Privacy policy

1. Data controller

The controller is the seller / operator shown in the header of this document (operation of puluno.io and related Puluno services).

Privacy contact: the same email as in the header (subject line “GDPR”).

2. Scope of processing

We process in particular:

• Identification and contact — email, name, billing address, company/VAT ID for businesses.
• Order data — product, price, license domain, payment status, invoice number.
• Technical data — IP address, server logs, session cookies, optional first-party analytics after consent.
• License data — key, site_url, product_slug on validation from WordPress (we do not receive site content).
• Communication — support and license delivery emails.

3. Purposes and legal bases (GDPR)

Processing is for:

• Contract performance and customer account (Art. 6(1)(b) GDPR).
• Legal obligations — accounting and tax records (Art. 6(1)(c)).
• Legitimate interests — security, license abuse prevention, logs (Art. 6(1)(f)).
• Consent — optional analytics cookies and marketing if enabled (Art. 6(1)(a)).

4. Recipients and processors

Data may be shared with trusted processors as needed: Stripe (payments), Resend or another email provider, VPS hosting puluno.io. We have Art. 28 GDPR agreements with processors.

We do not sell data to third parties for their marketing.

5. Transfers outside the EU/EEA

We primarily process in the EU. If a processor (e.g. Stripe or email) processes outside the EEA, we rely on adequacy decisions, standard contractual clauses or other GDPR safeguards.

6. Retention

• Billing and accounting — as required by law (typically 5–10 years).
• Licenses and customer account — for the contract term and limitation periods.
• Logs and security — usually 30–90 days unless a longer incident archive is needed.
• Marketing consent — until withdrawn or cookie expiry.

7. Your rights

You have rights of access, rectification, erasure, restriction, portability (where applicable), objection to legitimate-interest processing and withdrawal of consent.

You may lodge a complaint with your supervisory authority (in the Czech Republic: www.uoou.cz). Please contact us first — we resolve most requests directly.

8. Cookies and Explorer

Cookie details and consent are in our cookie policy. The public Explorer processes URLs you submit and technical scan results; we may store anonymised reports for share links per product settings. If you turn on site monitoring, we store your email and the site address and check the site regularly; we email you only when things get worse, and you can stop it with the link in every email.

Cookie policy →

9. Security

We use technical and organisational measures (encrypted transport, access limits, updates). No system is 100% secure — protect the email used for the portal.

10. Changes

The current version is always on this page with an effective date. Material changes are announced by email to registered customers or via a portal notice.