1. Information we may process

When you visit the ODRE PQC website, ordinary web-server logs may record information such as IP address, user agent, request timestamp, requested path and technical error details.

When you purchase ODRE PQC Production, Paddle processes customer and payment information needed to complete the transaction as Merchant of Record. ODRE AI does not directly store full payment-instrument details such as complete card numbers.

For license operations, we may process the minimum information reasonably needed to identify and maintain a commercial entitlement, such as an email address, Paddle customer/subscription/transaction identifiers, purchased Unit quantity, plan, transaction references and license status.

For the separate 14-day free product evaluation, limited identification or activation-related information may be used to reduce duplicate Trial use. We do not describe or expose internal security mechanisms through this policy.

Device registration and entitlement checks may involve installation/device identifiers, public keys or their identifiers, and Device proof results. Activation and Trial/Paid status, Unit allocation, and Lease issuance, renewal and expiry records are used to operate licenses and prevent duplicate use.

2. Why we use this information

  • Verify purchases, subscriptions and entitlement status.
  • Issue, activate, maintain and support licenses.
  • Limit duplicate use of the free product evaluation.
  • Operate security, fraud-prevention, troubleshooting and audit controls.
  • Meet applicable legal, tax, accounting and dispute-handling obligations.

3. No sale of personal data; marketing

ODRE AI does not sell personal data. We do not treat users as having agreed to advertising email merely because they visited the site, downloaded the product or purchased a license. Transactional, security, license-operation or support messages may still be sent when necessary to provide the service.

4. Service providers and processors

Information may be processed, where necessary, by Paddle and by infrastructure, hosting, email-delivery, security or operational service providers used to run ODRE PQC. These providers process information according to their role, applicable agreements and law.

Payment is handled by Paddle; transactional license email is delivered through Resend. Automated license messages are sent from license@mail.odreai.com, a send-only address. Support and privacy requests go to odreai2025@gmail.com. See Paddle’s privacy notice for its processing.

5. Retention

We aim to keep information only for as long as reasonably necessary for license operations, legal, tax or accounting obligations, dispute handling, security and audit purposes. When those needs end, information may be deleted or de-identified subject to applicable retention duties and backup cycles.

6. International users

ODRE PQC may be offered internationally. Payment processing and essential service delivery can therefore involve processing information outside the country where a user is located, subject to the practices and legal obligations of the relevant service provider.

7. Requests and deletion

You may contact us to ask about information associated with your ODRE PQC purchase or license and to request correction or deletion where applicable. Some records cannot be deleted immediately when retention is required for legal, tax, accounting, dispute or security purposes.

Do not send License Keys, private keys, authentication/refresh tokens or complete entitlement/device-state files in support or refund messages. For technical support, provide your product version and an error message with secrets removed.

8. First-party website statistics

We use first-party, cookie-free statistics with random visitor and session identifiers in browser-tab sessionStorage. Daily unique visitors are estimates based on a privacy-safe daily hash, not a count of identified people.

We record approved page paths, entry and previous paths, referrer hostname, source category, visible-page time, session activity, coarse device/browser/OS and screen dimensions, and separate browser, selected and displayed languages. We do not collect query strings, URL fragments, payment identifiers, emails, license credentials, form input, keystrokes or mouse movements for analytics; no advertising tracker or fingerprint is created.

Country may be estimated transiently using the network address and a local country database, without external IP lookup. Country may be unknown or affected by proxies and VPNs. Raw IP addresses and raw user-agent strings are not stored in the analytics database.

Only authenticated administrators can view statistics. The analytics database does not currently delete records automatically on expiry. You may request access or deletion using the contact below; legal retention obligations may limit deletion. Hosting and access logs are separate from this analytics database.

No analytics cookie is created. If you are signed in as an ODRE administrator in the same browser, the server uses the existing authentication cookie only to exclude your visit from these statistics. The tracker does not read or store that cookie.

We also count clicks on approved public PDF links using a fixed document identifier, document language and the screen language at click time. This measures link activations, not completed downloads or saved files. PDF URLs, query strings and link text are not stored in these click statistics.

ODRE AI does not directly store full card numbers. Paddle handles payment information required for Paddle-processed transactions as Merchant of Record.

Contact

Questions about this policy: odreai2025@gmail.com