Privacy Policy

This Privacy Policy explains how Sextant (“we”, “us”) collects, uses, and shares information when you use the Sextant website at sextant.sh and purchase or use our products. We aim to collect only what we need to run the Service.

1. Information we collect

• Purchase information — when you buy a license, our Merchant of Record (Paddle) collects your name, email, billing details, and payment information. Paddle shares with us limited order data (such as your email, product, and country) but not your full payment-card details.
• License data — we and our licensing provider (Keygen) process your license key and related activation/usage metadata to validate licenses.
• Technical data — when you visit the site or install a component, we may process your IP address, device/browser information, and request logs for security and to operate the Service.
• Analytics — aggregated, privacy-respecting usage statistics to understand and improve the Service.

2. How we use information

• to deliver licenses and provide and maintain the Service;
• to validate and enforce licenses and prevent abuse;
• to provide support and respond to your requests;
• to comply with legal and tax obligations;
• to improve our products.

3. Legal bases (EEA/UK)

Where the GDPR or UK GDPR applies, we rely on: performance of a contract (to deliver your license and the Service), our legitimate interests (security, abuse prevention, product improvement), legal obligation (tax/accounting), and consent where required (for example, certain cookies).

4. Third parties and processors

We share data only with providers that help us run the Service:

• Paddle — Merchant of Record; processes payments, billing, and taxes under its own privacy policy.
• Keygen — license key issuance and validation.
• Vercel — website and application hosting.
• Email and analytics providers — to send transactional messages and measure aggregate usage.

We do not sell your personal information.

5. International transfers

We and our providers may process data in countries other than yours. Where required, appropriate safeguards (such as standard contractual clauses) are used.

6. Retention

We keep purchase and license records for as long as needed to provide the Service and to meet legal, tax, and accounting obligations, then delete or anonymize them.

7. Your rights

Depending on your location, you may have rights to access, correct, delete, or port your personal data, to object to or restrict processing, and to withdraw consent. To exercise these rights, contact us at the address below. Payment-related requests may be directed to Paddle as the Merchant of Record.

8. Cookies

We use essential cookies to operate the site and may use limited analytics cookies. You can control cookies through your browser settings.

9. Children

The Service is not directed to children under 16, and we do not knowingly collect their data.

10. Changes

We may update this Policy; material changes will be reflected by updating the “Last updated” date above.

11. Contact

For privacy questions or requests, email hello@sextant.sh.