Privacy Policy
Last updated: 7 November 2026
This Privacy Policy explains what personal data OsDot Solutions (“OsDot”, “we”, “us”) collects when you visit osdots.com, create an account, buy from us, use our documentation or support, subscribe to our newsletter, or activate our software, and how we use and protect it. OsDot Solutions is based in India and is responsible (the “data controller” or “data fiduciary”) for the personal data described here.
Questions or requests: mail@osdots.com. This address is also our contact for privacy complaints and grievances.
1. Data we collect
| When | What we collect |
|---|---|
| You create an account or buy | Name, e-mail address, billing address, country, optional company name and phone number, password (stored only in encrypted, hashed form), order history, invoices, and the IP address and browser details recorded with an order |
| You pay | Payment is handled by the payment provider you choose at checkout (currently PayPal, including card payments processed by PayPal; other providers such as Stripe or Razorpay may be offered). We receive the payment status, transaction reference and the payer name and e-mail address the provider shares with us. We never receive or store your full card number. |
| You download and license software | Download records (file, time and IP address), licence keys, and activation records for Single Site and Multi Site licences: the installation identity, the host name of the activated site, the product version and the time of activation and status checks |
| You contact us or open a support ticket | Your name, e-mail address, message, any files you attach, and the related order or product details |
| You use the AI support assistant | The questions you type and the assistant’s answers, used to answer you and improve our help content. Please do not type passwords, keys or other sensitive data into the chat. |
| You subscribe to the newsletter | Your e-mail address, the time of your consent and whether you open or click our e-mails |
| You write a review or comment | Your name as shown with the review or comment, your text and rating, and your e-mail address (not published) |
| You browse the website | Pages viewed, referring site and campaign, approximate location from the IP address, device and browser type, collected through cookies and Google Analytics (see our Cookie Policy) |
| Security checks | Cloudflare Turnstile checks on our forms, and our hosting provider’s security and content-delivery network, process your IP address and browser signals to block spam and abuse |
We do not ask for sensitive personal data, and we do not knowingly collect data from children. Our store is meant for adults and businesses.
2. Data from the software you run
When you run an OsDot product on your own server, you are the controller of the personal data of your users (for example your students, clients or staff). That data stays on your server and in the third-party services you connect; OsDot does not receive it. The only data an installation sends to OsDot is the licence check of Single Site and Multi Site editions: the licence key, the installation identity, the host name and the product version. Reseller / White-Label editions make no licence check. If you give us temporary access for a paid service, we use it only to deliver that service.
If we host your site on a Hosted Plan, the data your site holds is stored on our hosting provider’s servers. You remain its controller; we act as your processor and use it only to host, back up, update and support your site, send its e-mails and give you an export. We do not use it for any other purpose. The licence check described above still applies.
3. How and why we use your data
| Purpose | Legal basis (where GDPR-style laws apply) |
|---|---|
| Creating your account, processing orders and payments, delivering downloads and licence keys, issuing invoices, managing subscriptions and renewals | To perform our contract with you |
| Validating licence activations and preventing licence abuse | Contract and our legitimate interest in protecting our software |
| Answering support requests and providing Priority Support or professional services | Contract |
| Sending service e-mails: order confirmations, licence and download information, renewal and security notices, and important changes to products or terms | Contract and legitimate interest |
| Sending the OsDot newsletter (product launches, guides and offers) | Your consent, which you can withdraw at any time with the unsubscribe link |
| Asking for a review of a product you bought | Legitimate interest; you can opt out at any time |
| Understanding how the website is used and improving it | Legitimate interest or consent, depending on your country |
| Protecting the website against spam, fraud and attacks | Legitimate interest |
| Keeping accounting and tax records and meeting legal obligations | Legal obligation |
We do not sell your personal data, and we do not use it for automated decisions that have legal or similarly significant effects on you.
4. Who we share data with
We share personal data only with service providers that help us run osdots.com, under their own privacy and security terms, and only as far as each one needs:
- Hosting and content delivery: Hostinger (website and database hosting, and its content-delivery network).
- Hosted Plans: Hostinger (VPS hosting, United States), the hosting provider of the sites we run for Hosted Plan customers, including the data those sites hold; and Amazon Web Services (United States), which stores those sites’ backups (Amazon S3) and sends their e-mails (Amazon SES).
- Spam protection: Cloudflare Turnstile on our forms.
- Payments: PayPal and any other payment provider you choose at checkout.
- File delivery: Amazon Web Services (secure storage of product downloads).
- E-mail and newsletter: Brevo (newsletter and e-mail delivery).
- Analytics: Google Analytics (Google).
- Support and AI assistant: our help-desk system runs on our own website; the AI assistant uses an AI service provider to generate answers from our documentation.
- Avatars: Gravatar (Automattic) may show a profile image for a review or comment, based on a coded form of your e-mail address.
- Videos: embedded tutorial videos are served by YouTube in its privacy-enhanced mode.
We may also disclose data when the law requires it, to protect our rights or users’ safety, or to a buyer of our business, who would have to respect this policy.
5. International transfers
We are based in India, and some of our service providers process data in other countries, including the United States and the European Union, and, for Hosted Plan sites, our hosting provider’s data centre and Amazon Web Services in the United States. Where the law requires it, we rely on safeguards such as the providers’ standard contractual clauses or equivalent protections.
6. How long we keep data
| Data | How long |
|---|---|
| Account details | Until you ask us to delete your account, and for a short time afterwards in backups |
| Orders, invoices and payment records | As long as tax and accounting law requires, usually up to 8 years |
| Licence keys and activation records | While the licence exists, and for up to 3 years after it is cancelled, to resolve licence questions |
| Hosted Plan site data (your site’s files and database) | While your plan is active, and up to 30 days after it ends so you can ask for an export; then deleted. Copies in our backups expire on their normal backup cycle, at most about 65 days later |
| Download records | Up to 3 years |
| Support tickets and AI chat transcripts | Up to 3 years after the last message |
| Newsletter data | Until you unsubscribe; then only a record of the unsubscribe |
| Analytics data | For the period set in Google Analytics, at most 14 months |
| Security logs | Up to 12 months |
7. Your rights
Depending on where you live (for example under the GDPR in the EU and UK, India’s Digital Personal Data Protection Act, or US state privacy laws), you may have the right to:
- see the personal data we hold about you and get a copy;
- correct or update it (much of it you can change yourself in My Account);
- ask us to delete it, unless we must keep it, for example for tax records or an active licence;
- object to or restrict some uses, including direct marketing;
- withdraw consent at any time, for example by unsubscribing from the newsletter;
- receive your data in a portable format;
- nominate someone to exercise your rights on your behalf, where your law allows it;
- complain to your data-protection authority.
To use these rights, e-mail mail@osdots.com from the address on your account. We reply within 30 days. We may ask you to confirm your identity first. We will not treat you differently for using your rights.
8. Security
The website uses HTTPS. Passwords are stored only as secure hashes, payments are processed by the payment providers, product files are stored privately and delivered only to entitled accounts, and access to customer data is limited to people who need it. No system is perfectly secure; if a breach affects your personal data, we will tell you and the authorities where the law requires.
Keep your account password and licence keys private. We will never ask you for your password by e-mail.
9. Cookies
We use cookies and similar technologies to run the store, keep you signed in, remember your cart, protect forms and measure visits. See the Cookie Policy for the details and how to control them.
10. Changes to this policy
We may update this policy when our services or the law change. We will post the new version here with a new date, and tell account holders by e-mail about significant changes.
11. Contact
OsDot Solutions, India · mail@osdots.com
