Privacy Policy

Last updated: 28 March 2026

This Privacy Notice for Squarelocks Ltd ("we", "us", or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you visit our website at squarelocks.com or use Squarelocks, a license management and piracy protection platform for digital template creators. Questions or concerns? Contact us at legal@squarelocks.com.

SUMMARY OF KEY POINTS

What personal information do we process? We may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use.

Do we process sensitive personal information? We do not process sensitive personal information.

Do we collect information from third parties? We do not collect any information from third parties.

How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.

How do you exercise your rights? Visit squarelocks.com/contact-us or email legal@squarelocks.com.

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

We collect personal information that you voluntarily provide when you register on the Services or contact us. This includes: payment transaction data, names, email addresses, usernames, passwords, contact preferences, and billing addresses.

We do not process sensitive information.

Payment Data. All payment data is handled and stored by Stripe, Gumroad, and Lemon Squeezy. Their privacy policies can be found at stripe.com/gb/privacy, gumroad.com/privacy, and lemonsqueezy.com/privacy.

Social Media Login Data. If you register using your Google account, we will collect certain profile information such as your name and email address from Google.

Information automatically collected

We automatically collect certain information when you visit or use the Services, including your IP address, browser type, device characteristics, operating system, language preferences, location data, and usage information. We also collect information through cookies — see our Cookie Policy at app.squarelocks.com/cookie-policy.

Google API

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

2. HOW DO WE PROCESS YOUR INFORMATION?

We process your personal information for the following reasons:

— To facilitate account creation and authentication and manage user accounts — To deliver and facilitate delivery of services to you — To respond to your inquiries and offer support — To send administrative information, including changes to our terms and policies — To fulfil and manage your orders and payments — To request feedback about your use of our Services — To send marketing and promotional communications in accordance with your preferences — To protect our Services through fraud monitoring and prevention — To save or protect an individual's vital interest — To generate and deliver license keys to end customers — when a buyer completes a purchase through Stripe, Gumroad, or Lemon Squeezy, we process their email address and order details to automatically generate and deliver a unique license key on behalf of the Squarelocks account holder — To detect and prevent unauthorised license key usage and digital product piracy — we monitor activation patterns, geographic anomalies, velocity spikes, and IP address data to identify when a license key is being shared or used without authorisation

3. WHAT LEGAL BASES DO WE RELY ON?

If you are located in the EU or UK, we rely on the following legal bases:

Consent — where you have given us permission to use your personal information for a specific purpose. You can withdraw consent at any time.

Performance of a Contract — to fulfil our contractual obligations to you, including providing the Services.

Legitimate Interests — including sending information about special offers, diagnosing problems, understanding how users use our Services, and protecting the revenue and intellectual property of digital product creators who use Squarelocks.

Legal Obligations — to comply with applicable law.

Vital Interests — to protect your vital interests or those of a third party.

We are generally the "data controller" under European data protection laws. This notice does not apply to personal information we process as a "data processor" on behalf of our customers.

If you are located in Canada, we process your information with your express or implied consent, or in exceptional cases where permitted by applicable law without consent.

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

We may share your data with the following third-party service providers who perform services on our behalf:

— Google account (user authentication) — Supabase (database and infrastructure) — Resend (transactional email delivery) — Loops (marketing email communications) — Stripe, Lemon Squeezy, and Gumroad (payment processing) — Google Sign-In (account registration and authentication) — Vercel (website hosting) — Sentry (performance monitoring)

We do not sell your personal information. We may share your information in connection with a merger, acquisition, or sale of company assets.

5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

We may use cookies and similar tracking technologies to gather information when you interact with our Services. These help maintain security, prevent crashes, fix bugs, and assist with basic site functions. For more information see our Cookie Policy at app.squarelocks.com/cookie-policy.

6. HOW DO WE HANDLE YOUR SOCIAL LOGINS?

If you register or log in using your Google account, we will receive certain profile information from Google, including your name and email address. We use this information only as described in this Privacy Notice. We are not responsible for other uses of your personal information by Google and recommend you review their privacy policy.

7. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?

Our servers are located in the United States, European Union, and United Kingdom. Your information may be transferred to and processed in these countries. If you are in the EEA, UK, or Switzerland, we protect your information using the European Commission's Standard Contractual Clauses. Our Standard Contractual Clauses can be provided upon request.

