Privacy Policy

Introduction

This Privacy Policy explains how Siphon Technologies (“we”, “us”), [registered address], India, collects, uses and protects your personal information when you visit siphon-tech.com or buy and use our software products. We are committed to safeguarding your privacy and ensuring you have control over your data.

By using this site, you agree to the practices described in this policy. If you do not agree, please discontinue use of the site. We are the controller of the personal data described below, except for payment data handled by Paddle, see “Payments”.

Information We Collect

Analytics Data

We use Google Tag Manager (GTM) and Google Analytics 4 (GA4) to collect usage statistics, such as page views, session duration, browser type and approximate location. This helps us understand how visitors interact with the site and improve the experience.

Analytics cookies are only set after you give explicit consent via the cookie banner that appears on your first visit. You may accept or reject analytics cookies at any time. If you reject them, no analytics cookies will be placed and no analytics data is collected.

Your consent preference is stored in a cookie named cookie_consent for one year. You can change your mind by clearing your cookies and revisiting the site.

Mailing List Data

If you subscribe to our mailing list, we collect your email address and optionally your name. We use this solely to send you updates, product announcements, and other communications you have expressly opted into.

Account Data

If you create an account, we store your email address, display name, and a hashed password (we never store plain-text passwords). Account data is used for authentication, access to your downloads and license keys, and communication regarding your account.

Purchase Data

When you buy a product, Paddle collects your name, email, billing address, country and payment details. We receive only your name, email, country and order details (product, plan, date, amount) so we can deliver your license and give support. We never see or store your card details.

Support Data

If you contact us, we keep your email address and the content of your messages so we can help you.

License Validation Data

When a product validates its license, it contacts our license server. The request contains only your license key and the URL of the site or installation where the product runs. Like any web server, ours also receives your IP address as part of the connection. We do not receive any other information from your site, such as its content, users or data, and we do not use license checks for tracking or analytics.

Payments

Our order process is conducted by our online reseller Paddle.com, the Merchant of Record for all orders. Paddle handles payment processing, taxes, invoicing and refunds. Paddle collects and processes your payment data as an independent controller under its own privacy policy: paddle.com/legal/privacy. We share your information with Paddle only as needed to process your order.

AI Features and Third-Party AI Providers

Some of our products have AI features. When you use them, the data you submit goes directly from your own site or device to the AI provider you have chosen, using your own account and API key. That data does not pass through our servers, and we do not see, store or use it. The provider processes it under its own terms and privacy policy.

How We Use Your Data

• To operate and maintain the website and its features.
• To send you emails you have subscribed to (mailing list).
• To process purchases, deliver licenses and downloads, and manage access.
• To validate licenses and prevent license sharing or fraud.
• To send service messages such as receipts, renewal reminders and update or security notices.
• To analyse usage trends via GA4, with your consent.
• To respond to support requests or account enquiries.
• To meet legal, tax and accounting obligations.

Cookies

A cookie is a small text file stored on your device. We use the following categories:

Strictly necessary cookies (session, security) are always set. All other cookies require your consent via the cookie banner.

Third-Party Services

We use the following third-party services, each of which has its own privacy policy:

• Paddle.com — payments and order handling (Merchant of Record).
• Google Tag Manager / Google Analytics 4 — analytics, only activated with your consent.
• NextAuth.js — authentication (session management). It runs on our own server and is not a separate recipient of your data.
• Prisma / PostgreSQL — database, hosted on our own server.

We do not sell your personal data or share it for advertising.

International Transfers

We are based in India, and our providers (including Paddle and Google) may process data in other countries. Where required, we rely on appropriate safeguards for those transfers.

Data Security

We implement industry-standard technical and organisational measures to protect your personal data, including:

• HTTPS encryption for all data transmitted between your browser and our servers.
• Passwords are hashed (never stored in plain text).
• Session management with secure, httpOnly cookies.
• Rate limiting and brute-force protection on authentication endpoints.

No system is completely secure, which is why we limit what we collect.

Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right to access — request a copy of the data we hold about you.
• Right to rectification — correct inaccurate or incomplete data.
• Right to erasure — request deletion of your data (subject to legal obligations).
• Right to restrict processing — limit how we use your data.
• Right to data portability — receive your data in a machine-readable format.
• Right to object — object to certain types of processing of your data.
• Right to withdraw consent — for analytics, clear your cookies or use the banner.
• Right to unsubscribe — click the unsubscribe link in any mailing list email.
• Right to complain — lodge a complaint with your local data protection authority.

Under India’s Digital Personal Data Protection Act, 2023, you can also request access, correction and erasure of your data, and nominate another person to exercise these rights on your behalf.

To make a request, email contact@siphon-tech.com. We’ll respond within 30 days. For payment data held by Paddle, you can also contact Paddle directly.

Data Retention

We retain your personal data only as long as necessary:

• Account data: until you delete your account or request erasure.
• Order and license records: 5 years after your last purchase, or as long as tax and accounting law requires.
• License validation logs: 12 months.
• Support emails: 1 year.
• Mailing list subscription: until you unsubscribe.
• Consent cookie: 1 year.
• Analytics data: raw data retained up to 14 months.

Children

Our website and products are not intended for anyone under 18, and we do not knowingly collect their data.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date, and we will email active customers about material changes.

Contact

Siphon Technologies, [registered address], India

Email: contact@siphon-tech.com