Privacy Policy

Last updated: March 2026

1. Who we are

ClevSec ("we", "us") is an independent cybersecurity tools studio operated from Poland. Our website is clevsec.one. Contact: team@clevsec.one.

2. What data we collect

We collect minimal data:

Newsletter subscribers: Email address only, submitted voluntarily through our signup form.

Purchases: Handled entirely by LemonSqueezy (our Merchant of Record). We do not store your payment details. LemonSqueezy processes your name, email, and payment information under their own privacy policy.

Analytics: We use Cloudflare Analytics, which does not use cookies and does not track individual users. It collects aggregate data only (page views, country, browser type).

3. How we use your data

Newsletter email addresses are used solely to send you compliance insights and product updates. We do not sell, rent, or share your email address with third parties.

4. Legal basis (GDPR)

We process your email address based on your consent (Article 6(1)(a) GDPR), which you provide when subscribing to our newsletter. You can withdraw consent at any time by unsubscribing.

5. Data processors

LemonSqueezy — Payment processing and product delivery (Merchant of Record). Their privacy policy.

Cloudflare — Hosting, DNS, and analytics. Their privacy policy.

FormSubmit — Newsletter form processing. Their privacy policy.

6. Cookies

This website does not use cookies. We do not use any tracking cookies, advertising cookies, or analytics cookies.

7. Your rights

Under GDPR, you have the right to access, rectify, erase, restrict processing of, and port your data. You also have the right to object to processing and to withdraw consent. To exercise these rights, contact team@clevsec.one.

8. Data retention

Newsletter email addresses are retained until you unsubscribe. Purchase records are retained by LemonSqueezy per their retention policy and our tax obligations (5 years for financial records under Polish law).

9. Changes

We may update this policy from time to time. Changes will be posted on this page with an updated date.