Version 1.0 — Effective October 12, 2026

    Privacy Notice: Online Subscriptions to PausePlay Pro

    This notice supplements our Privacy Policy for purchasing and managing PausePlay Pro subscriptions online.

    1. Controller

    Saika Technology Services GmbH, Friedenstraße 8, 22089 Hamburg, Germany. Email: support@pauseplay.app.

    2. What we process and why

    • Salesforce organization ID, organization name, sandbox flag, the purchasing user's Salesforce user ID and the PausePlay licence ID, received from Salesforce when an administrator signs in to start a purchase or open billing: to verify who is buying for which PausePlay installation, to activate Pro for the correct licence and to prevent purchases for other organizations. Legal basis: Art. 6(1)(b) GDPR (contract and pre-contractual steps) and Art. 6(1)(f) GDPR (security and fraud prevention).
    • Billing contact name, business name, email, billing address, VAT ID, subscription and invoice history, entered by the customer in Stripe Checkout and the Customer Portal: for billing, invoicing, tax compliance and communication about the subscription. Legal basis: Art. 6(1)(b) GDPR and Art. 6(1)(c) GDPR together with tax and commercial retention duties.
    • Payment method details, entered directly with Stripe: for payment processing. We do not receive full card numbers. Legal basis: Art. 6(1)(b) GDPR.
    • Technical and audit records (timestamps, actions, results, IP addresses in provider logs): for security, troubleshooting and proof of correct licence changes. Legal basis: Art. 6(1)(f) GDPR.

    Salesforce sign-in: we use a one-time Salesforce sign-in (OAuth) only to confirm the organization, the user's PausePlay Admin permission and the PausePlay installation. The access token is used once, revoked immediately and never stored. We request no refresh token.

    3. Recipients and processors

    • Stripe (Stripe Payments Europe, Ltd., Ireland; Stripe, Inc., USA): payments, subscriptions, invoices and tax calculation. For some processing, such as fraud prevention and regulatory obligations, Stripe acts as an independent controller; see Stripe's privacy policy.
    • Supabase, Inc. (USA; data hosted in the EU, Ireland region): billing backend and database (organization, user and licence identifiers, audit records).
    • Netlify, Inc. (USA): hosting of pauseplay.app, including the billing pages.
    • Salesforce, Inc.: sign-in, and our licence management (the PausePlay licence record of your organization).
    • Resend (Plus Five Five, Inc., USA): delivery of internal operational alert emails to our own support mailbox. These contain technical identifiers only, no names, contact details, organization IDs or payment data.

    4. International transfers

    Some providers are located in the USA. Transfers rely on the EU-U.S. Data Privacy Framework where the recipient is certified, and otherwise on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).

    5. Retention

    • Invoices and accounting records: for the statutory retention periods under German commercial and tax law (§147 AO, §257 HGB).
    • Sign-in records expire after 15 minutes.
    • Verified installation records and audit records of licence changes: for the duration of the customer relationship and afterwards as long as the related accounting records are kept.

    6. Your rights

    You have the rights of access, rectification, erasure, restriction, data portability and objection (Art. 15–21 GDPR). Requests: support@pauseplay.app. You may also lodge a complaint with a supervisory authority, for example the Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI).

    7. Cookies on billing pages

    The pauseplay.app billing pages (/billing/…) set no cookies of their own. Stripe Checkout and the Customer Portal are Stripe pages and use Stripe's own cookies.

    Cookies & Privacy

    PausePlay uses essential cookies to ensure the website functions properly. No tracking or advertising cookies are used.