Privacy Policy

Last updated: 4 July 2026.

Note: this is a base template covering the data actually processed by our technical systems. Before publishing, replace [LEGAL ENTITY / TAX ID] with your real legal details and, ideally, have it reviewed by a lawyer — especially to confirm the invoicing/VAT obligations for your specific situation.

1. Who we are

[LEGAL ENTITY / TAX ID], operating under the CozyFlame brand ("we", "CozyFlame"), is the controller of the data described in this policy, relating to the apps.cozyflame.pt website and the "Candle Inventory Manager" and "Candle Inventory Manager Pro" WordPress plugins. Contact: suporte@cozyflame.pt.

2. What data we collect

2.1 When you visit this site

This site is static and uses no tracking cookies, third-party analytics or advertising pixels. Your browser may send standard technical data (IP address, user-agent) to the server via the HTTP protocol itself — this stays only in the hosting's technical logs, for security purposes, and is not processed by us for any other purpose.

2.2 When you use the Free plugin

The Free plugin does not communicate with our servers. All inventory, recipe, supplier and production data stays exclusively in your own site's WordPress database — it is never sent to CozyFlame.

2.3 When you use the Pro plugin (licensing)

To verify your license, the Pro plugin periodically sends our licensing server:

The license key
The domain of the site where the plugin is installed
An instance identifier (generated by us, containing no personal data)

We do not collect or access your store's inventory, order or customer data through this process.

2.4 When you buy a Pro license

Payment processing is handled by Paddle.com Market Ltd, which acts as Merchant of Record — meaning Paddle is responsible for billing, invoicing, VAT and payment data (card, billing address, etc.). We receive from Paddle only what is needed to issue your license: email and the subscribed plan (monthly/annual). See Paddle's privacy policy for more details on how payment data is handled.

3. Why we process this data

Contract performance — to issue, validate and renew your Pro license.
Support communication — to answer requests sent to suporte@cozyflame.pt.
Security — technical server access logs, for abuse prevention.

4. How long we keep data

License data (key, domain, email, subscription status) is kept while the license is active and for a reasonable additional period after cancellation, for support and accounting purposes. You can request deletion at any time — see section 6.

5. Who we share data with

Only with Paddle (payment processing) and our server hosting provider. We do not sell or share data with third parties for marketing purposes.

6. Your rights (GDPR)

If you are in the European Union, you have the right to access, correct, delete or export your personal data, as well as to object to its processing. To exercise any of these rights, write to suporte@cozyflame.pt. We respond within the applicable legal timeframe.

7. Changes to this policy

We may update this page occasionally. The date at the top shows the last revision.