Privacy policy

JDX Security collects only what it needs to sell, deliver and support licences. It never receives your camera footage.

Last updated 4 October 2026. Written to the New Zealand Information Privacy Principles (Privacy Act 2020) and the Australian Privacy Principles (Privacy Act 1988).

Who we are

JDX Security, New Zealand, operates jdxsecurity.com and sells JDX Stronghold licences. Contact our privacy officer at privacy@jdxsecurity.com.

What we collect

Account: name, email address, country, and optionally company and phone. Your password is stored only as a salted hash that cannot be reversed.
Orders: the site name and machine ID you enter, the amount, the currency and the Paddle transaction number. The machine ID is a code derived from the server's hardware; it does not contain the hardware details.
Newsletter: your email address, only after you confirm it.
Support: the emails you send us and anything you attach.
Security records: the network address of each sign-in, sign-up and reset attempt, kept for up to 24 hours to stop password guessing.

What we never collect

JDX Stronghold does not send us footage, images, camera addresses, camera passwords, site plans or event records. These stay on your own machine. We do not use analytics or advertising trackers on this website.

Why we use it

To create and secure your account, and to give you the downloads.
To issue a licence for the machine you bought it for, and to move it when you replace the machine.
To answer support requests and send notices about your orders and the security of the software.
To keep tax and accounting records, as the law requires.
To send the newsletter, only if you ask for it. Every newsletter has an unsubscribe link.

Who we share it with

We do not sell personal information. We share it only with the services that run the business:

Paddle.com, the reseller that takes payment and handles tax. Paddle collects payment details itself under its own privacy policy.
Cloudflare, which hosts this website, its database and the downloads.
Resend, which delivers our emails.

These services may store information outside New Zealand and Australia, including in the United States and the European Union. We use them because they protect information to standards comparable to New Zealand and Australian law.

Cookies

This website sets one cookie, to keep you signed in. It expires after 14 days or when you sign out. Paddle sets its own cookies during checkout.

How long we keep it

Account details: until you delete the account.
Order records: seven years, as New Zealand tax law requires. When an account is deleted, its orders are kept without a link to it.
Support emails: two years after the last message.
Security records: 24 hours.

Orders placed for someone else

An installer or reseller who buys a licence for a client gives us the client's site name. Installers must tell their client that JDX Security holds the site name and machine ID to issue and support the licence, and refer them to this policy.

Your rights

See your details and change most of them on the account page.
Delete your account on the same page.
Ask for a copy of everything we hold about you, or for a correction, by email to the privacy officer. We reply within 20 working days.

If you are not satisfied with our reply, you can complain to the Office of the Privacy Commissioner in New Zealand, or the Office of the Australian Information Commissioner.

If something goes wrong

If a privacy breach is likely to cause serious harm, we tell the people affected and the Privacy Commissioner as soon as practicable.

Changes

Changes to this policy are published on this page with a new date. Significant changes are also sent to account holders by email.