Privacy Policy & Data Protection Statement

01 Data Controller, Scope & Applicability

This Privacy Policy governs the collection, processing, and protection of personal and technical data by SimpleViewer ("SimpleViewer", "we", "us", or "our") across:

• Our public web properties, including https://simpleviewer.app, the Client & Fleet Portal at https://dashboard.simpleviewer.app, and the Live Telemetry Status Portal at https://status.simpleviewer.app;
• Our native desktop and mobile software applications for Windows 10/11 (Installer and Portable .exe), macOS (Apple Silicon and Intel), Linux (x86_64), and Android (.apk);
• Our cloud signaling and binary TCP relay infrastructure (ports 443, 7890, and 7891).

For the purposes of the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR"), SimpleViewer acts as the Data Controller for account registration, licensing, billing, and public cloud signaling metadata, and as a zero-knowledge Data Processor when routing encrypted remote support sessions on behalf of business subscribers.

02 Zero-Knowledge Cryptographic Architecture

SimpleViewer is engineered around a strict Zero-Knowledge security model. Unlike legacy remote access tools that terminate or re-encode video streams on central servers, SimpleViewer treats all session payloads as opaque, authenticated ciphertext:

• End-to-End Session Encryption (AES-256-GCM): Every screen capture frame, WASAPI audio packet, mouse/keyboard input event, clipboard synchronization payload, file transfer chunk, session chat message, and remote command terminal stream is encrypted on the sender's device using 256-bit Advanced Encryption Standard in Galois/Counter Mode (AES-256-GCM) with per-session ephemeral keys and 96-bit nonces.
• Blind Relay Routing: When a direct peer-to-peer path is unavailable and traffic flows through a SimpleViewer binary TCP relay server, the relay forwards raw encrypted frames in memory without possessing the session decryption key. SimpleViewer personnel and infrastructure cannot view your screen, read transferred files, monitor keystrokes, or record sessions.
• Zero-Knowledge Password Verification (Salted SHA-256 Challenge-Response): Neither your temporary 6-character session password nor your permanent unattended access password is ever transmitted in plain text. Authentication is performed using cryptographic hashes and one-time session tokens.

03 Categories of Data We Collect & Process

We strictly adhere to the GDPR principle of Data Minimization (Art. 5(1)(c)). Depending on how you use SimpleViewer, we process only the following limited data categories:

3.1 Device Signaling & Ephemeral Connection Metadata (No Account Required)

When you launch the SimpleViewer application on any platform, the client establishes a TLS-encrypted WebSocket connection to register its availability for incoming or outgoing connections. We process:

• 9-Digit Device ID & Hardware GUID Hash: A randomly assigned 9-digit routing identifier (e.g., 892 116 336) paired with a non-reversible cryptographic identifier of the machine installation so your computer retains a consistent ID across restarts.
• Device Label & Operating System Version: The computer hostname (or custom alias configured by you in Settings) and OS build string (e.g., Windows 11 Pro, Ubuntu 24.04, Android 14) so authorized peers can identify which workstation they are connecting to.
• Network & Session Audit Metadata: Public IP addresses of the connecting endpoints, connection start/end timestamps, session authorization mode (interactive prompt, password, or 1-click account), and failed authentication counters for brute-force protection.

3.2 Registered User Account Data ("My Computers" & Web Portal)

Creating a SimpleViewer account is optional and used to link multiple computers for 1-click unattended access and commercial license management. When you register via the app or simpleviewer.app/register, we store:

• Account Identifiers: Your chosen username and verified email address.
• Authentication Credentials: A salted cryptographic hash of your account password (or your Google OAuth 2.0 subject identifier if you choose "Sign in with Google").
• Bound Fleet Associations: The list of 9-digit Device IDs linked to your account and your recent target device list used to enforce plan device limits.

3.3 Website Contact, Support & Newsletter Submissions

If you submit an inquiry via our Contact Form or subscribe to release notes, we collect your name, email address, organization name (optional), and message content solely to respond to your request or deliver requested product updates.

