Privacy Policy
Draft
This policy is a draft. It has not yet been reviewed for SuperDigi's business or the laws that apply, and it is not final.Last updated: [OWNER: date this policy was reviewed]
This policy explains what personal data SuperDigi.app (“SuperDigi”, “we”) collects, why, and what choices you have.
Who we are
SuperDigi is operated by [OWNER: your full legal name or company name], [OWNER: postal address], Morocco. You can reach us through the contact form.
Purchases are processed by Paddle.com Market Limited (“Paddle”), our Merchant of Record. Paddle is the seller of record for your order and processes your payment details under its own privacy policy. SuperDigi never receives or stores your card details.
What we collect and why
| Data | Why | Legal basis [OWNER: confirm with an adviser] |
|---|---|---|
| Email address, optional name | Your account, sign-in codes, order emails | Contract |
| Orders, licences and download history | Delivering your products, refunds, fraud prevention | Contract, legitimate interest |
| Sign-in sessions (a hashed, salted IP address and browser user agent) | Keeping your account secure | Legitimate interest |
| Contact form messages | Answering you | Legitimate interest |
| Newsletter subscription (only after you confirm by email) | Sending product news | Consent — withdraw any time |
| Usage events such as product views and searches (only if you allow analytics) | Improving the store | Consent |
We do not sell personal data and we do not use advertising trackers.
Cookies
| Cookie | Purpose | Duration |
|---|---|---|
__Host-sd_session |
Keeps you signed in | 30 days |
__Host-sd_cart |
Remembers your cart | 30 days |
sd_consent |
Remembers your analytics choice | 1 year |
sd_aid |
Anonymous analytics identifier — only if you allow analytics | 6 months |
Spam protection on sign-in and contact forms uses Cloudflare Turnstile.
Service providers
Cloudflare (hosting, storage, spam protection), Paddle (payments, tax, invoices), Resend (sending emails). [OWNER: confirm the list and add any other providers]
How long we keep data
[OWNER: set retention periods — e.g. order records as required for tax/accounting, analytics events for 13 months, contact messages for 2 years]
Your rights
Depending on where you live you may have the right to access, correct, delete or export your data, and to object to or restrict processing. Contact us through the contact form. [OWNER: add the supervisory authority/complaint information that applies to you (e.g. CNDP in Morocco) and any GDPR representative if required]