Privacy Policy

Softiki ("we", "our", or "us") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you use our website, products, and services. We are based in Sweden and comply with the General Data Protection Regulation (GDPR) and other applicable international data protection laws.

We only collect personal data that is necessary for the purposes described in this policy. This includes personal identification information such as your first name, last name, and email address. We also collect contact and delivery information including your shipping address and billing address when applicable. Payment data is processed exclusively through Paddle (Paddle.com Market Ltd), our merchant of record, and its authorized payment providers. We do not store your credit card information. All payment data is handled according to the privacy policies and security standards of our payment providers. Additionally, we collect technical data including your IP address, browser type, device information, cookies, and other technical data necessary for the proper functioning of our website and services.

We use your personal data for processing and fulfilling your orders and purchases, managing your license through our own licensing system, managing payments through Paddle and its authorized payment providers, providing customer support and communication regarding your orders, improving our products, services, and user experience, analyzing purchase behavior to optimize our offerings and customer experience, ensuring the security and integrity of our services, and complying with legal obligations.

We take the security of your personal data seriously and implement appropriate technical and organizational measures to protect it. Data is stored on secure cloud servers and databases. Payment data is processed and stored exclusively by Paddle and its authorized payment providers according to their security policies. We implement industry-standard security measures including encryption, access controls, and regular security reviews. We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, unless required or permitted by law.

We do not sell your personal data to third parties. We may share your data only with Paddle and its authorized payment providers for payment processing in accordance with their privacy policies, with service providers who assist us in operating our website and services under strict confidentiality agreements, or when required by law or to protect our rights, property, or safety.

We use cookies and similar technologies to improve your experience. Essential cookies are necessary for the website to function properly, such as security and basic functionality. Analytics cookies help us understand how visitors use our website to improve performance and user experience. You can manage your cookie preferences through your browser settings, though please note that disabling essential cookies may affect website functionality.

Under GDPR and other applicable data protection laws, you have the right to access a copy of the personal data we hold about you, request correction of inaccurate or incomplete personal data, request deletion of your personal data subject to certain legal exceptions, request restriction of the processing of your personal data, request transfer of your personal data to another controller, and object to processing of your personal data in certain circumstances. To exercise these rights, please contact us at info@softiki.com. We will respond to your request within one month of receipt, as required by GDPR (this period may be extended by a further two months for complex requests, in which case we will inform you).

As we operate internationally, your personal data may be transferred to and processed in countries other than your country of residence. We ensure that such transfers comply with GDPR requirements and provide adequate protection for your personal data through appropriate safeguards.

Our services are intended for individuals aged 16 or over acting in their own name; a user under 16 may use our products only through a parent or legal guardian who accepts our Terms of Service and is responsible for any personal data provided. Outside of that context, we do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16 without appropriate parental involvement, we will take steps to delete such information.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of our services after such changes constitutes your acceptance of the updated policy.

If you have any questions about this Privacy Policy or our data practices, or if you wish to exercise your rights, please contact us at info@softiki.com. We will respond within a reasonable time, and in any event within the timeframes required by GDPR. This Privacy Policy is governed by the laws of Sweden and the EU, without regard to its conflict of law provisions.

Data processing in our desktop products: our add-ins and desktop applications (such as TikiOutNotes) store the content you create — notes, decisions, and tasks — locally on your computer, within your Windows and Outlook profile, encrypted at rest using the Windows Data Protection API (DPAPI). This content is not synced to the cloud and is not transmitted to Softiki: we have no access to your notes or to any personal data you enter in them. Licenses for our digital products are issued and managed directly by Softiki through our own licensing system. For checkout, subscriptions, payments, renewals, taxes, invoicing, and product-related refunds, we use Paddle (Paddle.com Market Ltd) as our merchant of record. In this context, data such as your name, email address, purchase data, subscription, license, renewals, billing, and plan status may be processed by Softiki and/or Paddle as applicable. Payments are processed through Paddle and its payment providers; Softiki does not store your card details. Updates are downloaded from our servers over signed and verified channels. You are responsible for the processing of any third-party personal data you choose to record in your notes and must have an appropriate legal basis for doing so.