1. Who is responsible for your data
Digit Marketing, trading as DigitScaler, is the controller of personal data described in this Policy where we decide why and how it is processed.
- Controller
- Digit Marketing (trading as DigitScaler)
- Chamber of Commerce (KVK)
- 67540864
- VAT (BTW)
- NL002387607B20
- Registered address
- Langeveld 41, 4702 XW Roosendaal, The Netherlands
- Privacy email
- [email protected]
2. Scope and our privacy roles
This Policy applies to digitscaler.com, DigitScaler customer accounts and license services, purchases and billing information we receive, support and contact requests, product-update subscriptions, and diagnostic or service data sent directly to DigitScaler by our software.
A merchant normally controls the personal data processed inside its own WordPress or WooCommerce installation. DigitScaler does not automatically receive that store’s customers, orders, invoices, or accounting records merely because a plugin is installed. If a merchant asks us to examine store data during support, our role and obligations depend on the circumstances and any applicable data-processing agreement.
Our products may let a merchant connect its website directly to third-party services. In that situation, the merchant determines the configuration and remains responsible for its notices, lawful basis, permissions, retention, and data-subject requests for store data.
3. Personal data we collect
Depending on how you interact with us, we may collect the following categories:
- Account data, such as your name, email address, display name, password hash, account identifiers, and login or security events.
- Purchase and billing references, such as product, plan, transaction, subscription, customer, invoice, tax, payment status, and refund information received from Paddle. DigitScaler does not receive or store your complete payment-card number.
- License and activation data, such as product, plan, masked or protected license information, activation limit, entitlement status, website domain and URL, activation status, version information used for updates, and timestamps.
- Communications, such as your name, email address, subject, message, relevant license context, support history, and any information you choose to include.
- Marketing preferences, such as your email address, consent record, role or store-type selection, source, and unsubscribe status when you request product updates.
- Website and security data, such as IP address or a short-lived hashed identifier, browser and device information, requested pages, approximate location, cookie choices, and technical logs. The exact information depends on enabled hosting, security, analytics, and consent settings.
Please do not send special-category data, payment credentials, private keys, or unnecessary customer records through a support or contact form.
4. How and why we use personal data
We process personal data only when we have a lawful basis. The basis depends on the activity:
- Contract: to create and administer your account, fulfil purchases, issue and validate licenses, provide downloads and updates, manage subscriptions, and respond to support requests.
- Legal obligation: to keep required tax and accounting records, respond to lawful requests, administer consumer rights, and meet regulatory obligations.
- Legitimate interests: to secure our website and license service, prevent fraud and abuse, diagnose failures, improve current products, maintain business records, and establish or defend legal claims, where those interests are not overridden by your rights.
- Consent: to send optional product-update emails and, where required, to use optional analytics or marketing technologies. You may withdraw consent at any time without affecting earlier lawful processing.
We do not sell personal data. We do not use solely automated decisions that produce legal or similarly significant effects for you. Automated security and fraud signals may restrict a request, but material account or purchase issues can be reviewed by a person.
5. WordPress plugins, licensing, and connected services
Free DigitScaler plugin features generally run on the merchant’s own WordPress installation. Paid products contact DigitScaler’s license and update service when a license is activated, checked, deactivated, or used to request an entitled update or download. These requests may include the license key or protected activation token, product identifier, website domain and URL, installed version, and technical request metadata. We use this information to authenticate the request, enforce the purchased site limit, provide updates, prevent abuse, and keep entitlement records.
Some plugins process store information locally or send information directly from the merchant’s website to a service selected by the merchant. For example, an accounting integration may send WooCommerce order, customer, tax, and payment information to the merchant’s configured accounting provider. DigitScaler does not receive that connected-service payload unless it is deliberately supplied to us for support or the product description expressly says otherwise.
Merchants must review each product’s settings and documentation before enabling an integration or customer-facing feature. They are responsible for deciding which data is sent, configuring appropriate access, and informing their customers.
7. Service providers and when we share data
We share personal data only where needed to operate the Services, comply with law, protect rights, or complete a business transaction. Recipients may include:
- Paddle, our Merchant of Record, for checkout, payment, tax, invoicing, subscription, refund, fraud-prevention, and buyer-support services.
