Privacy Policy
This draft privacy policy explains how Cookiezy processes personal data across account onboarding, billing, adapter licensing, support, feature update communication, and customer delivery. Cookiezy is a brand of Paradigma Plus d.o.o., Klopčičeva 4, 1000 Ljubljana, Slovenia, EU. This text should still be reviewed with legal counsel before public launch.
Draft policy aligned to the current Cookiezy product, billing, and adapter workflow.
Cookie banner preview
Lightweight. Fast. Clear by default.
Cookie consent. Done easy.
Lightweight consent that keeps your site fast and your data intact.
Who controls personal data for Cookiezy
For Cookiezy's own website, customer portal, billing area, and operational workflows, the controller is Paradigma Plus d.o.o., Klopčičeva 4, 1000 Ljubljana, Slovenia, EU. VAT ID: SI46492038. Contact: office@cookiezy.com.
- • Cookiezy acts as controller for personal data processed for its own marketing site, account management, billing, invoicing, licensing enforcement, support, fraud prevention, and customer communications.
- • When customers use Cookiezy on their own websites, customers are generally the controller for their end-user consent data and Cookiezy acts as a processor or service provider for the hosted components it provides.
- • Customers remain responsible for making sure they have a lawful basis, appropriate notices, and a compliant consent setup for their own end users.
What personal data Cookiezy processes
Cookiezy is designed to process only the data reasonably needed to deliver account access, billing, licensing, downloads, support, and product communications.
- • Account and identity data such as email address, full name, workspace name, login status, and profile details.
- • Billing and commercial data such as selected plan, subscription status, billing email, invoice details, payment references, credit notes, refund references, and customer communication records.
- • Licensing and operational data such as registered hostnames, site keys, license verification logs, adapter identifiers, version numbers, and last-seen timestamps for allowed domains.
- • Support and product delivery data such as download access, customer docs access, admin notes, manual access grants, and audit records of onboarding or billing actions.
- • Marketing and communications data such as feature update audience tags, email delivery metadata, and product update segmentation status where applicable.
Why Cookiezy processes personal data
Cookiezy processes personal data to operate the service, deliver purchased or manually granted access, secure the product against misuse, and communicate with customers.
- • To create and manage user accounts, authenticate users, confirm email addresses, and maintain secure access to billing and customer areas.
- • To provide trial access, paid subscriptions, complimentary or partner access, and access to downloads or customer documentation based on the applicable entitlement state.
- • To process billing, generate invoices or credit notes, deliver billing emails, reconcile payment events, and manage subscription lifecycle changes.
- • To verify that adapters are being used on permitted hostnames and within purchased or granted domain limits, including detection of invalid or expired usage.
- • To provide support, investigate incidents, enforce product terms, prevent fraud or abuse, and maintain service logs and audit trails.
- • To send transactional emails and, where permitted, product updates or feature announcements relevant to the customer relationship.
Who Cookiezy shares personal data with
Cookiezy only shares personal data where this is necessary to run the service or comply with legal obligations.
- • Infrastructure, hosting, storage, and database providers used to operate the marketing site, account area, logs, and customer delivery flows.
- • Payment and billing providers such as Revolut for subscription management, payment reconciliation, and refund handling.
- • Transactional email providers such as Resend for invoice emails, credit notes, login-related emails, and product communications.
- • Professional advisers, accountants, auditors, regulators, or law enforcement where disclosure is legally required or reasonably necessary to protect legal rights.
How long data is kept and what rights people have
Cookiezy keeps personal data only for as long as necessary for the relevant business, contractual, security, and legal purpose.
- • Account and billing records may be retained for the duration of the customer relationship and for a reasonable period afterward for security, accounting, legal, and dispute-handling purposes.
- • Invoice, credit note, and refund records may be retained for statutory bookkeeping and tax compliance periods.
- • Licensing, audit, and access logs may be retained for product security, fraud prevention, operational troubleshooting, and support purposes.
- • Subject to applicable law, individuals may have rights of access, rectification, erasure, restriction, objection, complaint, and data portability.
Privacy policy FAQ
Quick answers to the questions customers usually ask first.
Does Cookiezy store end-user consent data for customer websites?
Depending on the product setup a customer uses, Cookiezy may process consent-related records or logs as a service provider. The customer remains responsible for the notices and legal basis that apply to its own website visitors.
Why does Cookiezy log hostnames and site keys?
Cookiezy uses hostname and site-key verification to enforce trial expiry, domain limits, subscription state, and manual access grants for distributed adapter packages.
Who should privacy questions be sent to?
Privacy and compliance questions can be sent to info@cookiezy.com. Cookiezy is operated by Paradigma Plus d.o.o., Klopčičeva 4, 1000 Ljubljana, Slovenia, EU.
Is this final legal text?
No. This page is a product-aligned draft and should be reviewed and finalized with legal counsel before public launch.