Privacy for boringBar, boringbar.app, and related license services.

1. Scope and Controller

BORINGBAR LLC is responsible for the personal data described in this policy for the boringBar website, app-related services, and license-management flows that we operate.

This policy does not replace the terms or privacy notices of third parties that provide parts of the experience, including Paddle for checkout and payment administration.

2. Personal Data We Collect

Depending on how you interact with boringBar, we may collect the following categories of information:

• Contact and account information, such as your email address when you request an activation key, sign in to business license management, verify a code, or add or remove licensed users.
• Order and subscription information we receive from Paddle or otherwise maintain for license fulfillment, such as product, plan, seat count, order status, renewal status, invoice-related data, and purchase timestamps.
• Authentication and session information, including temporary tokens or verification state used for license-management access.
• Communications you send to us, if you contact us for support, billing help, or other questions.

We do not need your full payment card number to complete a boringBar purchase. Payment details are handled by Paddle during checkout.

3. How We Collect Data

We collect data directly from you when you enter it into checkout-adjacent flows, license-management forms, or support channels.

We also receive data automatically from your browser, device, or app connection when you access our website or related services, and we may receive order and billing information from Paddle so we can deliver and manage your boringBar license.

4. How We Use Personal Data

We use personal data to:

• provide boringBar, the website, activation flows, and business license management;
• send verification codes, activation emails, purchase confirmations, or license-related notices;
• fulfill purchases, maintain seat assignments, and support renewals, refunds, cancellations, or billing questions;
• secure our systems, detect abuse or fraud, troubleshoot issues, and monitor service reliability; and
• comply with legal obligations, resolve disputes, and enforce our Terms of Service.

5. Paddle and Payment Data

Paddle is our merchant of record. Paddle handles checkout, payment processing, tax collection where applicable, fraud checks, and order administration for boringBar purchases.

When you purchase through Paddle, your personal data is also processed under Paddle's own privacy policy at https://www.paddle.com/legal/privacy. We may receive transaction and customer details from Paddle that are needed to provision, support, or audit your license, but we do not process the full payment instrument details that Paddle collects to complete the transaction.

6. Sharing of Personal Data

We may share personal data with:

• Paddle, for purchase, billing, payment, refund, and subscription administration.
• Hosting, infrastructure, email, authentication, and security service providers that help us operate boringBar and related services.

We do not describe here any sale of your personal data for third-party advertising purposes.

7. Cookies and Browser Storage

We and our service providers may use cookies, local storage, IndexedDB, or similar technologies when needed to run the website, keep sessions active, secure license-management flows, or support checkout.

For example, the business license-management flow on this site stores session state in browser storage so that you can remain signed in during that session. Paddle and other third-party providers may also use cookies or similar technologies for checkout, fraud prevention, or service security.

You can usually manage cookies and browser storage through your browser settings, but doing so may break checkout or license-management features.

8. Data Retention

We retain personal data for as long as reasonably necessary to provide the service, manage licenses and subscriptions, maintain security records, comply with tax or accounting obligations, resolve disputes, and enforce agreements.

Retention periods may differ depending on the type of data and whether the information is tied to an active or historic purchase, license, or legal obligation.

9. International Transfers

Your personal data may be processed in countries other than the one where you live, including by service providers and infrastructure used to operate boringBar. Where required by law, we will use appropriate measures for those transfers.

10. Your Rights and Choices

Depending on where you live, you may have rights to request access to personal data, correction of inaccurate data, deletion, restriction, objection, portability, or withdrawal of consent where processing is based on consent.

If your request relates to data handled directly by Paddle as part of checkout or payment processing, Paddle may need to handle part of that request under its own privacy policy and legal obligations.

11. Children's Privacy

boringBar is not directed to children, and we do not intend to collect personal data from children in connection with the service.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The revised version becomes effective when posted on this page unless a later date is stated.