Data controller
The website axisoverlay.com is responsible for processing the personal data it collects through AXIS Overlay, its website, licensing processes, checkout gateways, support and related services.
Personal data we collect
Depending on how you interact with AXIS Overlay, we may collect the following categories of data:
A. Purchase and licensing data
- Email address.
- Name or company name, if provided.
- Customer, payment, subscription and billing identifiers generated by Stripe.
- Purchase, subscription, cancellation, renewal, refund or chargeback status.
- License key in protected format or its encrypted equivalents, hashes or derived identifiers.
B. Technical and activation data
- Installation ID.
- Device fingerprint hash.
- Device name or computer alias.
- Operating system and version.
- Application version.
- Activation date and last validation.
- Number of active devices associated with the license.
- IP address and country/region data, when available during activation, validation, security or audit processes.
C. Service usage and support data
- Technical logs of errors and validations.
- License, security and audit events.
- Support messages, requests, queries and communications you send us.
D. Data processed by chat integrations, at the user’s instruction
When the User connects platforms such as Discord, Twitch or YouTube, AXIS Overlay may process:
- Visible username.
- Avatar or profile picture.
- Message contents.
- Replies, mentions, emojis, stickers, GIFs, images and attachments.
- Message and platform metadata strictly necessary to render the overlay.
In this category, AXIS Overlay acts primarily as the technical provider of the User who configures and operates the tool.
Sensitive personal data
AXIS Overlay does not deliberately request sensitive personal data for the ordinary provision of the licensing and overlay service.
The User must refrain from entering or transferring third-party sensitive data through the service unless they have sufficient legal basis to do so.
Primary purposes of processing
Your personal data will be processed for the following purposes necessary for our legal relationship with you:
- Process purchases and payments.
- Issue, activate, validate, renew, suspend, revoke or cancel licenses.
- Manage subscriptions, billing, refunds and chargebacks.
- Allow legitimate access and use of AXIS Overlay.
- Validate authorized devices and prevent fraud or abuse of the license system.
- Provide technical support, customer service and incident follow-up.
- Maintain security, audit, operations and compliance logs.
- Enable integration with third-party platforms requested by the User.
- Comply with legal obligations and competent authority requirements.
Secondary purposes
Additionally, and when applicable under the law, we may process certain data to:
- Improve the quality, performance and security of the service.
- Analyze failures, errors, technical compatibility and aggregated usage patterns.
- Send operational or informational communications related to the service.
If you do not want your data to be processed for secondary purposes, you can request it from our support panel.
Legal basis and scope
The processing of your data is based on:
- The contractual or pre-contractual relationship arising from the purchase, activation or use of AXIS Overlay.
- The need to provide the requested service.
- Compliance with legal obligations.
- The legitimate interest of the controller to prevent fraud, protect system security and document operational events, always within the limits of applicable regulations.
Transfers and processors
Your data may be shared with or processed by third parties acting as processors or providers of services indispensable for the operation of AXIS Overlay, including:
- Stripe, for payments, subscriptions, billing and customer portal.
- Hosting, infrastructure, database, email and observability providers.
- Technical providers tied to service delivery or support.
- Competent authorities, when legally required.
AXIS Overlay may also interact with third-party APIs or services such as Discord, Twitch and YouTube at the User’s request. Use of those platforms is also subject to their own terms and privacy notices.
When consent is legally required for a specific transfer, it will be obtained in accordance with applicable regulations.
Limiting use or disclosure of data
You can request the limitation of the use or disclosure of your data by sending a request from our support panel.
However, certain data must be kept while necessary to:
- Keep the license active or document its history.
- Meet legal, accounting, tax or security obligations.
- Resolve disputes, claims, refunds, chargebacks or audits.
ARCO rights and consent withdrawal
You have the right to access, rectify, cancel or object to the processing of your personal data, and to withdraw any granted consent, where legally applicable.
To exercise your ARCO rights or request consent withdrawal, send a request from our support panel including at least:
- Full name or sufficient identification.
- Contact details to reply to the request.
- Clear description of the right you wish to exercise.
- Documentation or information that helps locate your data.
- Where applicable, documents proving legal representation.
The request will be handled within the timeframes and terms provided by applicable law.
Automated means, cookies and similar technologies
The AXIS Overlay website may use cookies, logs, session identifiers and similar technologies for technical, security, performance and site operation purposes.
Depending on the current implementation, these technologies may be used to:
- Maintain sessions or checkout flows.
- Detect errors or malicious activity.
- Remember basic browsing preferences.
- Facilitate the operation of Stripe integrations or technical site components.
You can limit or block cookies from your browser settings, though doing so may affect the site’s operation.
Data retention
Personal data will be retained only for the time necessary to fulfil the purposes described in this notice and afterwards for the periods required by legal, contractual, tax, accounting, security or legal-defense obligations.
Technical and audit logs may be kept for reasonable periods to prevent fraud, evidence operations and address claims.
Security measures
AXIS Overlay implements reasonable administrative, technical and physical measures to protect personal data against damage, loss, alteration, destruction, unauthorized access or processing.
Among other measures, the following may be used:
- License key hashing or encryption.
- Signed tokens for local validation.
- Local encryption of license state.
- Audit and security event logs.
- Access controls and per-environment segmentation.
Notwithstanding the above, no system is absolutely invulnerable.
User processing of third-party data
If you use AXIS Overlay to display, capture or process chat messages, usernames, avatars or any other third-party data, you acknowledge and accept that you are responsible for having the necessary authorizations, legal bases or terms of use for that purpose.
AXIS Overlay provides the technical tool; the User is responsible for the specific use of it before their audience, community and connected platforms.
Changes to the privacy notice
We reserve the right to modify or update this Privacy Notice at any time, arising from legislative or regulatory updates, internal policies or service changes.
Changes will be made known through axisoverlay.com or by the means enabled by the service.