Privacy policy
The Derive app collects nothing. This website collects as little as it can: our pages set no cookies and run no analytics or advertising.
Last updated 8 November 2026
Who we are
Derive Solutions ([REPLACE: legal name and postal address]) runs derive-solutions.co and is the controller of the personal data described here. Contact: support@derive-solutions.co.
The Derive app
Derive runs on your own device. It reads the files you point it at and writes its diagrams back to your device. It sends nothing to us or to anyone else: no code, no file names, no usage data. Your licence is checked on your device, without contacting us.
Visiting this website
The site is hosted by Cloudflare (Cloudflare Pages and Workers). To deliver pages and protect them from abuse, Cloudflare processes technical data such as your IP address, browser type and the address you request. We rely on our legitimate interest in running a secure website (Article 6(1)(f) GDPR). Fonts, images and scripts come from this domain, so a page view makes no requests to anyone else.
Buying a licence
Lemon Squeezy sells Derive licences as merchant of record. When you open the checkout, Lemon Squeezy collects your name, email, billing address and payment details and processes them as an independent controller under its own privacy policy. Its checkout script loads from assets.lemonsqueezy.com only when you head for a buy button.
From Lemon Squeezy we receive your order ID and number, your name, email, the number of seats, the order date, and whether the order was refunded. We use them to issue your licence, to let you download it again, to answer support requests and to keep the records the law requires. Our legal bases are the contract with you (Article 6(1)(b)) and our legal obligations (Article 6(1)(c)).
Your licence file contains your name, email, order number, seats and dates. It stays with you.
Looking up a licence
When you use the licence page, your order number and email go to our licence service on this domain, which compares them with your order. To stop guessing, the service counts lookups per IP address for about two minutes.
Emailing us
If you write to support@derive-solutions.co, we keep the conversation for as long as we need it to help you.
How long we keep data
Order records are kept while your licence exists and for as long as tax and accounting law requires afterwards ([REPLACE: period, for example 10 years]). Lookup counts expire within minutes.
Where data is processed
Cloudflare and Lemon Squeezy may process data outside the European Economic Area, including in the United States. [REPLACE: the transfer mechanism, for example the EU–US Data Privacy Framework or Standard Contractual Clauses.]
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to its use, and to receive it in a portable format. Write to support@derive-solutions.co. You can also complain to your data protection authority.
Changes
If this policy changes, the new version appears here with a new date.