Who is responsible
CodDesk. Contact details are at the bottom of this page, and we answer data questions at that address.
What we collect
When you buy
Your name, email address, and company name if you give one. These are stored against your order so we can issue and support your licence.
We never see your card details. Payment is handled entirely by Lemon Squeezy, who act as merchant of record. Card numbers never reach our servers.
When you contact us
Whatever you put in the form: name, email, phone if given, company, sector and your message. Also your IP address and language, to help us spot automated submissions.
When your site checks its licence
The installed product periodically contacts our licence service. It sends the licence key, the domain it is installed on, the product, and the version. The server records that, along with the IP address the request came from and the time.
It does not send your site's content, your database, your customers' data, your visitors' details, or anything about how your site is used. The check confirms a licence, nothing more.
When you use the site
A session cookie, so the cart and sign-in work. There is no advertising, no tracking pixel, and no third-party analytics on this site.
Why we hold it
- To deliver what you bought and issue your licence key — performance of the
- contract between us.
- To provide support and answer your messages.
- To keep a record of licences, activations and downloads, so that a support
- or ownership question has a factual answer.
- To meet accounting and tax obligations.
Who else sees it
- Lemon Squeezy — merchant of record. They hold the payment
- record and issue your invoice, under their own privacy policy.
- Our hosting provider — stores the data as part of running
- the servers.
- Our email provider — delivers licence keys and sign-in
- links.
We do not sell your data, we do not share it for advertising, and we do not pass it to anyone else except where the law requires it.
How long we keep it
- Orders and invoices: as long as tax law requires.
- Licences, activations and download records: for the life of the licence,
- because a perpetual licence needs a permanent record.
- Contact form messages: two years, then deleted.
- Server logs: 30 days.
Your rights
You can ask us to show you what we hold, correct it, or delete it. Email us and we will answer within 30 days.
One limit worth stating honestly: we cannot delete the record of a licence that is still active without also ending the licence, because the record is what proves you own it. If you ask us to erase everything, we will explain that first and let you decide.
Security
The site and the licence service run over HTTPS. Administrator accounts require two-factor authentication. Customer accounts have no passwords at all — we email a single-use sign-in link instead, so there is no password of yours for us to lose.
No system is perfectly secure. If a breach affects your data, we will tell you.
Cookies
One session cookie, required for the cart and for signing in. It is not used for tracking and it is not shared. There are no advertising or analytics cookies, which is why this site does not ask you to accept any.
Children
These are business products. They are not directed at children and we do not knowingly collect data from anyone under 16.
Changes
If this policy changes materially, the date at the top changes with it.