This policy describes how AXCAV GROUP LLC (the "Company," "we"), publisher of the Black Hat Editor Tools plugin for Adobe Premiere Pro (the "Plugin"), processes your personal data, in compliance with Regulation (EU) 2016/679 (the "GDPR") and applicable data protection laws.
Scope. This policy covers the blackhateditors.com website, the Plugin, and its license API (license.blackhateditors.com). The training platform available on blackhateditors.com is a separate service with its own terms.
| Data | Details | Purpose |
|---|---|---|
| License Key | Stored hashed (SHA-256) on our servers; the plain key is shown only once when issued | Verify your right to use the Plugin |
| Machine fingerprint ("machineId") | A pseudonymous hexadecimal identifier derived from hardware characteristics, it does not directly identify you | Limit machines per license, tie activation to your device |
| Email address | If provided (purchase or trial) | Key delivery and recovery, license-related communications |
| License tier, activation dates, operating system, Plugin version | Support, anti-abuse, compatibility |
Legal basis: contract performance (Art. 6(1)(b) GDPR).
Retention: license lifetime, then 12 months. Invoices fall under legal accounting obligations (up to 10 years).
To prevent free-trial loops, when you request a trial we compute salted hashes (the salt never leaves our server) of your machine components, plus a "virtual machine" indicator. A machine already known is denied a second trial. These hashes are irreversible and serve no other purpose.
Legal basis: legitimate interest (fraud prevention, Art. 6(1)(f) GDPR).
Retention: maximum 24 months.
If you choose to link your license to a Google, Apple, or Facebook account: email, technical ID from the provider, and session tokens (session duration: 90 days). We never receive your password, contacts, or account content.
Legal basis: contract performance.
Retention: deleted upon your request; expired sessions purged automatically.
On first launch, the Plugin asks your consent. Without explicit positive response, nothing is sent. You can change your mind at any time in Settings → Privacy.
If you consent, every 30 minutes we receive an aggregated summary: names of tools opened and usage count over 7 days, your pseudonymous machine fingerprint, license tier, Plugin version. Never: content, transcriptions, sequence or project names, file paths, or addresses.
Legal basis: consent (Art. 6(1)(a) GDPR), withdrawable at any time, with no effect on Plugin operation.
Retention: 24 months.
If you send us feedback via the built-in widget: your rating, category, message, and your email if you enter it (optional), your Premiere Pro version, and the ~250 last lines of the Plugin's technical log to help us diagnose. These logs may contain local file paths from your machine, do not send feedback if that concerns you, or contact us to request deletion.
Legal basis: consent (submission is a voluntary act).
Retention: 24 months.
On each start-up, the Plugin queries our server to check for an update. The following are transmitted : the pseudonymous machine fingerprint defined in clause 1.1, the Plugin version and the operating system. These data are used to count installations and identify versions requiring an update. They include no name, email address or element of your User Content. A single entry is retained per machine per day. As with any web request, your IP address appears temporarily in our host's technical logs.
Legal basis: legitimate interest (provision, security and maintenance of the Plugin, Art. 6(1)(f) GDPR).
Retention: 24 months.
Payments are processed by a third-party payment provider, identified on the purchase page at the time of purchase. We never see your card number, it is entered directly with the provider. We receive only your email, the product purchased, and a transaction reference, so we can issue your license key.
Depending on the provider chosen, they act either as official reseller ("Merchant of Record", they are then the seller and handle billing and tax) or as a simple payment processor (billing then handled by us). Their identity, exact role, and link to their privacy policy are specified on the purchase page.
The site distinguishes three data uses, and none occur without your knowledge.
a. Local storage, no cookies or third parties. The site stores in your browser (localStorage) your display language, your client-area session if you log in, your cookie choice, and the source through which you first arrived (utm_* parameters, gclid, fbclid, or referrer domain). This data never leaves your browser and is read by no third party.
Legal basis: legitimate interest (site operation and security); contract for the session.
Retention: 90 days for arrival source.
b. Audience measurement. Page views and actions taken on the site (« a visitor opened the pricing page », « a visitor scrolled halfway through the article ») are counted by the tool described in point c. No separate audience measurement is carried out : the site uses no second analytics tool.
c. Advertising measurement. The effectiveness of our campaigns is measured by Google Analytics 4 and the Meta pixel, which set cookies and transmit data to Google LLC and Meta Platforms Inc.
These scripts are loaded as soon as the page opens. A banner informs the visitor on their first visit and allows them to object ; the button set out in clause 6 has the same effect, at any time. Objecting halts all transmission to Google and Meta and causes the deletion of the cookies already set (_fbp, _fbc, _ga, _gid, _gcl_au). It has no effect on access to the site or to the Plugin, requires no justification, and the choice expressed is retained.
