Privacy Policy
Last updated: July 2026 · v1.2
Data Controller
The data controller is NEVA Labs, a trading name of Danyel Castriotta, Brescia, Italy.
For any privacy matter, contact us at nevalabstrading@gmail.com or via the official NEVA Labs Patreon page.
Who We Are
NEVA Labs develops and distributes NinjaTrader 8 add-on products via Patreon. This policy explains what personal data we collect when you access our portal and how we use it.
Data We Collect
Email addressPatreon OAuth — identity verification
Patreon user IDUnique identifier for access logging
IP addressSecurity and anti-fraud logging
Machine IDAdd-on activation & anti-piracy
EULA acceptanceTimestamp and version — legal compliance
Browser / User-AgentSecurity audit trail
We do not collect payment data — all payments are handled by Patreon under their own Privacy Policy. Our website does not use tracking or advertising cookies, only technical session data strictly necessary for login.
Why We Collect It
- To verify your identity and provide access to purchased products
- To issue and renew the license of NEVA PROTECT on your computer
- To maintain audit records and detect unauthorised use
- To log EULA acceptance as legal evidence of your agreement
- To protect our intellectual property against piracy
We do not use your data for marketing or advertising.
Legal Basis (GDPR)
- Contractual necessity — to provide the service you purchased (Art. 6(1)(b))
- Legitimate interests — to protect our IP and prevent piracy (Art. 6(1)(f))
- Legal obligation — where required by law (Art. 6(1)(c))
Data Retention
- EULA & policy acceptance records — kept for 10 years as legal evidence of the agreement
- Security logs (IP, user agent, login sessions) — kept for 12 months, unless needed for an ongoing investigation of unauthorised use
- Activation data (machine ID, license records) — kept for the duration of your subscription and up to 5 years thereafter for anti-piracy purposes
When the retention period expires, data is deleted or anonymised.
Storage & International Transfers
Data is stored securely via Supabase on EU-based servers. Our website and serverless functions are hosted by Netlify, Inc. (USA); where personal data is transferred outside the EU/EEA, the transfer is protected by appropriate safeguards such as the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses.
Your Rights
Under the GDPR you have the right to access, correct, delete, export, restrict, or object to the processing of your data. To exercise your rights, contact us at the address above. EU/EEA users may also file a complaint with their national data protection authority (Italy: Garante — garanteprivacy.it).
Third Parties
- Patreon — payments & OAuth identity
- Supabase — EU-based secure database
- Netlify — website & serverless hosting
We do not sell or share your data with any other party.
Governing Law
This policy is governed by Italian law and by Regulation (EU) 2016/679 (GDPR). Mandatory consumer protection laws of your country of residence may also apply.