Privacy Policy

1. Data controller

The data controller responsible for your personal data in connection with KAJING! is: 100plugins, Daniel Schönherr, Kolonnenstraße 8, 10827 Berlin, Germany. Contact: hello@100plugins.com.

2. Data we collect

We collect and process the following data:

• Account data: email address and a hashed password when you register.
• Freemius connection: when you connect a Freemius product, we store your Freemius API token and product secret key in encrypted form (AES-256-GCM) to communicate with the Freemius API and to verify webhook signatures.
• Web Push: if you enable notifications, we store the push subscription (endpoint and keys) needed to send you browser notifications.
• Usage and logs: our hosting provider may log requests (e.g. IP, time, path) for operational and security purposes. We do not use analytics or third-party tracking scripts.

3. Purpose and legal basis

We process your data to provide the Service (account, Freemius integration, real-time dashboard, optional push notifications), to fulfil our contract with you, and where necessary for our legitimate interests (e.g. security, abuse prevention). Where we rely on consent (e.g. optional notifications or marketing), you may withdraw it at any time.

4. Retention

We retain your account and connection data for as long as your account is active. After you delete your account or ask us to delete your data, we remove or anonymise it within a reasonable period, except where we must keep it for legal obligations (e.g. tax, disputes).

5. Sharing and sub-processors

We do not sell your data. We use the following to operate the Service:

• Hosting: Render (EU). Servers process and store your data to run the application and database.
• Freemius: when you connect a product, we send requests to Freemius’ API using your stored credentials; Freemius’ privacy policy applies to their processing.

We may disclose data if required by law or to protect our rights and safety.

6. Cookies and similar technology

We use a session cookie (HTTP-only, secure in production) to keep you logged in. This is strictly necessary for the Service. We do not use marketing or analytics cookies.

7. Security

We use industry-standard measures to protect your data, including encryption of Freemius credentials at rest and HTTPS for data in transit. You are responsible for keeping your password and Freemius credentials secure.

8. Your rights

Under applicable data protection law (e.g. GDPR), you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request erasure of your data (“right to be forgotten”).
• Object to or restrict certain processing.
• Data portability, where applicable.
• Lodge a complaint with a supervisory authority (e.g. in Germany: the competent Landesdatenschutzbehörde).

To exercise these rights, contact us at hello@100plugins.com.

9. Changes

We may update this Privacy Policy from time to time. We will post the updated version on the Service and indicate the last update date. We encourage you to review it periodically.