Privacy Policy

Operated by Siklab Core, the trading name of an independent software developer based in the Philippines. Contact: lasdk@siklabcore.com.

Effective date: 1 August 2026

This Privacy Policy explains how Siklab Core ("we", "us", "our"), the operator of LASDK and the website at lasdk.siklabcore.com (the "Service"), collects, uses, and shares personal information, and the rights you have over it.

1. Who is responsible

Siklab Core is the controller of the personal information described here. Contact: lasdk@siklabcore.com.

2. What we collect

• Account data — your email address and a securely hashed password when you register. We never store your

password in plain text.

• License & team data — your order/license identifier, organization and team name, seat count, edition, and

the email addresses of teammates you add as contributors to a license.

• Purchase data — order confirmation details we receive from our payment provider (see §5). **We do not

collect or store your payment card details.**

• Communications — messages you send us (e.g. support requests) and the email address they come from.
• Technical & log data — standard request logs generated by our hosting provider (IP address, user agent,

timestamps) used for security, abuse prevention, and reliability.

• Cookies — a strictly necessary session cookie to keep you logged in (see our Cookie Notice).

3. What we do NOT collect

• We do not receive or store your payment card numbers — checkout and payment are handled entirely by our

Merchant of Record (§5).

• The LASDK software runs locally on your own machine. It verifies its license file offline and does not

transmit your source code, prompts, or usage data to us. Any telemetry the software produces stays on your disk unless you choose to share it.

4. How we use your information

• To create and operate your account and deliver the licenses you buy.
• To let you manage your team and seats.
• To send transactional email (license delivery, security, account, and billing notices).
• To provide support and respond to your requests.
• To secure the Service, prevent abuse and fraud, and debug problems.
• To comply with legal obligations and enforce our Terms.

We do not sell your personal information, and we do not use it for third-party advertising.

5. Payment processing (Merchant of Record)

Payments are processed by Paddle, which acts as the Merchant of Record and the seller of record for your purchase. They collect your payment and billing details directly, handle applicable sales tax/VAT, and send us only the order information needed to issue your license. Your payment data is governed by Paddle's own privacy policy: https://www.paddle.com/legal/privacy.

6. Service providers (sub-processors)

We share limited personal information with providers who process it on our behalf, under contract, only to run the Service:

Provider	Purpose	Data
Paddle	Checkout, payment, Merchant of Record	Purchase/billing details
Cloudflare	Hosting (Workers) + data storage (KV) + CDN/security	Account, license, log data
Resend	Transactional email delivery	Your email address + message

7. International transfers

We are based in the Philippines and our providers may process data in other countries (e.g. the United States and the EU). Where required, transfers rely on appropriate safeguards (such as the providers' standard contractual clauses).

8. Retention

We keep account and license data for as long as your account or license is active and as needed to provide the Service, resolve disputes, and meet legal, tax, and accounting obligations. We delete or anonymize personal information when it is no longer needed. In practice we keep it while your account or license is active and for up to 24 months after it becomes inactive, then delete or anonymize it — longer only where tax/accounting law requires.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete, export (portability), restrict, or object to our processing of your personal information, and to withdraw consent. To exercise any right, email lasdk@siklabcore.com. We will respond within the period required by applicable law.

• Philippines (RA 10173): you have rights to be informed, to access, to object, to erasure/blocking, to

damages, to data portability, and to lodge a complaint with the National Privacy Commission.

• EU/UK (GDPR): the rights above, plus the right to complain to your local supervisory authority.
• California (CCPA/CPRA): the right to know, delete, correct, and opt out of "sale"/"sharing" (we do neither).

10. Security

We use industry-standard measures — hashed passwords, encrypted transport (HTTPS), access controls, and a reputable hosting provider — to protect your information. No method is perfectly secure, but we work to protect it and will notify you and the relevant authority of a breach as required by law.

11. Children

The Service is not directed to children under 18, and we do not knowingly collect their data.

12. Changes

We may update this policy. We will post the new version here with a new effective date and, for material changes, take reasonable steps to notify you.

13. Contact

Questions or requests: lasdk@siklabcore.com. Siklab Core, Philippines.