Privacy policy

Draft. This text waits for the owner's legal review and is not yet binding. Bracketed items are placeholders.

Who we are

[Operator: legal name, address and registration number — placeholder for the owner.]

What we keep

When you register: your organization's name, its organization id (the one your back office shows), your e-mail address, your language, and the keys we issue to you (their terms and limits). When you buy: the payment events Paddle sends us (an event id, the transaction's id, the plan and its term, and whether it was refunded or charged back), never card data. That is all.

What we do not do

No analytics, no trackers, no advertising, no cookies. The product itself sends us nothing about how you use it.

Who else sees it

Cloudflare hosts this site, sends our e-mail and runs the Turnstile check that tells people from bots on our forms. Paddle, the merchant of record, processes payments under its own privacy policy once payment opens.

How long

A registration nobody confirmed (the address and the name typed into the form) is deleted 7 days after it was made. Links in our mail stop working after 7 days (a confirmation) or 24 hours (a link to your keys) and are deleted within a day after that. Rate-limit counters, kept as hashes rather than addresses, expire within a day. A confirmed registration, its keys and its payment events are kept while your organization uses the site [and afterwards as long as the law requires for payment records — placeholder for the owner's legal review]; ask us to delete them at any time.

Your rights

Ask us for a copy of your data or for its deletion at the address on Support. [Applicable law and rights — placeholder.]