This policy explains what personal data paddlesubs.com collects, why, who else handles it, and what you can ask us to do with it.
Who we are
paddlesubs.com is run by Samuel Marshall, trading as PaddleSubs, in Toronto, Ontario, Canada. We are responsible for the personal data described here (its "controller", in the terms of the EU and UK GDPR). To contact us about privacy, use the contact form or write to
PaddleSubs is an independent product. It is not affiliated with or endorsed by Paddle.
What we collect and why
Your account
When you create an account, or one is created for you when you buy, we store your name, username, email address and a hashed password. We use them to let you log in, deliver what you bought and email you about your account, purchases and support tickets. Legal basis: performing our contract with you.
Purchases
Payments are taken by Paddle (see below). Paddle sends us what we need to give you access: your Paddle customer and transaction references, your email address, what you bought, when, and whether it was renewed, refunded or cancelled. From that we record your Access Subscriptions (the periods you have access for) and your licenses. We never receive or store your card or bank details. Paddle, not us, keeps the sales and tax records of your purchases. Legal basis: performing our contract with you.
Licenses and your sites
Each PaddleSubs license covers a number of sites. When you activate a site we store its domain against your license. A PaddleSubs installation that has updates enabled checks its license with paddlesubs.com about once a day, sending its Download ID, its domain and the PaddleSubs version. We use this to provide updates and support to licensed sites. Legal basis: performing our contract with you.
Downloads
When you download a release we log your account, the file, the date and time, your IP address and the referring page. We use the log to deliver downloads, to spot shared or abused Download IDs and to answer questions about your account. Legal basis: our legitimate interest in protecting the downloads you paid for.
Support tickets
Tickets keep what you write in them, any files you attach and the replies. Legal basis: performing our contract with you.
Demo sites
When you start a demo we record your account, your IP address, when the demo was requested, created and due to end, and its addresses. We use your IP address and account to enforce the demo limits (how many demos one account and one address may start a day). A demo site lasts 120 minutes and is then deleted with everything in it, including the emails caught in its demo mailbox. Please don't enter real customer data in a demo. A demo connects to your own Paddle Sandbox account, which you open with Paddle under Paddle's terms. Legal basis: our legitimate interest in offering the demo without it being abused.
Email updates
When you register, or later on your profile, you can choose to receive email updates about PaddleSubs. We store your choice and when you made it. We only send such emails if you opted in, and you can opt out at any time on your profile or with the link in any of those emails. Legal basis: your consent.
Contact form
Messages from the contact form (your name, email address, subject and message) are emailed to us, and we keep them as long as we need them to answer you. Legal basis: our legitimate interest in answering you, or taking steps you asked for before a purchase.
Server logs and security
Like any website, our web server logs requests, including the IP address, the date and time, the page asked for and the browser. We use these logs to keep the site running and secure. Legal basis: our legitimate interest in running a secure website.
Cookies
paddlesubs.com uses only the cookies it needs to work:
- a session cookie, which keeps you logged in and protects forms against forgery. It is deleted when you close your browser or log out;
- a "Remember me" cookie, set only if you tick "Remember me" when you log in, which logs you in automatically on later visits.
We don't use analytics, advertising or tracking cookies, and we don't show ads. When you open Paddle's checkout, it runs on Paddle's servers and Paddle may set its own cookies there, covered by Paddle's privacy notice.
Who else handles your data
- Paddle (Paddle.com Market Ltd and its affiliates) is the merchant of record for our sales: it runs the checkout, takes payment, handles sales tax and invoices, and processes refunds. Paddle is a controller of the data you give it at checkout, under its own privacy notice.
- Our hosting provider stores the website and its database, and the email service we use delivers our emails. They process data only on our instructions.
We don't sell your personal data or share it with anyone else, except where the law requires it.
Where your data is processed
We are in Canada, and your data is processed in Canada and in the countries where our hosting provider, email service and Paddle operate, which may be outside your own. Where the law requires it, for example for data of people in the European Union or the United Kingdom, we rely on that country's adequacy decision for Canada or on the safeguards our providers offer for international transfers.
How long we keep it
We keep your account data, purchases, licenses, download logs, tickets and demo records while your account exists, and delete them when you delete your account or ask us to. Demo sites themselves are deleted when the demo ends.
Sales and tax records are kept by Paddle, as the merchant of record, not by us. How long Paddle keeps them is set by the laws that apply to Paddle and explained in Paddle's privacy notice; deleting your account here doesn't delete them.
Your rights
You may ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to you or another service in a portable form. Where we rely on your consent, you can withdraw it at any time. You can update most of your details yourself on your profile. For anything else, contact us; we answer within one month. If you think we have handled your data wrongly, please tell us first. You can also complain to the Office of the Privacy Commissioner of Canada or, if you live in the European Union or the United Kingdom, to the data protection authority where you live.
Children
paddlesubs.com is meant for businesses and developers. It is not aimed at children under 16, and we don't knowingly collect their data.
Changes to this policy
When we change this policy we update the date at the top. If a change affects how we use data you have already given us, we will tell you by email before it applies.