04 GDPR Legal Basis & Data Retention Schedule

Under GDPR Article 6, we process personal data only where we have a valid legal basis. The table below details every category of data processed, its legal basis, and its mandatory retention period:

05 Operating System & Mobile App Permissions Disclosure

Because SimpleViewer enables low-latency remote screen sharing and remote input control across desktop and mobile operating systems, the client applications request specific OS-level permissions only when you use those features:

5.1 Android Application Permissions & Google Play Prominent Disclosure

• AccessibilityService API (android.permission.BIND_ACCESSIBILITY_SERVICE): Requested exclusively when you explicitly enable "Android Host Mode" to allow a remote PC or authorized technician to control your Android device. SimpleViewer uses the AccessibilityService API solely to inject touch coordinates, swipe gestures, and system navigation events (Home, Back, Recents) received over an authenticated session. SimpleViewer never uses the AccessibilityService API to read screen text, capture passwords, monitor banking apps, modify user settings without consent, or collect background analytics.
• Screen Recording / MediaProjection API (FOREGROUND_SERVICE_MEDIA_PROJECTION): Triggered only when you accept an incoming remote screen-sharing session. Android displays a system-level consent dialog before any pixel is captured, and SimpleViewer maintains a persistent notification in your status bar with a red "Stop" button that terminates the stream immediately.
• File Storage Access: Used strictly when you initiate or accept a session in File Transfer Mode to exchange user-selected files with the connected computer.

5.2 Windows, macOS & Linux Desktop Permissions

• Windows (DXGI Desktop Duplication & Unattended Service): Uses standard Windows Desktop Duplication APIs for 60 FPS screen capture and SendInput for mouse/keyboard control. If you install the optional Unattended System Service, SimpleViewer runs as a background service solely to allow you to connect at the Windows Login/UAC screen.
• macOS (Screen Recording & Accessibility Privacy Consent): Requires explicit user approval in System Settings → Privacy & Security → Screen Recording and Accessibility so macOS permits frame capture and cursor control during active sessions.
• Linux (X11 / PipeWire & Input Injection): Accesses the local display server and input subsystem only during authorized remote desktop or terminal sessions.

06 Commercial Subscriptions, Stripe Checkout & Billing Data

When you purchase a SimpleViewer Pro or Business Unlimited subscription via simpleviewer.app/checkout, payment processing is handled directly by Stripe, Inc. / Stripe Payments Europe, Ltd., a PCI-DSS Level 1 certified payment processor:

• Zero Card Storage on SimpleViewer Servers: Your credit card number, CVV security code, or IBAN/SEPA bank details are entered directly into Stripe's hosted checkout environment and never touch SimpleViewer servers.
• Invoice & Licensing Records: Upon successful payment confirmation from Stripe, SimpleViewer records your subscription tier, billing cycle, invoice amount, currency, optional company name and VAT/Tax ID, Stripe Session/Customer reference ID, and the generated license key (SV-PRO-XXXX-XXXX-XXXX or SV-BIZ-XXXX-XXXX-XXXX) so you can download tax-compliant invoices from your Customer Portal.

07 Cookies, Local Storage & Zero Advertising Trackers

SimpleViewer does not use third-party advertising cookies, cross-site tracking pixels, behavioral fingerprinting, or remarketing scripts. We use browser localStorage and strictly necessary first-party session tokens exclusively for core functionality:

• sv_lang — Remembers your preferred interface language (en, de, or fr).
• sv_portal_token & sv_portal_user — Keeps you signed in to the Client & Fleet Portal until you click Sign Out.
• First-Party Aggregate Page & Download Telemetry: To monitor server load and verify binary integrity, our web server counts aggregate page views and binary download events without building cross-site user profiles or sharing visitor data with external analytics vendors.

