Desktop Privacy Policy
Version 2026-07-24 · Effective 24 July 2026
1. Scope, controller and contact
This notice covers the Ganter Lab desktop application installed on your station. Your online account, the website, hosted sign-in, subscriptions and checkout are covered by the separate Privacy Policy.
Ember Engenharia Ltda, Brazilian registration CNPJ 31.044.905/0001-97, at Av. Monteiro Tourinho 1415, Atuba, Curitiba, PR, 82600-000, Brazil, is responsible for the limited personal data the application sends off the station. Privacy requests and complaints: contact@ganterlab.com.
2. What stays on your station
- Plant configurations, devices, tags, logic, dashboards, recorded runs (Histories) and run files stay on your station unless you deliberately export, attach, or share them.
- There is no continuous telemetry: the application does not stream usage, plant data, or diagnostics in the background.
- The desktop account token is encrypted with Windows DPAPI and bound to the machine.
- The local free mode uploads no plant data.
Local station data is under your control on the machine. We do not receive plant/process configuration, recorded process data, or continuous desktop telemetry.
3. Data that leaves the station
The application contacts the online service only for the following, and each is described so you can see what is sent.
| Category | Examples | When it leaves |
|---|---|---|
| Sign-in and licence | Random station ID, station name, assigned seat, last licence check, authentication result | When you sign in or the licence is verified |
| Integrator attribution | The integrator ID an administrator enters on the Account page, sent with the station registration to attribute this installation to that integrator | Only when an administrator has set an integrator ID, with the station registration |
| Optional crash report | Error, stack trace, app/OS version, diagnostics shown before sending | Only after the in-app consent, per send |
| Feedback | The message and any details you attach | Only when you choose to send it |
| Data you export or share | Reports, backups, and files you generate | Only by your explicit action |
Sign-in and licence verification consult the online service; that account and licence data is also part of the account handling described in the site Privacy Policy. A crash report or feedback leaves the station only after the consent flow shown in the application, and its payload is displayed — and known user-profile paths removed — before it is sent. Please do not place personal or confidential plant data in free-text feedback unless it is necessary.
4. Purposes and legal bases
We use this data to run the licensed application on your station; sign you in and verify your licence; diagnose a crash you choose to report; and act on feedback you choose to send.
Depending on the jurisdiction, the basis is performance of the licence and account contract, our legitimate interest in operating and securing the software, or your consent. Consent applies to the optional crash report and to feedback; you may withdraw it prospectively, and declining does not stop the local application from working.
5. Recipients
| Recipient/processor | Purpose | Data | Processing locations |
|---|---|---|---|
| Hostinger International Ltd. (server in Boston, United States) and Cloudflare, Inc. (United States, network proxy) | Sign-in, licence verification, and optional crash reports and feedback you send | Station and account identifiers, authentication result, submitted crash report or feedback | Brazil and the United States |
The application does not send data to advertising, analytics, or marketing recipients, and it does not use payment processors — checkout happens on the website, not in the app. Vetted professional advisers and authorities may receive the minimum necessary data for law, audit, fraud prevention, or claims.
6. International transfers
Sign-in, licence verification, and any crash report or feedback you send reach the controller in Brazil and the hosting provider in Brazil and the United States. The separate consent to the international transfer of your account data, where local law requires it, is presented once when you create your account on the website — not in the application. Using the desktop only in local mode transfers no plant data.
7. Retention
- Local station data (configurations, tags, logic, dashboards, Histories, run files): kept on your station under your control; we do not hold it.
- Sign-in and licence records received by the service: retained with your account, as described in the site Privacy Policy.
- Crash reports: normally 12 months, then deleted or de-identified.
- Feedback: normally 24 months after closure; de-identified product feedback may be retained.
8. Security
The desktop account token is encrypted with Windows DPAPI and bound to the machine; crash reports remove known user-profile paths and show their payload before transmission; the online calls use TLS in transit. No system is perfectly secure. We investigate suspected incidents, contain them, and notify affected people and authorities within the deadlines required by applicable law when the risk threshold is met.
9. Your controls and rights
Local station data stays under your control: you can view, edit, export, back up, or delete it through the application. For rights over the account and the data sent to the service — confirmation and access, a portable copy, correction, deletion, restriction, objection, and withdrawal of consent — use Account → Manage → Personal data on the website or email contact@ganterlab.com. We do not discriminate because you exercised a right, and you may complain to your local privacy authority. The account-data rights, regional notices, and transfer mechanisms are set out in full in the site Privacy Policy.
10. No telemetry, automated decisions, or children
There is no continuous telemetry and no advertising or analytics in the application. We do not make solely automated decisions that create legal or similarly significant effects, and we do not use your data to train public AI models. Ganter Lab is a professional and industrial tool, not directed to children, and is not knowingly offered to anyone under 18.
11. Changes
We will post a new version and effective date before a material change to this Desktop Privacy Policy takes effect. A material change is shown again in the application's first-use screen so the station can review and acknowledge it once. A change to the site Privacy Policy does not re-prompt the station.
12. Contact
contact@ganterlab.com
Ember Engenharia Ltda · Brazilian registration CNPJ 31.044.905/0001-97 ·
Av. Monteiro Tourinho 1415, Atuba, Curitiba, PR, 82600-000, Brazil