Privacy Notice

1. Data we collect and why

• Account data (email, display name, password stored as a secure hash) — to create and run your account. Legal basis: contract.
• Preferences (language, colour scheme) — to remember your settings. Legal basis: contract.
• Subscription status (plan, trial and renewal dates received from Paddle) — to give you access to your plan. Legal basis: contract.
• Support messages — to answer you. Legal basis: contract / legitimate interest.
• Technical data (IP address, device and browser type, logs) — for security, fraud prevention and fixing errors. Legal basis: legitimate interest.

We do not sell your data and do not use it for automated decisions with legal effects.

2. Who we share data with

• Paddle.com, our Merchant of Record, for selling the product, subscription management, payments, tax compliance and invoicing. Paddle processes payment details under its own privacy notice.
• Service providers for hosting, database, authentication and email, acting on our instructions under data processing agreements.
• Professional advisers such as accountants and lawyers.
• Authorities where required by law.

3. International transfers

Some providers may process data outside the EEA. Where that happens we rely on an EU adequacy decision or the European Commission's Standard Contractual Clauses, with additional safeguards where needed.

4. How long we keep data

Account data is kept while your account is active and deleted within 30 days after you close it. Invoicing records are kept by Paddle and, where applicable, by us for 7 years as required by Belgian accounting law. Technical logs are kept for up to 90 days. Data no longer needed is deleted or anonymised.

5. Your rights

You have the right to access, correct, delete, restrict or port your data, to object to processing based on legitimate interest, and to withdraw consent at any time. Email [support email]; we reply within one month. You may also complain to the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Drukpersstraat 35, 1000 Brussels — dataprotectionauthority.be — or the authority in your own EU country.

6. Security

We use appropriate technical and organisational measures, including encryption in transit, hashed passwords, access controls and row-level data permissions, so only you can see your account data.

7. Cookies and local storage

We only use essential storage: to keep you signed in and remember your language and colour scheme. Paddle uses essential cookies during checkout. We do not use analytics or marketing cookies; if that changes, we will ask for your consent first.

8. Changes

We will post updates here and notify you of material changes.