Innomated B.V., trading as PVA Tool (“PVATool”, "us", "we", or "our"), Pietersbergweg 291, 1105 BM Amsterdam, The Netherlands, registered with the Dutch Chamber of Commerce under number 83247092 and with VAT number NL862790979B01, is responsible for the processing of personal data described in this privacy policy and for pvatool.com.
We understand your privacy is of critical importance. In this privacy policy you will find information about your rights with regard to your data and how you can make use of those rights. We also inform you on how cookies are collected, processed and stored and for what purposes this is done.
The privacy policy may at times be edited, because of legislative changes for example. It is therefore advised to consult this privacy policy periodically. This privacy policy has lastly been updated on 20 October 2026.
Personal data that we process
When you buy a licence, register, use PVA Tool or contact us, we process personal data (“Personal Data”). This is what we process and where it comes from.
Your account and purchases
- your name, e-mail address, country and address, and your VAT number if you give one;
- your purchases, licences, invoices and payments, including the payment method, the IP address you paid from and, if you give it, your phone number;
- for subscriptions that renew automatically: proof of your agreement, namely the text you agreed to, the time, your IP address and your browser;
- the versions of our terms you accepted and when.
Your licence and computer
- your licence key and install keys;
- to check that a licence is used on the computers it is meant for, PVA Tool sends us codes derived from your computer's name, network adapters, BIOS version, processor, disk and installation folder. These are scrambled (hashed) on your computer first, so we never receive the values themselves;
- when you confirm the yearly licence statement in PVA Tool: the time, the PVA Tool version and scrambled codes of your Windows computer name and user name;
- when you link Discord to your licence: your Discord user ID and username.
Your use of PVA Tool
PVA Tool sends us the results of the accounts you create and the tasks you run. We need these to deliver the service, count your usage and keep the SMS and proxy providers working. They include the e-mail address or username of the account, the phone number used and the SMS provider, the country, the result or error, and the browser and Windows version. When you use a PVA Tool proxy, they also include that proxy's IP address. Of your own proxies we only receive the country.
Failure reports
The setting “Report failures (required for support)” is switched on by default. You can switch it off during installation or in the General settings of PVA Tool. While it is on, PVA Tool sends us a report when a task or account creation fails, so we can find and fix the cause and help you when you contact support. A failure report contains your licence ID, the error, the page address and the log of the run, and can include a screenshot of PVA Tool's built-in browser and the HTML of that page. Logs, screenshots and pages can contain data of the accounts you work with, such as e-mail addresses, recovery e-mail addresses, phone numbers, verification codes and passwords.
Partner programme
If you apply as a partner: your name, e-mail address, how you will promote PVA Tool, your payout method and PayPal e-mail address or wallet address, the time, IP address and browser with which you accepted the partner terms, and the sales made through your link. You only see the customers you referred as a masked e-mail address.
Task Market
Your purchases, credit balance, top-ups and withdrawals, and the IP address and browser with which you made them. We do not share your details with the authors of the tasks you buy.
Our website
The IP address and browser you visit our website with, which we use for security and to prevent abuse. With your permission, Google Analytics and Microsoft Application Insights measure how you use our website, see ‘Cookies’ below. Also any other personal data that you give us yourself, for example when you contact support.
For what purpose and on what basis we process personal data
- To provide the service you bought: your account, licences, PVA Tool and its results, payments, invoices and support. The basis is our agreement with you.
- To keep invoices and payment records, as Dutch tax law requires. The basis is a legal obligation.
- To protect PVA Tool and our customers against fraud, abuse and licence sharing, to prove what you agreed to, and to find and fix faults through failure reports. The basis is our legitimate interest in a secure and working service. You can object to this, and switch failure reports off yourself.
- To run the partner programme and pay commissions. The basis is our agreement with the partner.
- To measure the use of our website with optional cookies, and to send you newsletters. The basis is your consent, which you can withdraw at any time.
We will use your e-mail address for marketing only if you have indicated that you wish to receive such messages. If you no longer wish to receive them, you can contact us using the contact details at the end of this privacy policy, and we will unsubscribe you as soon as possible. We do not process your Personal Data for other purposes.
Sharing of personal data with third parties
We only share Personal Data with the companies below, and only as far as needed for what they do for us:
- Stripe, for card payments, refunds and fraud detection (privacy policy);
- NowPayments, only for custom invoices paid in USDT (privacy policy). Other crypto payments go through a payment server we run ourselves;
- PayPal, to pay partner commissions (privacy policy);
- Mailjet, for sending e-mails about your licence and newsletters (privacy policy);
- Proton, which hosts our mailbox and sends our other e-mails (privacy policy);
- Cloudflare, for the security and protection of our websites and services (privacy policy);
- Microsoft, which stores our databases and files on Azure in the United States (East US) and runs Application Insights (privacy statement);
- InterServer, which hosts the servers that run our website and PVA Tool's services in New York, United States (privacy policy);
- Google, for Google Analytics and for reCAPTCHA, which protects our login, password reset and partner application forms against bots (privacy policy);
- Discord, where we give support and which our bot uses to link your licence (privacy policy);
- Telegram, which delivers internal alerts to our team that can include your e-mail address and customer number (privacy policy).
