Privacy Policy
Last updated: 2026.
This policy explains what Pitolet (the "Service"), operated by a sole proprietor ("we", "us"), collects, why, and your rights. We aim to collect as little as possible. We do not run ad tracking and we do not sell your personal data.
Who is responsible
The data controller is the sole proprietor operating Pitolet, based in South Africa. For any privacy question or request, contact [email protected].
What we store
| Category | What it is | Why |
|---|---|---|
| Account data | Your email and name | To create your account, authenticate you, and contact you about the Service |
| Your designs | The documents, tokens, and content you create | To provide the core Service: storing and rendering your work. Your designs are yours. |
| Usage logs | Technical logs (e.g. IP address, timestamps, actions, error diagnostics) | To keep the Service secure, reliable, and debuggable |
| Billing data | Subscription status (payment card data is handled by Paddle, not stored by us) | To manage paid plans |
Legal bases (GDPR)
- Contract — to provide the Service you signed up for (account data, your designs, billing).
- Legitimate interests — security, abuse prevention, and keeping the Service working (usage logs), balanced against your rights.
- Legal obligation — where we must retain records (e.g. tax/accounting).
- Consent — for anything optional; you can withdraw it at any time.
Processors we use
We share data only with the service providers needed to run Pitolet:
- Virtarix — hosting and storage of the Service and your designs (EU data centres).
- Paddle — payment processing and merchant-of-record for subscriptions; handles card data and tax.
- Resend — transactional email (e.g. sign-in, account, and billing notices).
These processors act on our instructions under data-processing agreements. Where data is transferred outside your region, we rely on appropriate safeguards (such as standard contractual clauses).
What we do NOT do
- No advertising trackers, no ad networks, no selling of personal data.
- No profiling of you for marketing to third parties.
Retention
We keep account data and designs while your account is active. Usage logs are kept for a limited period for security and debugging. When you delete your account (or request deletion), we delete or anonymize your personal data within a reasonable period, except where we must retain limited records to meet legal obligations.
Your rights
Subject to applicable law, you can request to access, correct, export, or delete your personal data, object to or restrict certain processing, and withdraw consent. We delete your data on request. To exercise any right, email [email protected]. You also have the right to complain to your local data-protection authority.
Self-hosting
If you self-host the open-source (AGPL-3.0) build, you operate the software and you are the controller of the data it processes. This policy covers only the hosted Service we operate.
Cookies
We use only the cookies/local storage needed to keep you signed in and to run the Service. We do not use advertising or cross-site tracking cookies.
Changes
We may update this policy; material changes will be notified through the Service or by email.
Contact
Privacy questions and requests: [email protected].