Privacy policy

What we collect, why we hold it, and how long we keep it.

Version: 2.4
Effective: 1 Aug 2026

At a glance

We never sell data: No data broker, no ad network, no exceptions.
Self-hosted analytics: Plausible on our own infrastructure, no cross-site tracking.
Global Privacy Control: Honoured, and it cannot be disabled in the EU.
Audit retention: Seven years for financial and administrative records.

What we process

Data	Purpose	Retention
Account email	Sign-in, receipts, support	Life of the account
Delivery email	Provisioning access	Life of the subscription
Name	Invoicing	7 years (statutory)
Country	Tax determination	7 years (statutory)
VAT number	EU reverse charge	7 years (statutory)
Payment token	Charging and refunds	Life of the subscription
Support messages	Answering you	3 years

What we collect

We collect the minimum needed to sell you access and support it afterwards: your name, the email you sign in with, the email access is delivered to, your country for tax purposes, and — for company accounts — the company name and VAT number.

We never store card numbers. Payment details are captured by our processor on their own hosted fields and we receive only a token and the last four digits.

Why we hold it

To provision your access, to invoice you correctly, to meet tax and accounting obligations, and to answer you when you contact support. We do not profile you and we do not use your data to train models.

Your rights

You can request a copy of your data, correct it, or ask us to erase it. Erasure removes your profile and preferences; financial records we are legally required to retain are kept for the statutory period and nothing more.