Privacy Policy
This Privacy Policy explains how Paddle Billing Workflow ("we", "us", or "our") collects, uses, and protects your data when using our integration and workflow automations.
1. Information We Collect
To operate automated billing workflows and synchronize event data, we process the following categories of information:
- Account & Location Identifiers: Sub-account and company identifiers necessary to route workflow actions and webhook events to the correct tenant.
- Paddle Integration Credentials: Encrypted Paddle API keys and webhook destination secrets provided during connection setup.
- Billing & Transaction Metadata: Event identifiers, subscription statuses, customer IDs, and invoice data passed through workflow actions or webhook payloads.
- Execution Logs: Operational records detailing timestamps, action triggers, and delivery statuses to enable debugging and performance monitoring.
2. How We Use Your Information
We collect and process your information solely to:
- Execute Paddle Billing actions requested by your automated workflow rules.
- Verify incoming webhook signatures using Paddle v1 cryptographic keys.
- Dispatch webhook payloads to your automation endpoints.
- Calculate metered action usage and maintain tenant isolation.
- Provide connection diagnostics in the Control Center dashboard.
3. Data Security & Storage
We employ strict industry-standard measures to protect all sensitive information:
- All network communication occurs over TLS 1.3 encrypted connections.
- All database queries and execution histories are strictly isolated by tenant location ID.
- Paddle webhook endpoints reject unsigned requests and stale timestamps (> 300 seconds).
- Sensitive credentials are masked in logs and never exposed to unauthorized browser sessions.
4. Third-Party Processors
We never sell or monetize your data. Data is exchanged only with trusted infrastructure providers required to deliver the service:
- Paddle.com: Processes transactions and dispatches webhook events as Merchant of Record.
- Database & Hosting: Secure cloud infrastructure storing tenant configurations and logs.
5. Data Retention & Deletion
When you disconnect or uninstall the integration, our automated lifecycle handler immediately deregisters your Paddle webhook destination to halt all external dispatches. Tenants may request full permanent deletion of historical logs by contacting support.
6. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your privacy rights under GDPR, CCPA, or applicable laws, please visit our Support Center.