Privacy Policy

CommandSites (“CommandSites”, “we”, “us”), established in Romania, is the data controller for the personal data described in this notice. You can contact us about privacy at hello@notify.commandsites.com.

• Purchase and delivery data — your email address, order reference, purchase amount and currency, and your product access token. Used to deliver the toolkit, send your confirmation email, re-issue your access link and provide support. Legal basis: performance of our contract with you.
• Contact and demo requests — name, email, company and message. Used to respond to your enquiry. Legal basis: our legitimate interest in responding to enquiries, or steps prior to a contract.
• Account data (owner administration only) — email address and login credentials for the private administration area. Legal basis: contract and legitimate interest in securing our systems.
• Technical and usage data — IP address, device and browser information, download counts and error logs. Used for security, fraud prevention, abuse detection and improving the product. Legal basis: legitimate interests.

Card and billing details are collected and processed by Paddle, not by us. We never see or store your full payment card details.

• Paddle — our Merchant of Record, for the sale of the product, payment processing, tax compliance, invoicing and refunds.
• Service providers (subprocessors) — hosting, database and file storage, and transactional email delivery, acting on our instructions.
• Professional advisers — legal and accounting advisers where necessary.
• Authorities — where we are required to do so by law.

We do not sell personal data and we do not use it for third-party advertising.

Some of our providers process data outside the European Economic Area. Where that happens, transfers are protected by an adequacy decision or by Standard Contractual Clauses together with appropriate technical safeguards.

Purchase and delivery records are kept for as long as your licence and access link remain active, and afterwards for as long as required for accounting, tax and legal purposes. Enquiry correspondence is kept for up to 24 months. Technical logs are kept for a short period for security purposes. When data is no longer needed it is deleted or anonymised.

Subject to applicable law, you have the right to access your personal data, to have it corrected or erased, to restrict or object to processing, to data portability, and to withdraw consent where processing is based on consent. To exercise any of these rights, email hello@notify.commandsites.com. We will respond within one month. If you are in the EEA or UK, you also have the right to complain to your local data protection supervisory authority.

We apply appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, private (non-public) product file storage and short-lived signed download links. Administrative access is restricted to the owner account.

This website uses only essential cookies and local browser storage needed to operate the site, keep you signed in to the administration area, and complete the checkout and download flow. We do not use advertising cookies. Paddle may set cookies necessary for checkout and fraud prevention. You can clear or block cookies in your browser settings, though the checkout and download flow may then not work correctly.

We may update this notice as our product or legal obligations change. The current version is always published on this page.