How we use your data and lawful bases
We process your personal data only where we have a lawful basis to do so under Article 6 GDPR :
Delivering the Service (account, journal, analytics)
Article 6(1)(b) — performance of the contract with you.
Billing, invoicing, tax compliance
Article 6(1)(b) and 6(1)(c) — handled by Paddle as Merchant of Record.
Security, fraud prevention, audit logs
Article 6(1)(f) — our legitimate interest in protecting the Service.
Transactional email (receipts, password reset, critical notices)
Article 6(1)(b) — performance of the contract.
Customer support
Article 6(1)(b) and 6(1)(f).
Responding to legal or regulatory requests
Article 6(1)(c) — legal obligation.
We do not currently run analytics cookies, advertising cookies, or any third-party tracking. If we add any in the future, we will update this Policy and obtain your consent where required.