We also send those platforms, from our server, the fact that a purchase happened, together with your email address in hashed form (SHA-256), never in clear, so the sale can be tied to the campaign concerned. This transmission stops as soon as you object to advertising measurement.
Legal basis: legitimate interest (measuring our campaigns, Art. 6(1)(f) GDPR), with a right to object exercisable at any time through the « Cookies » link at the bottom of this page.
Retention: per Google's and Meta's policies (13 to 24 months).
d. Campaign links (/go/ addresses). The short links we publish (Instagram bio, YouTube description and so on) pass through our server before taking you to the page. That passage is counted: we record which link was used, the language your browser asked for, the app you arrive from where applicable (Instagram's or TikTok's in-app browser, for example) and whether the visit came from a bot. Neither your IP address, nor your full browser string, nor any cookie is kept. Counting distinct visitors relies on a truncated fingerprint that is re-salted every day: two visits on the same day recognise each other, two visits on different days can no longer be linked. No individual journey can therefore be reconstructed.
Legal basis: legitimate interest (knowing which channel works, GDPR art. 6.1.f).
Retention: 25 months, like our other audience measurement.
e. Technical characteristics sent to Google Analytics. Besides what Google collects on its own (device type, browser, operating system, screen resolution, country), we attach to each event: the usable width of your window, the app your in-app browser belongs to if there is one, whether your browser language matches the page language, the connection type your browser reports (4G, wifi and so on) and the campaign you arrived through. These describe your hardware and your arrival, never your identity, and follow the same right to object as the rest of point c.
Finally, like any web request, your IP address briefly appears in our hosting provider's technical logs. The site's fonts are loaded from Google Fonts, which exposes your IP to Google LLC during the load.
The Plugin's AI functions (transcription, B-roll generation, images, videos, asset search) use your own accounts with third-party providers (artificial intelligence, stock media, transcription).
Possible evolution. If we one day offer a "credits included" plan where AI calls would pass through our infrastructure, this policy will be updated before that option is enabled, and it will be clearly presented as such. Nothing will change silently.
| Provider | Role | Location |
|---|---|---|
| Hostinger International Ltd | Hosting the website, license API, and database | Servers in Paris, France (EU) |
| Google LLC | Google login if you use it (§ 1.3) · website fonts (§ 1.8) | Standard contractual clauses |
| Apple Inc. · Meta Platforms Inc. | Only if you use Apple or Facebook login (§ 1.3) | Standard contractual clauses |
| Resend | Sending emails related to your license and account | Standard contractual clauses |
| Third-party generative-AI infrastructure provider | Runs the generations you launch with the credits included in your plan: your generation prompt and any media you attach are sent to it to produce the result. Does not apply when you use your own API keys (§ 2). | United States · standard contractual clauses |
| Payment provider (third-party) | Purchase transactions (§ 1.7) | Specified on purchase page |
| Google LLC · Meta Platforms Inc. | Only if you have consented: advertising measurement on the site (§ 1.8c) | Standard contractual clauses |
No data is sold or rented. No third-party analytics tool is integrated into the Plugin, the advertising measurement described in § 1.8c concerns only the website, and only after your consent.
Transfers outside the EU: we make none for license and telemetry data, which stay hosted in the EU. Two exceptions, covered by standard contractual clauses: generations launched with the included credits, run by our US-based AI infrastructure provider (§ 3), and third-party account sign-in if you use it (§ 1.3). AI providers you configure yourself with your own keys (§ 2) are your direct relationship.
In case of a data breach posing risk to your rights, we will notify the CNIL within 72 hours and affected individuals shortly thereafter (Arts. 33 and 34 GDPR).
Under Articles 15–21 of the GDPR, you have rights of access, rectification, erasure, restriction, portability (JSON export on request), objection to legitimate-interest processing, and withdrawal of consent at any time (telemetry: directly in Plugin Settings).
To exercise them: privacy [at] blackhateditors.com. We respond within 30 days. Erasing license data renders the license unusable (with no implicit refund, see the Terms).
You may also file a complaint with the CNIL (www.cnil.fr) or your country's data protection authority.
The Plugin uses no cookies. The license API uses none for end users (only our internal admin tool, non-public, uses a technical session cookie).
On the site, the only cookies set are those of Google Analytics 4 and the Meta pixel, loaded as soon as the page opens (clause 1.8c). Where an objection is expressed, from the banner or from the button below, those cookies are deleted, all transmission ceases, and the scripts concerned are no longer loaded on subsequent visits.
This choice may be changed at any time :
The Plugin is intended for professionals and creators; it is not designed for anyone under 15, and we do not knowingly collect data about minors.
For material changes to this policy, active license holders will be notified by email and/or via the Plugin before the change takes effect, and version history will remain accessible.
Privacy: privacy [at] blackhateditors.com
Support: support [at] blackhateditors.com