Tidelist privacy policy and your data rights

This policy explains how we handle personal data when you use tidelist.app, buy Tidelist Pro or contact us. It is a draft that the company and its lawyer have not approved yet.

1. Controller

Hawk Minds Ltd. (Хоук Майндс ООД), company number 205119042, 19a Pushkin Str., Velingrad, Bulgaria. Privacy contact: [email protected].

2. What the Tidelist plugin itself collects

The plugin collects no personal data about your customers or the visitors of your shop and sends none to us. When you publish or update an advert, the plugin sends the product data and the contact name, phone number and city that you entered to the OLX site you connected. That transfer is between you and OLX and follows OLX’s terms.

3. What we collect, why, and on what basis

Data	Purpose	Legal basis
Name, e-mail, company, VAT ID, billing address, payment and tax details	Sell and deliver Tidelist Pro, issue invoices, keep accounts	Contract; legal obligation (tax and accounting law)
Licence key (stored as a hash), activated site addresses, WordPress, PHP and plugin versions	Check the licence, deliver updates, limit the number of sites	Contract; legitimate interest in protecting the licence
E-mail and message in the contact form, support e-mails	Answer your question	Legitimate interest; contract
Sign-in e-mail and session cookie	Let you into your account	Contract
Visit statistics (Google Analytics)	Understand which pages help	Your consent
Server logs (IP address, time, page)	Security and reliability	Legitimate interest

4. Who receives data

• Stripe (payments).
• Resend (e-mail delivery).
• Railway (hosting of the licence server and its database).
• Cloudflare (website hosting, file storage, contact form check, e-mail routing).
• Google (Google Analytics, only with your consent).
• Our accountant and legal advisers, where needed.

These providers process data on our behalf under data processing terms. Some are based outside the EU; transfers use the safeguards the GDPR requires, such as standard contractual clauses. [Owner: confirm the hosting regions.]

5. How long we keep it

• Invoices and accounting records: for the period required by Bulgarian tax and accounting law.
• Licence and customer account data: while your account exists and for the limitation period afterwards.
• Contact messages: up to 24 months after the last message.
• Analytics: 14 months.

6. Your rights

You can ask us for access to your data, correction, deletion, restriction, a copy in a common format, and you can object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time with the “Cookie settings” link in the footer. Write to [email protected].

You can complain to the Bulgarian Commission for Personal Data Protection (КЗЛД, cpdp.bg) or to the authority of your country.

7. Cookies

See the cookie policy.

8. Changes

We publish changes on this page with the date of the change.