1. Data controller
CatSiesta LLC(“CatSiesta”) is the controller of the personal data described in this policy.
- Registered address: [Registered address]
- Privacy inquiries and rights requests: [email protected]
- Privacy contact: [email protected]
This policy applies to the same business identified by its legal name in the Terms of Use.
2. What we process and why
| When | Information | Purpose | Retention |
|---|---|---|---|
| At purchase | Information Paddle passes to CatSiesta after processing payment: email address, order number, purchase date/time and country. [Confirm which fields Paddle provides.] | License issuance and delivery, customer support and legal obligations such as tax and accounting. | Transaction records: the legally required retention period [Confirm the period under tax law in the company’s jurisdiction, Korea]; license email address: for the life of the license. |
| Licensing | Email address used at checkout. | Used to create the license, which is tied to that address. Shown in the plug-in’s information window as the Registered to address.. | For the life of the license. |
| When requesting support | Your email address, message and attachments. | To respond to your inquiry. | [Decide retention period] |
| Update notices | Email addresses of customers who opted in at checkout. | Major update and new version announcements. | Until you unsubscribe. |
Legal bases: performance of the purchase contract (licensing and support), legal obligations (transaction records) and consent (update emails). You may withdraw consent at any time without affecting your license.
Your registered email address appears in the plug-in’s information window. Sharing or publishing a screen recording may make it visible to others.
3. Who receives information
- Paddle — our Merchant of Record, handling payment, taxes, receipts and refunds. Paddle processes payment information under its own privacy policy. CatSiesta does not receive card numbers or other payment method details.
- Email providers — license delivery [Planned: Postmark, with Amazon SES as backup], support email [Planned: Google Workspace], and update notices [Planned: [email protected]]. These providers process addresses only as needed to deliver email.
- Website and installer hosting —[Planned: Cloudflare]. The scope of access-log processing, including IP addresses, is [to be confirmed].
- Professional advisers — as needed for accounting and legal advice.
- Authorities — where required by law.
For these purposes, customer data may be transferred to Paddle (UK), Postmark (US), Amazon Web Services, Google and Cloudflare. Transfer safeguards: [Confirm safeguards, such as standard contractual clauses, after providers are finalized.]
4. This website and plug-in
- This website does not use cookies, browser storage or analytics tools (as of October 17, 2026). If checkout links to Paddle, Paddle may use cookies on its checkout pages. [to be confirmed]. [After Cloudflare deployment, recheck Set-Cookie responses. Enabling Bot Fight Mode (__cf_bm), challenges (cf_clearance) or Rate Limiting (_cfuvid) may add cookies and require this statement to change.]
- PurlShift does not connect to the internet or send usage information. [Static inspection passed for 0.10.21 AU and VST3: no references to network functions or classes such as NSURLSession. Runtime behavior was not observed. Recheck each release.]
5. Your rights
You may request access, correction, deletion, restriction of processing, data portability, objection to processing or withdrawal of consent regarding your personal data. Contact [email protected] to make a request. We respond within one month and will let you know if complexity requires more time. Deleting the license email address may affect license maintenance and support; we will explain this when you request deletion. You also have the right to complain to your local supervisory authority.
6. Security
We process only the information needed, limit access to responsible personnel and share with service providers only what is needed for email delivery and payment processing.
7. Children
PurlShift is not directed to children under [Confirm age: EU 16; US 13], and we do not knowingly collect children’s personal data.
8. Changes to this policy
Changes will be published here with a new effective date. Significant changes will also be sent to the license email address.