Skip to content
RamBeacon

Privacy

Local monitoring. Minimal licensing data.

This policy explains what stays on your Windows machine, what the commercial website and licensing backend receive, how long we keep it, and the rights available to users in different regions.
Last updated 30 October 2026Powered by ClickMaker IT SOLUTIONS

RamBeacon is published and operated by ClickMaker IT SOLUTIONS, India (“RamBeacon”, “we”, “us”). For the purposes of the GDPR and UK GDPR, ClickMaker IT SOLUTIONS is the data controller for the website and licensing service. The monitoring database stored locally by the desktop app is controlled by you on your device. This policy covers the RamBeacon Windows application, the RamBeacon website, checkout, licensing, activation, customer accounts and support. It does not cover third-party services you use independently.

Privacy contact: rambeacon-privacy@clickmaker.in. A postal address is available on request for privacy and legal correspondence. Where an EU or UK representative is required, their details will be published here and can be requested through the same address.

1. The short version

  • Local monitoring data stays on your device. Process names, paths, resource history, cleanup records and AI cache are not sent to the licensing backend.
  • The website and licensing backend receive the information needed to sell, activate and support a license: email, optional name, product and currency, payment references, a license-scoped device hash, a device label, app version and activation timestamps.
  • Card data is handled by Razorpay. RamBeacon does not store card numbers, CVVs or banking credentials.
  • We do not sell personal information or share it for cross-context behavioral advertising. The production website currently has analytics disabled.
  • Users in the EEA, UK, Switzerland, California and India have specific rights described below.

2. Data stored locally by the desktop app

The desktop application stores settings, presets, resource history, process and event history, cleanup history, watchlist rules, diagnostic reports and an AI cache in a local SQLite database with configurable retention. These records remain on the Windows device under your user profile and are not uploaded by RamBeacon.

The optional OpenRouter API key is stored in Windows Credential Manager, not in an editable local JSON file. If you enable AI, minimized candidate metadata is sent to OpenRouter as described in the desktop documentation. Disabling AI prevents those requests. The Tab Scout browser extension communicates with the desktop app over a local loopback bridge; it does not send tab data to our servers.

3. Data we collect through the website and licensing service

When you visit the website, purchase a license, activate a device or contact us, we may process:

  • Account and order data: normalized email address, optional name, product identifier, edition, currency, amount in minor units, order status, payment status and timestamps.
  • Payment references: Razorpay order ID, payment ID, transaction and verification status, method category and refund status. Razorpay receives and processes your payment instrument under its own privacy policy. We do not receive or store full card numbers, CVVs or banking credentials.
  • License data: license identifier, license type, edition, status, issue and expiry dates, device-activation limit, a keyed hash of the license key, a short key hint, and encrypted key material for verified re-delivery. Raw license keys are not stored in plaintext.
  • Activation and validation data: a keyed hash of a client-generated device identifier scoped to the license, a device label you provide, product edition, app version, activation status and first/last validation timestamps. We do not collect invasive hardware fingerprints, raw operating-system serial numbers or full file paths.
  • Support and contact data: the name, email, topic and message you submit, plus a hashed network address used for abuse prevention. Messages are delivered to rambeacon-privacy@clickmaker.in.
  • Security and operational data: webhook event identifiers, safe failure reasons, rate-limit counters, request IDs, IP address and standard request metadata used for security, diagnostics and abuse prevention. We do not log raw license keys, passwords or payment secrets.
  • Cookies and local storage: an essential session cookie for account sign-in and a local device identifier used by the activation diagnostics page. See section 6.

4. Why we process it and our legal bases

We process personal data only for the purposes described in this policy. For users in the EEA and UK, our legal bases under the GDPR and UK GDPR are:

  • Contract: creating orders, processing payments, issuing licenses, activating and validating devices, and providing the purchased service.
  • Legitimate interests: protecting the service and our users, preventing fraud and duplicate entitlement issuance, maintaining security logs, providing support, and resolving disputes. We balance these interests against your rights and freedoms.
  • Consent: optional analytics (currently disabled), any optional marketing communication, and contact submissions where consent is the appropriate basis. You may withdraw consent at any time without affecting prior lawful processing.
  • Legal obligation: tax, accounting, consumer-protection, law-enforcement and regulatory requirements, including responding to valid legal requests.

Outside the EEA/UK, we process data for the same business purposes and in accordance with applicable local law, including the India Digital Personal Data Protection Act, 2023 where it applies.

5. Payments

Payments are processed by Razorpay. Razorpay receives the payment instrument, billing and transaction data under its own privacy policy. RamBeacon receives payment references and status needed to verify the order and issue the license. We do not store card data. USD checkout is shown only when the payment account is approved for the relevant currency and settlement.

6. Cookies, local storage and analytics

The website uses an essential, HttpOnly session cookie for account sign-in after verifying an email magic link. It is not used for advertising. The activation diagnostics page stores a random device identifier in browser local storage so the same device can be recognized during testing. The checkout flow may use browser storage to display a license key once after verification.

