Privacy Policy

This Policy explains how we use personal data on tangiblewp.com and app.tangiblewp.com (the "Website") and in our Services. We are Tangible Design s.c., ul. Solarza 22 lok. 54, 35-118 Rzeszów, Poland, NIP 8133576938 ("we", "us", "our"), trading as TangibleWP. For the data described here we are the controller. For personal data processed to host and operate a website you run with Care, the applicable roles are set out in Section 5. Capitalized terms have the meaning given in our Terms of Service.

1. What we collect and why

• Account: your name, email, and a hashed password, to run your account.
• Trial: the instant trial needs no account or email; we use technical data such as your IP address to run and protect the temporary website.
• External License: the key and domain you register, to confirm your license and unlock account features.
• Payments: Paddle acts as our Merchant of Record and as an independent controller for checkout, payment processing, fraud prevention, and applicable tax obligations. Paddle provides us with certain buyer and transaction data, such as your name, billing address, email, and order and transaction details, which we need to fulfil orders, manage licenses, provide support, and keep accounting records. We do not store card details. Paddle processes payment data under its own privacy notice.
• Support: what you send us when you ask for help.
• Cookies and logs: server logs and cookies to operate and secure the Services.
• Analytics: on tangiblewp.com and in your account we use Google Analytics 4 to see which pages and buttons help people. It runs only after you accept it on the bar at the bottom of the page; until then nothing from Google is loaded. Your choice is kept in a cookie named tw_consent for six months, and you can change it by clearing that cookie. Google processes the data under its own privacy notice; we do not use it for advertising and we do not combine it with your account.

Our legal bases are: providing the Services (contract); meeting payment, tax, and accounting duties (legal obligation); securing and improving the Services and preventing abuse (legitimate interests); and consent for analytics and any marketing, which you can withdraw at any time.

2. Who we share it with

We use service providers that process data on our behalf, including infrastructure and hosting, support, analytics, and email delivery. Paddle is not one of these providers: as our Merchant of Record it acts as an independent controller and receives buyer and transaction data as described in Section 1.

3. How long we keep it

Trial and Care data are deleted within 30 days after the Trial or subscription ends, often sooner. We keep transaction and accounting records for as long as the law requires, and other data only as long as needed for the purpose we collected it.

4. Your rights

You can ask us to access, correct, erase, restrict, or port your data, object to processing, or withdraw consent, by writing to support@tangiblewp.com.

5. Care sites and your visitors

For Customer Content and personal data processed solely to host and operate a Care site, including data that the site's visitors provide, we act as a processor or, where you host a site for your own client, a subprocessor, on documented instructions from the relevant controller. We remain an independent controller for data we process for our own purposes, such as account administration, billing, service security, abuse prevention, and compliance with legal obligations.

6. Changes and contact

We may update this Policy and will update the date above. Questions: support@tangiblewp.com.