Website & Desktop Software. Transparent Privacy Standards.
Effective Date: September 30, 2026 · Version 1.3
1. Scope & Core Philosophy
This Privacy Policy governs both:
- The TypePOT Web Platform: Including our official website (
typepot.com), user authentication portal, customer dashboard, checkout flows, and support portals. - The TypePOT Desktop Software: Including the Windows application, background services, and creative suite host connectors.
TypePOT ("we", "our", or "us") adheres to a strict Privacy-by-Design and Local-First architecture. Your font collection represents valuable creative and commercial property. We ensure your fonts, folder structures, design projects, and typography previews remain strictly on your physical computer. We do not operate cloud font vaults, we do not inspect your typography files, and we never sell user data.
2. Information We Collect
We collect only the minimum personal data required to administer your account, process orders, and provide technical support:
- Account Credentials: Your name, email address, and a securely salted and hashed password.
- Billing & Transaction Records: Country of purchase, postal code, VAT/Tax identifiers (where legally required), and payment processor transaction reference IDs. (Note: We never process, see, or store full credit card numbers; payment data is handled directly by PCI-DSS Level 1 compliant processors).
- Workstation License Association: An irreversible cryptographic hardware identifier hash, your computer's friendly device name, and the timestamp of the most recent license synchronization.
- Support Inquiries: Any correspondence or diagnostic logs you voluntarily provide when requesting customer support.
4. What We Never Collect
Guaranteed Zero Telemetry on Creative Assets:
5. Workstation Association & License Validation
To prevent license piracy and enforce the single-seat workstation rule without requiring invasive always-on DRM, TypePOT uses an irreversible cryptographic hardware hash:
The desktop client generates a one-way cryptographic hash derived from hardware identifiers. This hash cannot be reversed to reveal your physical serial numbers or personal identity, and is used solely to associate an active license slot with your computer.
You have total control over your active workstations. You can release or deactivate a workstation slot anytime through your web dashboard.
6. Desktop Network Operations
The TypePOT desktop application initiates outbound encrypted HTTPS network connections exclusively for:
- Authentication & Activation: Transmitting your account credentials or authorization token during initial workstation sign-in.
- Periodic License Verification: Refreshing your offline license token every 14 days to confirm active license or perpetual status.
- Software Update Discovery: Checking our release service to notify you when a new stable build or security patch is available.
- Google Fonts Catalog Exploration: Fetching metadata manifests from Google Fonts CDN when browsing the online catalog tab.
TypePOT does not maintain persistent background websocket telemetry or covert outbound connections.
7. Third-Party Service Providers
We partner with reputable infrastructure providers to deliver our web platform and payment operations:
- Merchant of Record & Payment Gateway (Dodo Payments): Secure transaction and global tax compliance processing. Governed by their independent privacy policy.
- Cloudflare: Edge security, SSL termination, web application firewall (WAF), and CDN hosting for binary installer downloads.
- Transactional Email Services: Relaying password reset requests and account verification notices.
8. Data Retention & Account Deletion
We retain your account details and license records for as long as your account remains active, ensuring you can redownload your software and retrieve your perpetual license keys.
You have the absolute right to request the permanent deletion of your account and all associated workstation records by contacting our support team. Upon verification, your account and hardware associations will be permanently purged from our database within 30 calendar days.
9. Your Legal Rights (GDPR & CCPA)
Depending on your geographical location, you hold statutory rights regarding your personal information:
- The right to access the personal data we hold about you.
- The right to rectify inaccurate or incomplete profile records.
- The right to object to or restrict certain data processing.
- The right to data portability.
- The right to withdraw consent at any time.
10. Contact & Inquiries
If you have questions, feedback, or data privacy requests regarding this policy, please reach out to our privacy officer: