This notice explains the personal information Online Property Systems collects when you register for or use the Button Studio website, why it is used, and how it is handled. The Mac and Windows desktop apps create files locally and do not send account or generation records to OPS.
1. Who is responsible
The controller is Online Property Systems Ltd (“OPS”, “we”, “us” or “our”). For privacy questions or requests, contact OPS through ops.uk.
2. Account information
To use the hosted service, you register with your name, email address, company or dealer name, and a password. We store a password hash, not your readable password. We also store whether and when your email address was confirmed, account creation and update times, and whether the account has administrator access. We use your email address to send account-confirmation and email-change links, and to identify your account when you sign in.
3. Information recorded for each website generation
When the website successfully creates a driver, we add a record to your account containing:
- your account and registered dealer or company name;
- the button name and driver version;
- the date and time of generation in Coordinated Universal Time (UTC); and
- the IP address received by the web server for the request;
- the generated driver filename and file size; and
- the Terms version accepted for that generation and the date the file is due to expire.
The site uses Cloudflare as a reverse proxy. When a request arrives from a verified Cloudflare network address, we record the visitor IP supplied in Cloudflare’s CF-Connecting-IP header. Otherwise we record the address connecting directly to the web server. Other forwarded-IP headers are ignored. If you use a VPN, proxy or network gateway, the recorded address may be that service’s address.
4. Artwork and generated driver files
Your original source image is opened and resized in your browser; the original file is not uploaded. The resized PNG images are sent to the server to create the driver. The completed archive is scanned with ClamAV and, if the scan succeeds, stored in a private server directory and associated with your account. The artwork is part of that stored driver file; we do not store a separate copy of the original source image.
You can view your driver library and download a stored file again after signing in. Driver files and their generation records are retained for up to 24 months after generation and are normally removed when that period ends. OPS may delete a stored file earlier at any time, so continued availability is not guaranteed. You can download a file again only while it remains stored. Desktop app exports remain on your computer and are not sent to OPS.
5. Why we use the information and our lawful bases
We use account information to register and authenticate you, confirm account email addresses, update account details, store your driver library and provide re-downloads. Our lawful basis for these account and service functions is that the processing is necessary to provide the service you request and administer our agreement with you.
We use generation details, IP addresses and rate-limit records to maintain a driver-generation history, help investigate support or security issues, prevent spam and misuse, and protect the website. Our lawful basis for this is our legitimate interest in operating, supporting and securing Button Studio. Rate-limit records use a keyed hash instead of storing the raw address and are deleted after 30 days.
6. Where information is kept and who can access it
Account and generation records and driver archives are kept in an access-restricted MySQL database and private file storage on the server hosting Button Studio. Your driver library is available only after you sign in. OPS administrators and hosting-provider technical staff may access information when needed to operate, maintain or secure the service. Email-delivery, web-hosting and network providers process information as needed to deliver their services. Information is not published or sold.
7. Retention
Driver archives and their generation records are retained for up to 24 months after creation and may be deleted earlier as described above. Expired records and files are removed by a scheduled server cleanup. Account details are retained while the account remains open; unconfirmed accounts are removed after 30 days. Email-confirmation links expire after 24 hours and are removed within seven days after expiry. Short-term abuse-prevention records are removed after 30 days. Standard web-server, Cloudflare and email-provider logs may be retained separately under those providers’ arrangements.
8. Your rights
Depending on the lawful basis and circumstances, you can ask to access, correct or erase your personal information, restrict or object to its use, and request a portable copy. You can update your name, company, email address and password from your Button Studio account. To request account closure or exercise another right, contact OPS through ops.uk. We may need enough information to find the relevant record and verify your request.
You can also complain to the UK Information Commissioner’s Office (ICO).
9. International access and standard provider logs
The service uses third-party hosting, network and email providers. Their technical staff may process information in connection with providing those services and may be subject to separate data-protection terms. Their systems may create standard technical and security logs under their own retention arrangements. Contact OPS through ops.uk if you need further information about the current providers and any international transfers.
10. Changes to this notice
We may update this notice as the service changes. The current version will be available from Button Studio.