08 Sub-Processors, EU Hosting & International Data Transfers

Our primary signaling database (MariaDB) and high-speed TCP relay cluster are hosted in ISO/IEC 27001 certified European Union data centers (Frankfurt am Main, Germany / EU-Central). We engage only vetted infrastructure sub-processors under strict GDPR Art. 28 Data Processing Agreements (DPAs):

• European Cloud Infrastructure (EU-Central): Hosting of signaling nodes, binary TCP relays, and encrypted account databases within the European Economic Area (EEA).
• Stripe Payments Europe, Ltd. / Stripe, Inc.: PCI-DSS Level 1 subscription payment processing and tax invoice verification.
• Google Ireland Limited (Optional): Used only if you explicitly click "Sign in with Google" (OAuth 2.0) to authenticate your SimpleViewer account.

Where any sub-processor processes data outside the EEA/UK, transfers are safeguarded by the European Commission's Standard Contractual Clauses (SCCs) and the EU-U.S. Data Privacy Framework.

09 NIS2 Directive, HIPAA & Self-Hosted Relay Sovereignty

For organizations operating under the EU NIS2 Directive (Directive (EU) 2022/2555), ISO 27001, HIPAA, or strict national data-residency regulations, SimpleViewer Business Unlimited includes support for a Self-Hosted Signaling & Relay Server:

• All device registrations, 9-digit Device IDs, user accounts, and encrypted relay streams remain 100% within your own private cloud, VPC, or air-gapped on-premise network.
• Zero signaling metadata or network traffic is sent to simpleviewer.app public servers.

10 Technical & Organizational Security Measures (TOMs)

Pursuant to GDPR Article 32, SimpleViewer implements industry-leading technical and organizational safeguards:

• Transport & Payload Cryptography: Mandatory TLS 1.3 / HTTPS on all web and WebSocket signaling endpoints, combined with end-to-end AES-256-GCM session encryption.
• Automated Brute-Force Lockout: Any IP address that submits 5 consecutive invalid password attempts against a Device ID is automatically blocked at the signaling layer for 15 minutes.
• Database Hardening: Our MariaDB production database runs bound exclusively to loopback (127.0.0.1), isolated from the public internet, with salted password hashing and role-based access control.
• 72-Hour Incident Response: In the unlikely event of a security breach affecting personal account metadata, SimpleViewer will notify the competent supervisory authority and affected users within 72 hours in accordance with GDPR Articles 33 and 34.

11 Your Data Protection Rights (GDPR, UK GDPR & CCPA)

If you reside in the European Economic Area (EEA), the United Kingdom, Switzerland, or California, you have the following enforceable rights regarding your personal data:

• Right of Access (Art. 15 GDPR): Request a complete export of all personal data and bound device records associated with your account.
• Right to Rectification (Art. 16 GDPR): Update your email address, username, device aliases, or billing details at any time via the Customer Portal.
• Right to Erasure / "Right to be Forgotten" (Art. 17 GDPR): Permanently delete your SimpleViewer account and all associated device bindings.
• Right to Restriction & Objection (Art. 18 & 21 GDPR): Object to or restrict specific processing activities.
• Right to Data Portability (Art. 20 GDPR): Receive your account and billing records in a structured, machine-readable JSON/CSV format.
• Right to Lodge a Complaint (Art. 77 GDPR): You have the right to lodge a complaint with your national Data Protection Authority (DPA).

12 Account Deletion Procedure & Data Protection Contact

You can permanently delete your SimpleViewer account, unbind all 9-digit Device IDs, and purge your authentication records at any time through two immediate channels:

• Option A — Instant Self-Service Deletion (Web Portal / App): Sign in at dashboard.simpleviewer.app (or under the My Computers tab in the Windows, macOS, Linux, or Android app) and manage or unbind your devices and account credentials directly.
• Option B — Direct Privacy & DPO Deletion Request: Email [email protected] from your registered email address. All account records and bound device metadata are permanently purged from our active MariaDB database within 48 hours.