We do not set advertising or cross-site tracking cookies. The production website currently has analytics disabled; if analytics is enabled by the operator, it is designed to exclude license keys, device secrets, email addresses, process names and file paths. We do not sell personal information or share it for cross-context behavioral advertising, so there is no advertising opt-out to exercise. We do not use Global Privacy Control signals to permit sale or sharing because no sale or sharing occurs.

7. Sharing and service providers

We share personal data only with providers that help us operate the service, and only as needed for the purposes above. These may include:

  • Razorpay for payment processing and payment-status verification.
  • Resend (or a comparable email provider) for magic-link, license-delivery and support-notification email.
  • Cloudflare and our cloud hosting/database infrastructure provider for DNS, CDN, security and application hosting.
  • Professional advisers, auditors or authorities where required by law, or where necessary to establish, exercise or defend legal claims.

These providers process data under their own terms and, where required, data-processing agreements. We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We may disclose data if required by a valid legal request or to protect the rights, safety and security of RamBeacon, our customers or the public.

8. International transfers

RamBeacon is based in India and uses service providers that may process data in India, the United States, the European Economic Area, the United Kingdom and other countries. Where personal data from the EEA, UK or Switzerland is transferred to a country without an adequacy decision, we rely on appropriate safeguards where required, such as the European Commission's Standard Contractual Clauses and the UK Addendum, together with provider security measures. You can contact us for more information about the safeguards used for your data.

9. Retention

  • Orders, payments, licenses and tax-relevant records: retained while the account or license is active and for the period required for accounting, tax, fraud prevention, dispute resolution and legal compliance, then deleted or anonymized.
  • Activation and validation records: retained while the license is active and for a reasonable period afterward to prevent duplicate or abusive activation.
  • Webhook and security records: retained for a bounded operational period and then cleaned up or anonymized.
  • Sign-in and email tokens: short-lived and single-use; expired tokens are removed or marked used.
  • Contact messages: retained while handling your request and for a reasonable follow-up period, then deleted or anonymized unless retention is required for a legal claim.
  • Local monitoring data: retained on your device according to the desktop app's retention setting; we do not receive it.

10. Security

We use server-side validation, HTTPS in production, hashed session and email tokens, keyed hashes for license lookups, restricted administrative access, signature verification for payments and webhooks, idempotent processing, rate limiting and audit events. Recoverable license material is encrypted with keys kept outside the database. No system is perfectly secure; report suspected issues through the contact form using the security topic or email rambeacon-privacy@clickmaker.in.

11. Your privacy rights

Rights vary by jurisdiction and are subject to legal exceptions. We will not discriminate against you for exercising a privacy right.

EEA, UK and Switzerland (GDPR / UK GDPR)

  • Access, correction, deletion and restriction of your personal data.
  • Objection to processing based on legitimate interests.
  • Data portability for data you provided, where processing is based on contract or consent.
  • Withdrawal of consent at any time, without affecting prior lawful processing.
  • Complaint to your local supervisory authority; in the UK, the Information Commissioner's Office (ICO).

California (CCPA / CPRA)

California residents may request to know the categories and specific pieces of personal information collected, request deletion or correction, and request information about disclosures. We do not sell or share personal information as defined by the CPRA, and we do not use sensitive personal information for purposes requiring a limitation right. We do not discriminate for exercising these rights. You may use an authorized agent with written permission; we may verify the request and the agent's authority. We also do not disclose personal information to third parties for their own direct marketing under California Civil Code section 1798.83.

India (Digital Personal Data Protection Act)

Where the DPDP Act applies, you may request access, correction, completion or erasure of your personal data, withdraw consent, and raise a grievance with us. You may also complain to the Data Protection Board of India after using our grievance process. We respond to verified requests within the time required by applicable law.

How to exercise your rights

Email rambeacon-privacy@clickmaker.in with enough information to identify your account and the right you want to exercise. Do not send a full license key, card data or passwords. We may need to verify your identity, and we may retain data where the law requires or permits it (for example, tax records or fraud prevention).

12. Children

RamBeacon is a developer utility and is not directed at children. We do not knowingly collect personal data from children under 16 in the EEA/UK or under 13 in the United States. If you believe a child has provided personal data, contact us and we will take appropriate steps to delete it.

13. Automated decision-making

We do not use automated decision-making that produces legal or similarly significant effects. License activation and validation are automated steps required to provide the purchased service; they are not profiling for advertising or eligibility decisions about unrelated rights.

14. Changes to this policy

We may update this policy when the product, providers or legal requirements change. The latest version is published here with its update date. Material changes affecting existing customers will be communicated through the website or the email associated with the account where appropriate.

15. Contact and complaints

Privacy contact: rambeacon-privacy@clickmaker.in. You can also use the contact form and select the privacy topic. We will acknowledge and investigate complaints and respond within the time required by applicable law. If you are not satisfied, you may contact your local data-protection authority, the UK ICO, the Data Protection Board of India, or the California Attorney General/CPPA.

Related documents: Terms of service, Refund policy, and License agreement.