Paddle privacy

Dockline Privacy Notice for Paddle Purchases

Version dated 26 September 2026. Effective when published at getdockline.app.

1 Controller and Scope

1.1. Dockline data controller: Dmitrii Solomatin, an individual currently located at Apartment 1303, 15G Sherif Khimshiashvili Street, Batumi, Adjara, Georgia. Data contact: help@getdockline.app. Phone: +995 551 152 194.

1.2. The controller is not described in this notice as a Georgian company, registered Georgian sole trader, or residence-permit holder.

1.3. This notice covers data processed by Dockline when a person visits getdockline.app, receives product access after a Paddle purchase, creates an account, activates the app, uses Trial, contacts support, or manages a licence.

1.4. Paddle is a separate controller for checkout, payment, tax, fraud prevention, receipts, refunds, and buyer support. Paddle's Privacy Notice applies to that processing.

2 Data Processed by Dockline

2.1. Account and contact data: email address, email verification, an optional local macOS profile label, and support messages.

2.2. Order data received from Paddle: provider customer, transaction, and order references; amount and currency; status; tax and payment summary when included; payment or refund time; and paid access period. Dockline does not receive the full card number.

2.3. Licence and device data: internal customer, licence, and installation identifiers; fingerprint algorithm version; cryptographic digest of a stable Mac identifier; activation status and time; last contact; deactivation; and blocking. The server retains the digest rather than the source Mac serial number.

2.4. Trial data: whether Trial was used, its start and end, a pseudonymous device fingerprint, and the related installation.

2.5. Security data: digests of one-time codes, links, and sessions; password hash; failed-attempt count; and creation, expiry, use, and revocation times. Plain-text passwords are not stored.

2.6. Technical data: IP address, request date and time, URL, method, response code, User-Agent, and limited error logs. Raw Paddle webhooks may contain additional provider fields.

3 Purposes and Legal Grounds

3.1. Dockline processes data to deliver and restore the product, enforce the device limit, provide support, secure the account, prevent abuse, reconcile Paddle events, audit administrative changes, and comply with legal duties.

3.2. Depending on the user's jurisdiction, processing relies on performance of the software licence, legal obligations, the legitimate interests of Dockline and its users in fulfilment and security, and consent where law requires it.

3.3. Without the account email and Paddle references, Dockline cannot link or restore the purchase. Without the pseudonymous device identifier, Dockline cannot enforce Trial and active-Mac limits. The optional profile label is not required for purchase.

4 Sources and Recipients

4.1. Data comes from the user, the Dockline app, Paddle, and related payment notifications. Dockline does not buy contact lists, sell personal data, or use it for third-party advertising.

4.2. Data may be processed by Paddle for the transaction; Infomaniak for email delivery; Cloudflare for DNS, security, and Tunnel traffic; banking and network providers; and competent authorities responding to a lawful request.

4.3. Licence records are also stored in a self-hosted Keygen CE instance on the Dockline-administered MiniSolo infrastructure. Keygen CE is not a separate cloud recipient in this deployment.

4.4. These providers may process data in countries other than the user's country. Dockline uses the transfer mechanism and safeguards required by applicable law where such rules apply. The user can request available information about relevant safeguards at help@getdockline.app.

5 Cookies and Similar Technology

5.1. The buyer account uses strictly necessary secure cookies for the session and CSRF protection. Sign-in and protected actions cannot work without them.

5.2. As of this version, Dockline does not use advertising cookies or third-party behavioural analytics on the website. If that changes, this notice and any required consent mechanism will be updated before the new processing begins.

6 Retention

6.1. A one-time app sign-in code is valid for 10 minutes, a password setup or reset link for one hour, an app session for up to 30 days, and a buyer website session for up to 7 days unless revoked earlier. Expiry prevents use even if the technical record remains until scheduled cleanup.

6.2. Account, licence, device, and paid-period data are retained while needed to provide and restore access, resolve claims, and prevent repeated Trial or fraud.

6.3. Order, refund, and audit records are retained for periods required by payment, tax, accounting, fraud-prevention, and limitation rules.

6.4. Technical logs, raw webhooks, and security records are retained only as long as reasonably needed to deliver an event, investigate an error, secure the service, and audit actions. When the purpose ends, data is deleted or irreversibly anonymised unless law requires continued retention.

7 User Rights

7.1. Depending on applicable law, a user may request access, correction, deletion, restriction, objection, portability, withdrawal of consent, or information about processing and transfers. A user may also complain to the competent data-protection authority.

7.2. Send a request to help@getdockline.app. To protect the account, Dockline may ask the user to verify the account email or use another proportionate identity check. Card details and bank passwords are not requested.

7.3. Deleting an account may not immediately remove payment, tax, anti-fraud, or audit records that must or may lawfully be retained. The response will explain the reason and applicable retention period.

7.4. Requests about data collected directly by Paddle must be sent to Paddle under its Privacy Notice.

8 Security

8.1. Dockline uses role separation, password and token hashing, short-lived secrets, encrypted connections, administrative audit logs, data minimisation, and restricted production access.

8.2. No transmission or storage method removes all risk. If an incident occurs, Dockline will take action and notify users and authorities to the extent required by applicable law.

9 Changes and Contact

9.1. A new version is published at getdockline.app with a new date. A material change is not applied retrospectively to collected data without a lawful ground.

9.2. Data questions, requests, and complaints: help@getdockline.app.

Dmitrii Solomatin

Individual software supplier

Apartment 1303, 15G Sherif Khimshiashvili Street, Batumi, Adjara, Georgia

+995 551 152 194

Paddle Privacy Notice: https://www.paddle.com/legal/privacy