Privacy Policy

1. The short version

Paidlio runs on your machine. It does not phone home, send telemetry, or sync your data anywhere. The company that sells it collects the minimum needed to take your money, deliver your licence, and answer your support questions. That is the whole story, and the sections below are the detail.

2. What the app collects

Nothing. No telemetry, no analytics, no crash reporter, no usage tracking, no Paidlio account. Your customers, invoices and payments stay on your device, and we have no copy of them. It reaches the network at three moments only, none of which carry your business data:

• When you activate your licence key, to register the activation with Lemon Squeezy.
• When you Release a machine in Settings, to free that activation slot.
• On launch, to check whether a newer version exists. This reveals your IP address and your installed version, and you can switch it off in Settings.

If you set up email sending, the app talks to your own SMTP server directly. Those messages never pass through us.

3. What this website collects

The contact form takes your name, email address and message. Our servers keep standard logs (IP address, requested URL, timestamp, user agent) for security. Because the site is served through Cloudflare, Cloudflare also produces aggregate traffic statistics from the requests it already handles.

That measurement happens at Cloudflare's edge, not in your browser. There is no analytics script on the page, no advertising cookie and no retargeting. Fonts and animations are served from this site rather than a third-party CDN. Submitting the contact form may give you a session cookie from Cloudflare Turnstile, which is there to tell a person from a bot.

The one exception is a visit through a link from someone who recommends Paidlio. Then Lemon Squeezy's affiliate script runs, so the person who sent you gets the credit if you buy. It sets a cookie called ls_aff_ref that lasts up to 90 days, and records the visit with Lemon Squeezy under an anonymous identifier worked out from your browser. If you arrive any other way, that script never loads.

4. What buying involves

An order gives us your name, email address and country (for tax), and leaves us with a record that we issued a key to you, which is what makes support and refunds possible. We never see your card number.

Three companies are involved in selling and supporting the product, and no others. Lemon Squeezy is our merchant of record: it processes your payment, handles sales tax, VAT or GST, issues your invoice and emails your licence key. Cloudflare serves the site and screens the contact form. Resend carries your contact-form message to our support inbox. We use no email-marketing or CRM tool, and we do not sell, rent or trade your information.

5. How long we keep things

• Order and licence records: 7 years, for tax.
• Support emails: 3 years.
• Contact form messages: 1 year, unless the conversation is still going.
• Server logs: 90 days.

6. Your rights and how to reach us

Ask us to show you, correct or delete the personal data we hold about you and we will do it within 30 days, apart from the purchase and tax records we are legally required to keep. Use the contact form, which is also the place for any question about this policy. If we change it, the "last updated" date above changes, and anything material is announced on the homepage.