Our servers and databases are in the United States, and some of these companies also process data outside the European Economic Area. Where that happens, the transfer is covered by an adequacy decision of the European Commission, such as the EU-U.S. Data Privacy Framework, or by the European Commission's standard contractual clauses. Other than that, we will not provide your Personal Data to other parties, unless the law requires us to.
How long we keep Personal Data
- the results of accounts and tasks, and failure reports with their screenshots, pages and logs: 2 months;
- clip-test results: 6 months;
- security statistics of licence checks: 6 months;
- the yearly licence statement: until 12 months after your licence ends;
- invoices and payment records: 7 years, as Dutch tax law requires;
- your account, licences and partner details: as long as you have an account. When you ask us to delete your account, we delete these details, except what we must keep for the tax authorities;
- cookies: as described under ‘Cookies’ below.
Cookies
pvatool.com uses cookies and similar technologies ("cookies"). A cookie is a small text file that is stored on your computer, tablet or smartphone when you visit our website. We do not use cookies for advertising. Below is described which cookies are used.
Necessary cookies
These cookies are needed for the website to work and to keep your account secure, so they are always set:
- .AspNetCore.Identity.Application and related sign-in cookies keep you signed in, until you sign out or for up to 14 days when you choose to stay signed in;
- .AspNetCore.Antiforgery.* protects our forms against misuse by other websites, until you close your browser;
- PHPSESSID carries a short message from one page to the next, for example after you submit a form, until you close your browser;
- .AspNet.Consent remembers that you allowed optional cookies, for 1 year;
- pvt_cookies remembers that you chose only necessary cookies, for 180 days.
Optional cookies
The partner referral cookie and the cookies of Google Analytics and Microsoft Application Insights, described below, are optional. Visitors from the EU, the EEA and the UK only get them after they allow them. Visitors from elsewhere can refuse them in their browser settings.
Partner referral cookie
When you arrive through a link of one of our partners, the cookie pvt_ref remembers that partner's code and the time of your visit, for up to 30 days. If you buy a licence in that time, the partner receives a commission; you pay the same price. The cookie holds no personal data. Without the cookie, the partner's code stays in the address of the pages you open during that visit, so a licence you buy then is still credited to the partner; nothing is stored on your device for this.
Stripe
The earlier mentioned payment provider Stripe may also store cookies in order to collect payment, detect and prevent fraud and track customer behaviour. Their cookie policy can be found here.
Google Analytics
Google Analytics collects (anonymous) data on visitor behaviour on the website. This way we can see how visitors navigate through the website. We use this information to optimize the operation and design of our website. Its cookies, _ga and _ga_*, are kept for up to 2 years.
Google may provide this information to third parties if Google is legally required to do so, or insofar as third parties process the information on Google's behalf. We have no influence on this. We have not allowed Google to use the analytics information obtained for other Google services.
The information that Google collects is made anonymous as much as possible; Google Analytics does not store your IP address. The information is transferred to and stored by Google on servers in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework.
Microsoft Application Insights
Microsoft Application Insights measures how our pages load and perform and which errors occur in your browser. Its cookies are ai_user, kept for 1 year, and ai_session, which ends after 30 minutes without activity.
Prevent use of cookies
You can opt out of cookies by setting your internet browser so that it no longer stores cookies. In addition, you can also delete all information that were previously saved via the settings of your browser. It is possible that in that case you will not be able to use all functions of our website anymore.
Google also offers a browser add-on that stops Google Analytics on all websites you visit, not just this one: https://tools.google.com/dlpage/gaoptout.
Children under 16
We do not intend to collect data about visitors of the websites who are younger than 16 years of age, unless they have permission from parents or guardians. Since we cannot check whether a visitor is older than 16, we advise parents and guardians to be involved in the online activities of their children, to prevent that data about children is being collected without parental consent. In the event that you are under the impression that we have collected personal information about a minor without parental permission, please contact us via our contact details at the bottom of this page. We will then remove this information.
How we protect Personal Data
pvatool.com takes the protection of your data seriously and takes suitable and appropriate security measures to prevent abuse, loss, unauthorized access, unwanted disclosure and unauthorized changes.
If you feel that your data is not properly protected or there are indications of abuse, please contact us via our contact details as stated at the bottom of this page.
View, modify or delete data
You have the right to access, correct and delete your Personal Data. In addition, you have the right to withdraw your possible consent for data processing or to object to the processing of your Personal Data by pvatool.com. You also have the right to data transferability. This means that you can submit a request to us to send the Personal Data that we hold about you in a computer file to you or another organization mentioned by you.
You can address such requests to the e-mail address at the bottom of this page, preferably from the e-mail address of your account. Only if we cannot otherwise be sure that the request was made by you will we ask you to prove who you are.
We will respond to your request as quickly as possible, in any case no later than within four weeks.
You also have the right to file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens, via autoriteitpersoonsgegevens.nl. We would appreciate it if you contact us first, so we can try to solve it together.
Questions and contact
For questions or remarks about the processing of your Personal Data or this privacy policy you can contact us via the following email address: [email protected].