In short: your files and your NAS password never leave your network. The software goes online only for payment, for a one-time free-token check using an anonymous code, and — only if it hits a problem it cannot resolve on your PC — to send a short, scrubbed technical note.
1. Who we are
NAS Salvage (“we”, “us”) operates the NAS Salvage software and the website nassalvage.com. For privacy questions, write to support@nassalvage.com.
2. What stays on your network
- Your files. Recovery runs on your PC. Files read from the NAS and the files we recover are never uploaded to us or to anyone else.
- Your NAS password. You type it into the software. It is kept in memory for the session and is never saved to disk or sent to us.
- Your NAS address and file names. They are used on your PC only, except for ordinary Latin-letter file names that can appear in a scrubbed technical note (see section 3).
3. What the software sends online
Free-token check
When you connect a NAS for the first time, the software sends an anonymous code derived from that NAS so we can give the free 1 GB once per NAS. The code is not your files, file names, passwords or network address.
Token balance and checkout
When you buy tokens, the software contacts our service to confirm the purchase and add tokens to your licence. Payment itself happens on Paddle’s checkout page.
Automated diagnostics on unresolved problems
If the software meets a problem it cannot resolve on your PC, it may send a short technical description to a diagnostic service we operate. Before sending, the software removes or replaces passwords, keys, network addresses, email addresses, account names, and any folder or file name containing non-Latin characters, and it never sends file contents. Ordinary Latin-letter file and folder names (for example IMG_1234.JPG) can remain in the note. The service may pass the note to a third-party processor for automated analysis to suggest a next step; such processors may be located outside your country, and we may keep the scrubbed note to improve the software. Suggestions are applied only when the software’s own checks accept the result.
4. Payments
Paddle is our merchant of record and is responsible for processing your payment. Paddle collects your payment details, billing information and email address for this purpose and acts as an independent controller for that data; see Paddle’s privacy notice for how it uses it. We receive from Paddle the information we need to run your licence, such as your email address, country, the products bought and the transaction reference. We do not see your card number.
5. Website
The website is served through a hosting provider that processes technical data such as your IP address and browser details to deliver pages and keep the site secure. We do not run advertising trackers. If you email us, we keep your message and address for as long as needed to answer you and keep a record of the request.
6. Why we use data, and for how long
- To deliver the Service, run your licence and tokens, and give the free allowance once per NAS — to perform our contract with you.
- To prevent abuse and keep the Service secure — our legitimate interest.
- To meet tax, accounting and legal duties — a legal obligation.
- To answer your messages — our legitimate interest, or to take steps you ask for.
We keep licence and transaction records for as long as your licence exists and as long afterwards as the law requires. Support emails are kept for as long as needed to deal with the request and any follow-up.
7. Sharing
We share data only with the providers needed to run the Service: Paddle for payments, our hosting and service providers, and third-party processors that analyse the scrubbed technical notes described above. We do not sell your data. We may disclose data if the law requires it.
8. International transfers
Our providers can be located in other countries, so data may be processed outside the country where you live. Where the law requires it, we rely on appropriate safeguards for those transfers.
9. Your rights
Depending on where you live (for example under the GDPR, UK GDPR or the Korean Personal Information Protection Act) you can ask us to give you access to your data, correct it, delete it, restrict or object to its use, and give you a copy. You can also complain to your local data-protection authority. To use any of these rights, email support@nassalvage.com.
10. Children
The Service is not meant for children under 16, and we do not knowingly collect data from them.
11. Changes
We may update this policy. The date at the top shows when it last changed, and we will tell you about significant changes in the software or on this site.