Personal Information Protection Notice
This notice supplements the Privacy Policy with a structured inventory of categories, purposes, necessity, recipients, and retention.
Release and purchase status
Better UnArchiver is available through the Mac App Store, where Apple handles transactions and restoration. Direct website checkout, License issuance, and account recovery remain disabled. Do not send payment information or transaction credentials to support.
1. How to read this notice
“Local data” is processed by the app only on your Mac and is not automatically sent to us. “Necessary” means that the corresponding function cannot be completed if the information is withheld. Optional information is identified separately. Each row applies only to the processing the relevant App actually performs; the product-specific scope and exceptions are in Appendix E of the Privacy Policy. The operator must keep this list aligned with the deployed infrastructure, logs, third-party SDKs, and database cleanup jobs.
2. Personal information inventory
Current status: online cases, in-app feedback, and support attachments are available only when the relevant released product version and production support service display them as available; the product support page and App state the categories and entitlement scope currently accepted. Better Cleaner allows independent text feedback, while screenshots and diagnostics are entirely optional and require separate consent. If the device is offline or the support service is unavailable, email support@bettermac.net; that mailbox is hosted by an external mail provider.
After you initiate submission, an upload or response failure may leave a recoverable unverified server draft. The form retains retry credentials only in the current page’s memory; closing or reloading does not delete a server draft. Drafts and their attachments expire after 24 hours. A retry does not itself verify your email or confirm submission; a new submission requires fresh attachment consent.
| Context | Information | Purpose and necessity | Source and handling |
|---|---|---|---|
| Local App processing | Files, folders, paths, contents, archive passwords, scan results, and task history you select or authorize | The relevant App's compression, extraction, preview, integrity checking, salvage, space analysis, large-file and duplicate-file identification, moving to Trash, and local calculation | Provided by you and processed only on the Mac; not automatically uploaded to us |
| Website access | IP address, time, requested path, client type, response status, security events | Page delivery, availability, troubleshooting, and abuse prevention; necessary for the network service | Automatically generated by the browser and network infrastructure |
| Feedback and cases | Full name and email for the website Contact us form; email for in-app feedback; issue category, title, details, reproduction steps, App/system/architecture/language and the relevant product entitlement snapshot (free or pro for Better Cleaner), correspondence | Verify control of the email, diagnose and answer the request, and handle disputes; full name, email, and text are necessary for the website form | Submitted by you and stored in the support-case database; email is encrypted and queried by HMAC; authorized support staff access it as needed |
| Optional support attachments | PNG/JPEG images affirmatively selected in the website Contact us form; PNG of the relevant App content window, including Better UnArchiver or Better Cleaner; and a fixed-structure redacted diagnostics ZIP | Help diagnose an issue; entirely optional and refusing does not block text feedback | You preview and separately consent to every upload to private object storage; consent is not remembered and the server validates and normalizes the file |
| Local diagnostics | Event code, component, phase, error code, duration, format, file count, coarse size bucket, and environment snapshot | Local troubleshooting and user-requested export | Where diagnostics exist, retained only on the Mac for up to seven days and 10 MiB; detailed mode, where offered, lasts no longer than 30 minutes. Better Calc Pro has no diagnostics subsystem. Better Recorder Pro diagnostics are off by default, capped at 10 MB, and deleted when switched off. Prohibited fields are excluded |
| App Store entitlement (only for a product that offers purchases) | StoreKit-verified product, transaction status, and entitlement result | Used to unlock Pro, restore purchases, and respond to refund status; necessary to perform the purchase; Better Cleaner offers a paid Pro subscription | Provided by Apple; we do not receive Apple ID or full payment-card data |
| Direct web sale | Email, order/transaction ID, product, Offer, amount and currency, payment and refund status | Checkout, delivery, reconciliation, refunds, tax, and disputes; necessary after direct sales are enabled | Provided by you and the payment provider; card numbers and security codes do not enter BetterMac systems |
| License and device | License status and product scope, device limit, pseudonymous device digest, activation, last-use time, deactivation events | Issue and verify Licenses, count a shared device pool, prevent abuse, and provide support; necessary for a Direct License | The app sends the needed binding; the server stores a digest or pseudonymous form |
| Recovery | Email, token/challenge/session digests, CSRF data, IP digest, operation time, masked License and device data | Verify control, prevent replay and unauthorized access, display and deactivate devices; necessary for recovery | Generated by you and the system; raw tokens are transient and consumed by design |
| Security and audit | Actor, target, action, result, time, support case and reason, IP digest | Access control, incident investigation, audit, and accountability | Generated by the system and administrator actions; ordinary audit excludes keys, raw fingerprints, and authentication secrets |
3. Sensitive personal information
Direct-order, refund, or payment status may relate to personal property information and require stricter protection. We do not plan to store full card numbers, security codes, online-banking passwords, biometrics, precise location, address books, or archive contents. Before any sensitive personal information is handled, we will explain its necessity and impact, apply strict safeguards, and obtain separate consent where required.