8. HOW LONG DO WE KEEP YOUR INFORMATION?

We keep your personal information for as long as your account is active or as needed to provide the Services. We will not retain your information longer than the period in which you have an account with us, unless required by law. When we have no ongoing need to process your information, we will delete or anonymise it.

9. HOW DO WE KEEP YOUR INFORMATION SAFE?

We have implemented appropriate technical and organisational security measures to protect your personal information, including encryption in transit and at rest, Row Level Security policies, and encrypted API key storage. However, no electronic transmission or storage technology is 100% secure. You should only access the Services within a secure environment.

10. DO WE COLLECT INFORMATION FROM MINORS?

We do not knowingly collect, solicit, or market to children under 18 years of age. By using the Services, you represent that you are at least 18 years old. If we learn that we have collected personal information from a minor, we will deactivate the account and delete the data promptly. Contact us at legal@squarelocks.com if you become aware of any such data.

11. WHAT ARE YOUR PRIVACY RIGHTS?

In the EEA, UK, Switzerland, and Canada, your rights include: access to your personal data, rectification of inaccuracies, erasure, restriction of processing, data portability, and the right to object to processing.

To complain to the UK data protection authority: ico.org.uk/make-a-complaint/data-protection-complaints

To complain to the Swiss authority: edoeb.admin.ch/edoeb/en/home.html

Withdrawing consent: You can withdraw consent at any time by contacting us using the details in Section 15.

Opting out of marketing: Click the unsubscribe link in any marketing email or contact support@squarelocks.com. You will still receive service-related messages necessary for your account.

Account Information: To review or update your account, log in to your account settings. To terminate your account, contact us. We may retain some information to prevent fraud or comply with legal obligations.

Cookies: You can set your browser to remove or reject cookies, though this may affect certain features of the Services. See app.squarelocks.com/cookie-policy for details.

12. CONTROLS FOR DO-NOT-TRACK FEATURES

There is currently no uniform technology standard for recognising Do-Not-Track (DNT) signals. We do not currently respond to DNT browser signals. California law requires us to disclose this. If a standard is adopted that we must follow, we will update this Notice accordingly.

13. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to, correct, or delete your personal information, and to withdraw consent to our processing.

Categories of personal information collected in the past 12 months:

A. Identifiers (name, email, IP address) — YES B. California Customer Records (financial information) — YES C. Protected classification characteristics — NO D. Commercial information (purchase history) — YES E. Biometric information — NO F. Internet or network activity — YES G. Geolocation data — YES H. Audio, sensory, or similar information — NO I. Professional or employment information — NO J. Education information — NO K. Inferences drawn from personal information — NO L. Sensitive personal information — NO

Retention: Categories A, B, D — as long as the user has an account. Categories F, G — 1 year.

We have not sold or shared personal information to third parties for a commercial purpose in the preceding 12 months.

Your rights include: right to know, right to access, right to correct, right to request deletion, right to obtain a copy, right to non-discrimination, and right to opt out of targeted advertising or profiling.

To exercise your rights: visit squarelocks.com/contact-us or email legal@squarelocks.com.

Appeals: If we decline to take action on your request, email legal@squarelocks.com to appeal. If your appeal is denied, you may contact your state attorney general.

California Shine the Light: California residents may request information about categories of personal information disclosed to third parties for direct marketing purposes. We do not disclose personal information for third party direct marketing purposes. Submit requests to legal@squarelocks.com.

14. DO WE MAKE UPDATES TO THIS NOTICE?

Yes. We may update this Privacy Notice from time to time. The updated version will show a revised date at the top. We will notify you of material changes by email or through the Services.

15. HOW CAN YOU CONTACT US?

Squarelocks Ltd 27 Old Gloucester Street Holborn London WC1N 3AX England

Email: legal@squarelocks.com Web: squarelocks.com/contact-us

If you are a UK resident, we are the data controller of your personal information. Our UK representative is Squarelocks Ltd, contactable at the address and email above.

16. HOW CAN YOU REVIEW, UPDATE, OR DELETE YOUR DATA?

Based on the laws of your country or state of residence, you may have the right to request access to, correction of, or deletion of your personal information. To submit a request, visit squarelocks.com/contact-us.