Privacy, without unnecessary collection.

1. Who we are

D’AUBE SONNTAG is an independent digital-products and software studio operated as a sole-trader business in Vietnam. For questions about this Policy or personal data handled directly by D’AUBE SONNTAG, contact hello@daubesonntag.com.

2. Data we may collect

• Contact data: name, email address and information you provide when contacting support or submitting a form.
• Order and fulfillment data: product purchased, order reference, transaction status, license or entitlement status, delivery records and limited buyer details received from our Merchant of Record where needed for fulfillment, fraud prevention and support.
• Account data: account identifiers, settings and access records if a Product requires an account.
• Technical data: browser/device information, approximate network information, security logs, error diagnostics and basic website analytics where enabled.
• Support data: messages, attachments and troubleshooting details you send to us.

3. Paddle and payment information

Where an order is processed through Paddle, Paddle acts as Merchant of Record and processes checkout, billing, payment, tax and fraud-related information under Paddle’s own terms and privacy notices. D’AUBE SONNTAG does not receive or store complete payment-card numbers, CVV/CVC, PINs or banking authentication secrets.

Paddle may provide D’AUBE SONNTAG with buyer and transaction information reasonably necessary for product fulfillment, order processing, fraud prevention and support.

4. Why we use personal data

• to deliver purchased Products and maintain entitlements or licenses;
• to respond to support, refund or account requests;
• to operate, secure, troubleshoot and improve our Products and website;
• to prevent abuse, fraud and unauthorized access;
• to keep records required for accounting, compliance and dispute handling;
• to comply with applicable legal obligations.

Where applicable law requires a legal basis, processing may rely on performance of a contract, legitimate interests, compliance with legal obligations, or consent where consent is the appropriate basis.

5. Sharing

We do not sell personal data. We may share limited data with service providers that help us host, secure, deliver or support our Products; with Paddle for order-related processes; with professional advisers where necessary; or with authorities when legally required. Providers are expected to process data only for the relevant service and subject to appropriate safeguards.

6. International processing

Our service providers may process data in countries other than your own. Where applicable, we use reasonable contractual, technical and organizational safeguards appropriate to the data and service involved.

7. Retention

We keep personal data only for as long as reasonably necessary for fulfillment, support, security, accounting, legal compliance and dispute resolution. Retention periods vary by data type. Data that is no longer needed is deleted, anonymized or otherwise removed from active use where reasonably practicable.

8. Security

We use reasonable administrative and technical controls designed to protect personal data, including access controls, encrypted transport for supported services, credential separation and logging. No internet service can guarantee absolute security.

9. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, restrict or object to certain processing, or to request a copy of certain personal data. You may also withdraw consent where processing is based on consent. To make a request, email hello@daubesonntag.com. We may need to verify your identity before completing a request.

For payment or checkout data controlled directly by Paddle, requests should also be directed to Paddle through its official buyer support or privacy channels.

10. Cookies and local storage

Our website may use strictly necessary storage for security, functionality or session continuity, and may use limited analytics or preference storage where enabled. Where law requires consent for non-essential technologies, we will request it before use.

11. Children

Our commercial digital Products are not intentionally directed to children who cannot lawfully enter into a purchase agreement in their jurisdiction. If you believe personal data has been provided by a child without appropriate authorization, contact us so we can review and take appropriate action.

12. Changes

We may update this Policy as our Products, providers or legal requirements change. Material updates will be published here with a revised effective date.