Privacy Policy

Last updated: July 8, 2026

1. Introduction

This privacy policy describes how we collect, use and share information when you:

• Visit our website at https://aafeverything.app
• Download and use the AAF Everything Converter desktop application
• Purchase a license or activate the application
• Contact us by e-mail, including sales and support requests

We have designed our products to collect as little personal information as technically possible. This policy is therefore short; the sections below describe everything there is.

2. Products and Services Covered

This policy covers:

• The AAF Everything Converter desktop application (macOS), including its free demo mode
• The aafeverything.app website
• License purchases, which are processed by Lemon Squeezy, LLC as merchant of record

3. Information We Collect

Desktop application

The application performs all conversions locally on your machine — including batch runs, media collection and MXF audio transcoding. It contains no usage analytics, no crash reporting and no account system; the only automatic request is the update check described below, which you can switch off. The files you convert — timelines, project data and media — are processed entirely on your computer and are never transmitted to us or to anyone else. The conversion reports the application writes are plain-text files stored next to your output; they stay on your machine.

The single exception is license activation: when you enter a license key, the application contacts the Lemon Squeezy licensing API once to validate and activate the key. This request contains the license key, a fixed activation label (“AAF Everything” — your computer’s name is not transmitted), and the standard technical data that accompanies any internet request (such as your IP address). Afterwards the application re-checks roughly once a week that the license is still valid, so that refunded or released licenses stop working; that request contains the key and the activation reference and nothing about your files. If you are offline the re-check is skipped and your license keeps working. The free demo requires no activation.

Update check on start

When the application starts, it sends one short request to our update endpoint. It contains three pieces of information: the application version, the platform (macOS), and whether it is running in demo or licensed mode. It contains no identifier — no license key, no account, no device or installation ID, and nothing about your files.

The endpoint derives a hashed form of your IP address to estimate how many distinct installations there are. We do not store the IP address itself, and the hash changes daily, so nothing can be linked across days or to your license.

The legal basis is our legitimate interest (Art. 6(1)(f) GDPR) in knowing which versions are in use and in being able to tell you that an update exists. You can switch this off: click the license chip in the application’s title bar and untick Check for updates on start. With the check off, the application sends no such request at all. The endpoint runs on Cloudflare, Inc. as our processor under a data processing agreement; the hashed rows are deleted after 14 days and the request log after 30 days. The application never downloads or installs anything by itself — it only opens this website in your browser.

Purchases

When you buy a license, the purchase is handled by Lemon Squeezy as merchant of record. Lemon Squeezy collects and processes the information needed to complete the transaction — such as your name, e-mail address, billing address, payment details and applicable tax information — under the Lemon Squeezy privacy policy. We never receive or store your payment details. We receive your e-mail address, order details and license key records so that we can issue and manage your license and provide support.

Website

This is a static website. It sets no cookies of its own, embeds no social media widgets and no third-party fonts, and shows no advertising. For basic visitor statistics it uses GoatCounter, a privacy-friendly, open-source analytics tool: it loads one small script from gc.zgo.at and records only aggregate, non-identifying information — which page was viewed, the referring site, a rough browser/operating-system label and the day. GoatCounter sets no cookies, stores no personal data, and does not track you across other websites; your IP address is used only transiently to derive an approximate country and is not stored. Because no personal data is stored and no cookies are set, no consent banner is required. The buy buttons open Lemon Squeezy’s checkout page in a new tab — only then does your browser connect to Lemon Squeezy’s servers (see section 8). Our hosting provider may additionally keep standard server logs (IP address, time of access, requested page, user agent) for security and operational purposes.

E-mail

If you contact us, we receive your e-mail address, the contents of your message, and any attachments you choose to send (for support this may include conversion reports or timeline files — send them only if you are comfortable doing so).

4. How We Use Your Information

We use the limited information described above to:

• Issue, validate and manage licenses
• Provide customer and technical support
• Process refunds and handle order issues (via Lemon Squeezy)
• Maintain the security and operation of the website
• Comply with legal obligations, such as tax and accounting rules

We do not use your information for advertising, profiling or automated decision-making, and we do not send newsletters or marketing e-mails unless you have explicitly asked for them.

5. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process personal information under the following legal bases:

• Performance of a contract — issuing and activating your license, providing support (Art. 6(1)(b) GDPR)
• Legitimate interests — keeping the website and licensing system secure and preventing fraud (Art. 6(1)(f) GDPR)
• Legal obligations — retaining order records for tax and accounting purposes (Art. 6(1)(c) GDPR)
• Consent — where you have explicitly given it, for example by requesting product updates (Art. 6(1)(a) GDPR)

6. Sharing Your Information

We share information only in the following situations:

• With Lemon Squeezy, who process purchases and license activations as described above
• With our hosting provider, to the extent that server logs are technically created by serving this website
• To comply with legal obligations or to protect and defend our rights
• With your consent

We do not sell personal information, and we never have access to your timeline or media data in the first place.

7. Data Security

The most effective security measure in our products is architectural: your creative work never leaves your computer, so it cannot be breached on our side. Beyond that, license validation uses encrypted connections (HTTPS/TLS), this website is served over HTTPS, and access to order data in the Lemon Squeezy dashboard is protected by authentication and limited to the developer.

8. Cookies and Tracking Technologies

This website sets no cookies of its own. Our analytics (GoatCounter, see section 3) is cookieless and stores no personal data. The Lemon Squeezy checkout page that the buy buttons open in a new tab may set cookies that are necessary to process a transaction; these are governed by the Lemon Squeezy privacy policy. The desktop application stores its settings and license state locally on your computer only.

9. Data Retention

• Order and license records — retained for as long as your license is active, and thereafter as required by tax and accounting law
• Support e-mails — retained as long as needed to resolve your request and for a reasonable period afterwards, so that follow-up questions have context
• Server logs — retained by the hosting provider for a short, rolling period

10. Your Data Protection Rights

Depending on your location, you have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate information
• Erasure — request deletion of your personal data
• Restriction — request that we restrict processing
• Objection — object to processing based on legitimate interests
• Portability — request transfer of your data to another organization

To exercise any of these rights, e-mail us at support@aafeverything.app. If you are in the EEA, you also have the right to lodge a complaint with your local data protection authority.

11. Third-Party Software

AAF Everything Converter reads and writes interchange files for third-party applications such as DaVinci Resolve, Premiere Pro, Final Cut Pro, Pro Tools, Media Composer and Nuendo. All of this happens locally on your computer. We are not responsible for the privacy practices of third-party software; please review the privacy policies of the applications you use alongside AAF Everything.

12. International Data Transfers

Lemon Squeezy is a US-based company; when you purchase a license or activate the application, the associated data is processed in the United States under Lemon Squeezy’s safeguards for international transfers. Support e-mail is processed where our e-mail provider operates its servers.

13. Changes to This Policy

If we change this policy — for example because a future version of the application gains an online feature — we will update this page and the “Last updated” date above. Material changes to what the application sends over the network will always also be stated in the application’s release notes.

14. Contact

AAF Everything is developed and operated by a one-person studio — the same developer as AAF Bridge.

• By e-mail: support@aafeverything.app
• By visiting this page: https://aafeverything.app/privacy.html