Desktop Privacy Policy
Version 2026-09-28 · Effective 28 September 2026
1. Scope, controller and contact
This notice covers the Ganter Lab desktop application installed on your station. Your online account, the website, hosted sign-in, subscriptions and checkout are covered by the separate Privacy Policy.
Ember Engenharia Ltda, Brazilian registration CNPJ 31.044.905/0001-97, at Av. Monteiro Tourinho 1415, Atuba, Curitiba, PR, 82600-000, Brazil, is responsible for the limited personal data the application sends off the station. Privacy requests and complaints: contact@ganterlab.com.
2. What stays on your station
- Plant configurations, devices, tags, logic, dashboards, recorded runs (Histories) and run files stay on your station unless you deliberately export, attach, or share them.
- There is no continuous telemetry: the application does not stream usage, plant data, or diagnostics in the background.
- The desktop account token is encrypted with Windows DPAPI and bound to the machine.
- The local free mode uploads no plant data.
Local station data is under your control on the machine. We do not receive plant/process configuration, recorded process data, or continuous desktop telemetry.
3. Data that leaves the station
The application contacts the online service only for the following, and each is described so you can see what is sent.
| Category | Examples | When it leaves |
|---|---|---|
| Sign-in and licence | Random station ID, station name, application version, assigned seat, last licence check, authentication result | When you sign in or the licence is verified |
| Integrator attribution | The integrator ID an administrator enters on the Account page, sent with the station registration to attribute this installation to that integrator | Only when an administrator has set an integrator ID, with the station registration |
| Update check | The application version, the update channel (regular or preview), and the type of processor and operating system. The site counts these checks per day, version and channel, and keeps neither the IP address nor any identifier of the station | When the application starts, every four hours while it runs, and when an update setting is changed |
| Optional crash report | Error, stack trace, app/OS version, diagnostics shown before sending | Only after the in-app consent, per send |
| Feedback | The message and any details you attach, an image of the station's screen when you leave the screen capture ticked, and the account the station is signed in to, if it is signed in to one | Only when you choose to send it |
| Data you export or share | Reports, backups, and files you generate | Only by your explicit action |
Sign-in and licence verification consult the online service; that account and licence data is also part of the account handling described in the site Privacy Policy. A crash report or feedback leaves the station only after the consent flow shown in the application, and its payload is displayed — and known user-profile paths removed — before it is sent. Please do not place personal or confidential plant data in free-text feedback unless it is necessary. Feedback goes with the account the station is signed in to, so that we can answer it. A station that is not signed in to an account sends it without one: the report and its image then name no account and we have no way to reply, and the IP address it came from is kept with it to hold the daily limits per address. A feedback report may carry an image of the station's screen, taken when you open the report: you see the image before sending and can untick the screen capture, and the image is sent only if you leave it ticked. It is stored with the report for as long as the report is kept, attached to the email that brings the report to us, and erased with the report and, for a report sent with an account, when that account is closed.
4. Purposes and legal bases
We use this data to run the licensed application on your station; sign you in and verify your licence; offer the updates published for your channel and count the update checks, to follow how many installations are in use; diagnose a crash you choose to report; and act on feedback you choose to send.
Depending on the jurisdiction, the basis is performance of the licence and account contract, our legitimate interest in operating and securing the software, or your consent. Consent applies to the optional crash report and to feedback; you may withdraw it prospectively, and declining does not stop the local application from working.
5. Recipients
| Recipient/processor | Purpose | Data | Processing locations |
|---|---|---|---|
| Hostinger International Ltd. (server in Boston, United States) and Cloudflare, Inc. (United States, network proxy, and storage and delivery of the installer and updates) | Sign-in, licence verification, update checks, and optional crash reports and feedback you send | Station and account identifiers, authentication result, the version, channel and system type of an update check, submitted crash report or feedback | Brazil and the United States |
The application does not send data to advertising, analytics, or marketing recipients, and it does not use payment processors — checkout happens on the website, not in the app. Vetted professional advisers and authorities may receive the minimum necessary data for law, audit, fraud prevention, or claims.
6. International transfers
Sign-in, licence verification, update checks, and any crash report or feedback you send reach the controller in Brazil and the hosting provider in Brazil and the United States. The separate consent to the international transfer of your account data, where local law requires it, is presented once when you create your account on the website — not in the application. Using the desktop only in local mode transfers no plant data.
7. Retention
- Local station data (configurations, tags, logic, dashboards, Histories, run files): kept on your station under your control; we do not hold it.
- Sign-in and licence records received by the service: retained with your account, as described in the site Privacy Policy.
- Crash reports: normally 12 months, then deleted.
- Feedback: normally 24 months counted from the date it was sent, together with any image of the station's screen sent with it; for a report sent with an account, closing the account erases the account email, the IP address and that image from it at once, and a report sent without an account is deleted with its image at the end of that period.
8. Security
The desktop account token is encrypted with Windows DPAPI and bound to the machine; crash reports remove known user-profile paths and show their payload before transmission; the online calls use TLS in transit. No system is perfectly secure. We investigate suspected incidents, contain them, and notify affected people and authorities within the deadlines required by applicable law when the risk threshold is met.
9. Your controls and rights
Local station data stays under your control: you can view, edit, export, back up, or delete it through the application. For rights over the account and the data sent to the service — confirmation and access, a portable copy, correction, deletion, restriction, objection, and withdrawal of consent — use Account → Manage → Personal data on the website or email contact@ganterlab.com. We do not discriminate because you exercised a right, and you may complain to your local privacy authority. The account-data rights, regional notices, and transfer mechanisms are set out in full in the site Privacy Policy.
10. No telemetry, automated decisions, or children
There is no continuous telemetry and no advertising or analytics in the application. We do not make solely automated decisions that create legal or similarly significant effects, and we do not use your data to train public AI models. Ganter Lab is a professional and industrial tool, not directed to children, and is not knowingly offered to anyone under 18.
11. Changes
We will post a new version and effective date before a material change to this Desktop Privacy Policy takes effect. A material change is shown again in the application's first-use screen so the station can review and acknowledge it once. A change to the site Privacy Policy does not re-prompt the station.
12. Contact
contact@ganterlab.com
Ember Engenharia Ltda · Brazilian registration CNPJ 31.044.905/0001-97 ·
Av. Monteiro Tourinho 1415, Atuba, Curitiba, PR, 82600-000, Brazil