- Hosting, content-delivery, security, backup, email, and technical service providers used to operate digitscaler.com and deliver transactional messages.
- Cloudflare, where used for content delivery, network security, rate limiting, or Turnstile anti-spam checks.
- SendFox for consented product-update subscriptions and associated email delivery.
- Google and Meta only for optional analytics or marketing features that are enabled and permitted by your consent choice, subject to the consent-mode behavior described above.
- Professional advisers, regulators, courts, law enforcement, or counterparties when disclosure is legally required or reasonably necessary to protect rights, investigate abuse, handle a claim, or complete a merger, financing, sale, or reorganisation.
These providers may act as our processors, independent controllers, or both, depending on the service. Their own privacy notices explain their processing.
8. International data transfers
DigitScaler is established in the Netherlands. Some service providers may process data outside the European Economic Area. Where required, we rely on an adequacy decision, approved standard contractual clauses, or another lawful transfer mechanism, together with supplementary safeguards where appropriate. You may contact us for more information about the safeguards relevant to your data.
9. How long we keep data
We keep personal data only for as long as needed for the purpose collected, including to provide an active account or entitlement, meet legal and accounting duties, resolve disputes, and protect against fraud or claims. Retention is determined by the type of record, its sensitivity, contractual and legal requirements, and security needs.
- Account and active license information is generally kept while the account or entitlement is active and for a reasonable period afterward for support, security, renewal, dispute, and compliance purposes.
- Transaction, invoice, tax, refund, and core entitlement records may be retained for the period required by Dutch tax, accounting, consumer, and limitation laws. Identifiers not required for those purposes may be removed or anonymised earlier.
- Closed or spam support tickets are scheduled for deletion after 730 days by default, including their attachments. Related email copies may follow the retention settings of our mail systems.
- Short-lived security and rate-limit records expire automatically. License download tokens expire after their limited validity period.
- Product-update data is kept until you unsubscribe, withdraw consent, or the list is retired, subject to a minimal suppression record where needed to honour your opt-out.
When deletion is requested, we may anonymise license and activation records while retaining non-identifying business records needed for accounting, support history, fraud prevention, or legal claims.
10. Security
We use technical and organisational safeguards appropriate to the nature of the data and risk. Measures include access controls, encrypted transport, protected or hashed secrets, limited-use activation and download tokens, security monitoring, backups, updates, and data-minimisation practices. No online system is completely secure, so please use a unique password, protect license keys, keep your software updated, and tell us promptly about suspected unauthorised access.
11. Your privacy rights
Subject to the conditions and exceptions in applicable law, you may ask us to:
- confirm whether we process your personal data and provide access to it;
- correct inaccurate or incomplete personal data;
- delete personal data or restrict its use;
- provide data you supplied in a portable format where applicable;
- object to processing based on legitimate interests or to direct marketing; and
- withdraw consent at any time.
To exercise a right, email [email protected] or use our contact page. Tell us which right you wish to exercise and provide enough information to identify the relevant account or transaction. We may request proportionate verification and may retain information where an exception or legal duty applies. We normally respond within one month, although the law permits an extension for complex or numerous requests.
You can unsubscribe from product-update emails using the link in any such message. You can manage optional website tracking through the cookie banner or your browser.
12. Children
DigitScaler provides business and ecommerce software and is not directed to children. We do not knowingly collect personal data from children through the Services. If you believe a child has provided personal data to us, please contact us so we can investigate and take appropriate action.
13. Changes to this Policy
We may update this Policy when our products, providers, or legal obligations change. We will update the effective date above and, for material changes, provide additional notice through the website, account, or email where appropriate. The version published on this page is the current version.
14. Contact and complaints
For privacy questions or requests, contact DigitScaler at [email protected] or Langeveld 41, 4702 XW Roosendaal, The Netherlands.
You also have the right to complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or, where applicable, the supervisory authority in the country where you live or work. We would appreciate the opportunity to address your concern first.
Visit the Dutch Data Protection Authority
Use of DigitScaler products is also governed by our Terms of Service.