, PDFs, fonts or PowerPoint files you import;
- file names, folder paths or recently-opened lists;
- what you do in the app, how long you use it, or which features you touch;
- crash reports, error logs or diagnostics;
- your name, email address or any contact details.
ZoomCanvas contains no analytics library, no advertising identifier and no third-party software-development kit of any kind.
3. What we hold, and why
| Data | Where it comes from | Lawful basis | Kept for |
|---|---|---|---|
| Name, email address, order reference, issue date | Your purchase, via Paddle | Performance of a contract | 7 years, for accounting and tax |
| A hash of your licence key, plan, seats, expiry, status | Created when your licence is issued | Performance of a contract | 7 years, as above |
| Device hash, computer name, first and last seen dates | Activating a computer | Legitimate interests — enforcing the seat limit you agreed to | Until you release that computer, or the licence ends |
| Email address, if you asked for the free download | The form on the download page | Consent | Until you ask us to remove it |
Your licence key is never stored. We keep a one-way hash of it, so a copy of our database contains nothing anybody could activate with — and it also means we cannot look your key up by the key itself. If you lose it, quote your order reference or email address and we will reissue exactly the same key.
4. How we use it
We use the above only to:
- send you your licence key and, if you lose it, send it again;
- check that a licence is valid, and count the computers using it;
- tell you about new versions of ZoomCanvas, if you gave us your address;
- answer your emails, and process refunds;
- meet our accounting and tax obligations.
We do not sell your data, share it with advertisers, or profile you. We do not send marketing about unrelated products.
5. Who else is involved
| Who | What for | What they see |
|---|---|---|
| Paddle.com | Payment, as our Merchant of Record and seller of record | Your name, email, payment and billing details. We never see your card details. |
| Supabase | The database holding the licence records above | Only what section 3 lists |
| Vercel | Running the licence service | Requests in transit, plus operational logs |
| Resend | Delivering your licence key by email | Your email address and the message |
| Google Fonts | The typeface on these web pages | Your IP address, when you load a page on this site. It is not used by us for anything, and the ZoomCanvas application itself loads nothing from Google. |
These providers act as our processors and may store data in the United States or the European Union. Where data leaves the UK or EEA, transfers rely on the providers’ standard contractual clauses.
6. Cookies
The ZoomCanvas pages set no cookies and run no analytics. There is nothing here to consent to, which is why you are not being asked. Other pages on intellifields.com may behave differently — see the site policy.
7. Your rights
If the UK GDPR or EU GDPR applies to you, you have the right to access your data, to have it corrected or erased, to restrict or object to how we use it, to receive a copy in a portable form, and to withdraw consent where consent is the basis. You may also complain to your data protection authority — in the UK, the Information Commissioner’s Office.
Email support@intellifields.com and we will reply within 30 days. There is nothing to prove and no form to complete.
One honest limit: we must keep purchase records for tax purposes, so we cannot erase a transaction record on request. Everything else — your activation records, your address on the download list — we can and will remove.
8. Children
ZoomCanvas is not directed at children, and we do not knowingly collect data from anyone under 16.
9. Security
Licence data is held in an access-controlled database that is not reachable from the public internet, and all requests are encrypted in transit. Licence keys are stored only as hashes, and the private key used to sign licences is held separately from the application and never ships inside it.
No system is perfect. If we discovered a breach affecting your data we would tell you, and the relevant authority, within 72 hours of becoming aware of it.
10. Changes
If we change this policy we will update the date at the top, and we will not apply a materially worse version retroactively to data already collected.
11. Contact
Intellifields — support@intellifields.com. A real person reads it.