4. Recipient inventory
| Recipient category | Entity/region | Information and purpose | Status |
|---|---|---|---|
| Apple | As published by Apple | App Store purchase, refund, and StoreKit entitlement verification | In use; Apple independently processes payment-account information under its rules |
| Website and database hosting | Alibaba Cloud (Singapore) Private Limited (Alibaba Cloud International contracting entity) | Website requests, security logs, support-case database name, email, message text and status, and Direct License data | Processor; data stored in Japan, remote administration from Mainland China |
| Email service | Alibaba Cloud (Singapore) Private Limited, using Alibaba Cloud DirectMail | Support email, Magic Links, and License delivery | Processor; sending infrastructure in Japan |
| Private object storage | Alibaba Cloud (Singapore) Private Limited, using Object Storage Service | Store website PNG/JPEG images, App-window screenshots, and diagnostic packages submitted with consent | Processor; objects stored in Japan; private bucket, server-side AES-256 encryption with provider-managed keys, short-lived signed downloads |
| Better Calc Pro exchange rates | api.frankfurter.dev, independent third-party service hosted in the EU | Base currency code and connection metadata including the IP address; returns European Central Bank reference rates | Only when currency conversion is opened or rates are refreshed |
| Direct payment | Not applicable | Order, payment, refund, tax, and fraud prevention | Web checkout disabled |
We will update this list when a recipient is added or a purpose materially changes. A disclosure, joint handling arrangement, or cross-border transfer will follow the applicable notice, contract, assessment, and consent requirements.
5. Retention schedule
| Record | Service validity | Database retention |
|---|---|---|
| Recovery challenge, Magic Link, and session | 15 minutes; a successfully exchanged token cannot be replayed | Cleared within 24 hours of expiry |
| Admin pre-authentication challenge | 10 minutes | Cleared within 24 hours of expiry |
| Admin session | 12-hour absolute maximum; expires after 30 minutes idle | Cleared within 24 hours of revocation |
| Access, security, and rate-limit records | 30 days | Consistent with Appendix C of the Privacy Policy; a legal hold for a specific security incident is recorded separately with its reason, scope, and release date |
| Unverified feedback draft and attachments | 24 hours | Deleted by the cleanup worker after expiry |
| Case Magic Link and session | Link: 24 hours and single-use; session: 30 minutes idle, eight hours absolute | Deleted by the cleanup worker after expiry |
| Support attachments | While the case is being handled; no later than five years after the most recent relevant verification or case-status update | Closure shortens the deadline to 30 days; the user can delete them earlier through the secure link |
| Case text and status | Case handling and reasonable review period | Deleted or anonymized two years after closure; a full-case privacy request may start earlier |
| Raw Apple notifications and request headers | No more than 30 days | Deleted by the Apple-provider cleanup task |
| Apple purchase, renewal, refund, and revocation facts | No more than three years | A pending dispute or legal requirement may extend retention; StoreKit alone controls the on-device entitlement |
| Direct orders, refunds, Licenses, activations, and audit | Contract performance, entitlement verification, tax, audit, and disputes | License and device records: 3 years after termination, refund, or the end of the relationship; high-risk administrative actions and security-incident audit: 3 years; transaction and invoice vouchers: 10 years from the end of the relevant tax year, and 30 years for vouchers forming part of statutory accounting records |
6. Automated decisions and marketing
We currently do not use personal profiles for differential pricing, targeted advertising, or another automated decision with a significant effect on an individual. Security rate limits and License states use fixed rules. If a result appears wrong, support can perform a manual review. Any future marketing or profiling will be disclosed with an opt-out before it is enabled.
7. Rights request process
- Email support@bettermac.net and identify the request type and product.
- We request only the verification necessary to complete the request and do not require unrelated identity documents.
- After verification, we respond within the period required by law or a reasonable period. If a request cannot be fulfilled, we explain why and identify the complaint channel.
- An authorized agent or a request involving a minor may require proof of authority or guardianship.
8. Effect of refusal or withdrawal
You may refuse non-essential processing or withdraw consent-based processing. Withdrawal does not affect prior lawful processing. Refusing logs or screenshots does not block text feedback. Without an email address, online-case verification, direct delivery, or recovery cannot be completed. Rejecting essential session cookies prevents the secure case page or recovery from working but does not prevent access to public help.
9. Contact and complaints
Personal information handler: Beijing Habitai Technology Co., LtdPrivacy email: support@bettermac.net
Postal address: Room CG05-172, Building 8, Courtyard No.1, Zhongguancun East Road, Haidian District, Beijing, China. Responsible person: no separate personal information protection officer is appointed at present; privacy matters are handled through the email address above