Legal
Privacy Policy
This explains what personal data we hold, why, for how long, and what you can do about it. It is written to be read, not to be skimmed past.
1. Who is responsible
Hisham Ahmed AbdElWanis Mohamed, sole trader, is the controller of the personal data described here. Contact: hesho66@icloud.com.
2. What we hold
Account data. Your name, email address, phone number if you gave one, and a securely hashed password. We never store passwords in a form that can be read.
Business data. Whatever you put into the workspace: customers, suppliers, products, orders, invoices, payments, expenses and documents. Most of this is your company's data rather than ours, and some of it identifies individuals, which is why it is covered here.
Technical data. Sign-in times, IP address and device information, kept so that an audit trail exists and so that abuse can be investigated.
3. Why we hold it
To provide the service you asked for, which is the legal basis for most of what we do.
To take payment, to keep accounting records we are required to keep, and to prevent fraud.
To answer you when you contact us, and to tell you about changes to the service.
We do not profile you for advertising, we do not sell your data, and we do not use your business records to train anything.
4. Who else sees it
Paddle.com Market Limited processes card payments as merchant of record, so Paddle receives what is needed to take a payment and to meet its own tax duties.
Our hosting and email providers process data on our instructions so that the service can run. They are bound to use it only for that.
We disclose data if the law requires it, and we will tell you unless we are forbidden to.
5. Where it is held
Your workspace data is stored on servers inside the European Union. Some providers may process limited technical data outside it; where that happens it is covered by appropriate safeguards.
6. How long we keep it
Business records are kept while your account is open, and then for as long as tax and commercial law requires — in Germany, generally up to ten years for accounting records.
Sign-in and device logs are kept for a limited period and then deleted.
When you ask us to delete your workspace, we delete what we are not required to keep and tell you what had to remain.
7. Your rights
You may ask for a copy of your data, ask us to correct it, ask us to delete it, ask us to restrict what we do with it, and object to processing based on legitimate interests.
You may also complain to a supervisory authority. In Germany that is the data protection authority of your federal state.
To exercise any of these, write to hesho66@icloud.com. We answer within the time the law allows.
8. Cookies
The application uses only what it needs to keep you signed in and to remember your language. There are no advertising cookies and no third-party tracking scripts on this site.
9. Security
Data is encrypted in transit. Access inside the product is separated per workspace, so one customer's records are not reachable from another's, and access to production systems is limited.
No system is perfect. If a breach affects your data, we will tell you and the authority as the law requires.
10. Changes
If we change this policy in a way that matters, we will tell you before it takes effect.
Questions
hesho66@icloud.com