Oddbench takes the security and privacy of its customers seriously and handles personal data in line with the EU General Data Protection Regulation (GDPR). This notice covers the Oddbench products in the catalogue, this website and our checkout at pay.oddbench.co.
1. Who is responsible
The controller is Oddbench. For anything about your data, write to support@oddbench.co.
2. Paddle, our merchant of record
Paddle.com acts on our behalf as merchant of record and reseller of our products: when you buy, you buy from Paddle and give your payment details to Paddle, which processes them under its own privacy policy. Your card or bank details never reach us. After a purchase, Paddle passes us the information we need to deliver it.
3. What we receive and why
- From Paddle, when you buy: your name, email address, country and postcode, Paddle's customer, subscription and transaction references, what you bought, the amount and the payment status. We use it to deliver and manage your purchase (Art. 6(1)(b) GDPR), to keep the records the law requires (Art. 6(1)(c)), and to prevent fraud and provide support (Art. 6(1)(f), our legitimate interest in running a secure service).
- From the product you use: the account identifier that links your purchase to your account, and the amount you use a product, such as request counts per API key, to apply your plan's limits (Art. 6(1)(b)).
- When you write to us: your message and address, to answer you (Art. 6(1)(b) or (f)).
We collect only what a product needs to work. We do not sell personal data and do not use it for advertising.
4. How long we keep it
We keep purchase and account data while your subscription is active and for as long as we need it to provide the product to you. The raw payment notifications Paddle sends us are deleted after 30 days; the records of purchases and payments are kept as long as tax and commercial law require. After you close an account, we keep only what such laws oblige us to keep.
5. Who processes it for us
- Paddle.com, merchant of record, for payments, invoices, tax and order support.
- Hetzner Online GmbH, Germany, whose servers in Germany run our products and store their data.
- Cloudflare, Inc., which carries the traffic to our websites and APIs and protects them from attacks; it processes IP addresses for that purpose.
Where one of them processes data outside the European Economic Area, the transfer is covered by the European Commission's standard contractual clauses or an adequacy decision.
6. Cookies and analytics
This website counts page views with Ahrefs Web Analytics, which uses no cookies and collects no personal data. Our checkout pages load Paddle.js, which may set the cookies Paddle needs for the payment and for fraud prevention. Paddle's privacy policy covers them.
7. Security
Data travels encrypted (TLS), is stored on secured servers behind firewalls, and only the people who run a product can reach it. Payment details stay with Paddle.
8. Your rights
You can ask for access to your data and a copy of it, for corrections, for erasure, for processing to be restricted, for your data in a portable format, and you can object to processing based on our legitimate interest. Where processing relies on your consent, you can withdraw it at any time. Write to support@oddbench.co, with "privacy request" in the subject and the email address you used. We answer within 30 days. Without some data we cannot provide a product: after erasure, for example, we can no longer send you API keys or updates.
You also have the right to complain to a data protection supervisory authority, in particular in the EU country where you live or work.
9. Changes
When what we do with personal data changes, we update this notice and the date at the top of the page.