Privacy notice: license site and server

Last updated: 24 October 2026. Controller: Samet Ateşen, trading as Atesen Software, Sakarya, Türkiye, support@atesensoftware.com.

This notice covers this site and its license server. The extension itself, and what it does with your QuickBooks reports, is described in the extension's privacy page: your reports never reach us.

When you buy

Paddle, the merchant of record, collects your name, e-mail address, billing address and payment details in its own checkout, under Paddle's privacy notice. Paddle tells our server the ids of your customer record, subscription and transactions, the price and the paid period. Our server asks Paddle for the e-mail address on your payment record only to send you one license e-mail (your key, a short thank-you and getting-started steps), and does not store that address.

What the license server stores

• The license key, its id, the plan, the paid-until and expiry dates, and whether it was revoked and why.
• Paddle's subscription and transaction ids and amounts, to renew the key and to apply refunds and chargebacks.
• A keyed hash of your e-mail address (HMAC-SHA256), so "Lost your key?" can find your keys. Your e-mail address itself is not stored.
• Paddle's webhook event ids, to process each event once.

The waitlist

Until online checkout opens, you can leave your e-mail address on the home page. We store the address, the plan you looked at and the date, only to write to you once when checkout opens, and delete it after a year at the latest, or earlier when you ask.

The extension's daily check

If you entered a license key, the extension sends the key, and nothing else, to this server at most once a day while you open reports. The answer is the key signed again (keys are valid for about five weeks) or a status. To limit abuse, a keyed hash of your IP address is counted for up to two days. Without a license key the extension never contacts this server.

E-mail

License e-mails are sent through Resend (Resend, Inc.) from alerts@atesensoftware.com. Resend processes the recipient address and the message to deliver it.

Hosting

The site and server run on Cloudflare (Cloudflare, Inc.) Workers and D1. Cloudflare processes connection data such as IP addresses to deliver and protect the service.

Cookies and tracking

This site sets no cookies and uses no analytics. Paddle's checkout, when you open it, runs in Paddle's frame under Paddle's notice.

How long

License records are kept while the subscription exists and deleted automatically two years after the key expires, so refunds, chargebacks and support questions can be matched. Webhook event ids are deleted after 90 days, waitlist addresses after a year. You can ask for earlier deletion.

Your rights

You can ask for access to, correction or deletion of your data, or object to its processing, by writing to support@atesensoftware.com. You may also complain to your data protection authority (in Türkiye: KVKK).

Legal bases: performing the contract (issuing and renewing your key), your consent (the waitlist), legal obligations, and our legitimate interest in preventing abuse.