Privacy Policy

Last Updated: March 2026

1. Introduction

Ptah Extension ("we," "us," or "our") operates the Ptah VS Code extension and the website ptah.live (collectively, the "Service"). This Privacy Policy explains how we collect, use, and protect your personal information when you use our Service.

By using the Service, you consent to the practices described in this Privacy Policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect information through our authentication provider, WorkOS:

  • Email address
  • Display name
  • Authentication tokens (managed securely by WorkOS)

2.2 Payment Information

Payment data (credit card numbers, billing addresses) is collected and processed entirely by Paddle (paddle.com), our merchant of record. We do not store or have direct access to your full payment details. We receive only transaction confirmations, subscription status, and invoice references from Paddle.

2.3 Usage Data

We collect anonymized usage analytics to improve the Service, including:

  • Feature usage patterns within the VS Code extension
  • Session duration and frequency
  • Error reports and performance metrics

2.4 License Data

We store license keys and subscription status to validate your access to Pro features. This data is linked to your account and managed through our license server.

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Manage your account and process subscription transactions
  • Validate license keys and enforce subscription plans
  • Send important service notifications (security alerts, billing updates, trial expiration reminders)
  • Analyze usage patterns to improve features and performance
  • Respond to support requests and inquiries
  • Comply with legal obligations

4. Third-Party Services

We use the following third-party services that may process your data:

  • Paddle (paddle.com) -- Payment processing, invoicing, VAT/sales tax handling as merchant of record
  • WorkOS (workos.com) -- Authentication, single sign-on (SSO), and magic link login
  • DigitalOcean (digitalocean.com) -- Server hosting and infrastructure for our license server and API
  • Discord (discord.com) -- Community support and communication (voluntary participation)

Each third-party service operates under its own privacy policy. We encourage you to review their policies for details on how they handle your data.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Specifically:

  • Account data is retained until you request account deletion
  • Usage analytics are retained in anonymized form and may be kept indefinitely
  • Transaction records are retained as required by applicable tax and accounting laws
  • License records are deleted upon account deletion

6. Your Rights

You have the following rights regarding your personal data:

  • Access -- Request a copy of the personal data we hold about you
  • Correction -- Request correction of inaccurate personal data
  • Deletion -- Request deletion of your personal data and account
  • Portability -- Request your data in a structured, machine-readable format
  • Objection -- Object to processing of your personal data for certain purposes

To exercise any of these rights, contact us at [email protected]. We will respond to your request within 30 days.

7. Cookies and Tracking

Our website uses essential cookies to:

  • Maintain your authentication session
  • Remember your preferences
  • Ensure the security of your account

We do not use third-party advertising cookies or cross-site tracking. Analytics data is collected in anonymized form to improve the Service.

8. Children's Privacy

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that we have collected personal information from a child under 13, we will promptly delete that information. If you believe a child under 13 has provided us with personal information, please contact us at [email protected].

9. International Data Transfers

Your data may be processed and stored in locations outside your country of residence. Our servers are hosted on DigitalOcean infrastructure. Paddle, as our merchant of record, handles EU GDPR compliance for payment-related data and manages VAT/sales tax obligations across jurisdictions. We take reasonable measures to ensure your data is treated securely and in accordance with this Privacy Policy regardless of where it is processed.

10. GDPR Compliance

For users in the European Economic Area (EEA), we process personal data based on legitimate interest (providing and improving the Service) and contractual necessity (fulfilling your subscription). Paddle, as our merchant of record, independently handles GDPR compliance for all payment processing and related data. You may exercise your GDPR rights as described in Section 6 above.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.

12. Contact Information

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: