1. Introduction
Caelunex Pty Ltd ("we", "our", "us") operates the B4X Purchase Manager platform at b4xpurchasemanager.com. This policy explains how we collect, use, and protect your information when you use our service for in-app purchase validation.
B4X Purchase Manager is a globally available service. We are committed to protecting your data in accordance with applicable data protection laws, including the Australian Privacy Act 1988 and, where applicable, the EU General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. Regardless of where you are located, we apply the same standard of data protection to all users.
2. Information We Collect
Account Information
- Email address and name (provided during registration)
- Password (stored securely using bcrypt hashing)
- Subscription tier and billing information
Application Data
- App names, bundle identifiers, and package names you register
- API keys generated for your applications
- Apple Shared Secrets and Google service account credentials (encrypted at rest)
Usage Data
- Validation request logs (platform, timestamp, success/failure, response time)
- API usage counts for billing purposes
3. How We Use Your Information
- To provide and maintain the purchase validation service
- To authenticate your API requests
- To calculate usage and billing
- To send service-related notifications (usage alerts, billing reminders)
- To improve our service and fix issues
4. Data Storage & Security
- All data is stored on Google Cloud Platform infrastructure
- Secrets (Apple Shared Secrets, Google credentials) are stored in Google Cloud Secret Manager with AES-256 encryption at rest
- Database connections use SSL/TLS encryption in transit
- Passwords are hashed using bcrypt with salt rounds
- API keys are generated using cryptographically secure random generation
5. Data Sharing
We do not sell, trade, or share your personal information with third parties except:
- With Apple and Google servers solely to validate purchase receipts on your behalf
- With Stripe for payment processing
- When required by law or to protect our rights
6. Data Retention
We retain your account data for as long as your account is active. Usage logs are retained for up to 12 months for analytics and billing purposes. You may request deletion of your account and associated data at any time by contacting us.
7. Your Rights
- Access your personal data through your dashboard
- Update or correct your account information
- Delete your account and associated data
- Export your data
- Opt out of non-essential communications
8. Cookies
We use essential cookies for authentication and session management. We do not use tracking cookies or third-party analytics cookies.
9. Changes to This Policy
We may update this policy from time to time. We will notify you of significant changes via email or through the dashboard.