Privacy Policy

Last Updated: August 12, 2026

1. Introduction

ExtraDock values privacy and commits to protecting personal data. This policy explains what information is collected, how it is used, the choices available to you, and the measures used to protect it. Where consent is required, using the website or app does not replace an explicit consent choice.

2. Information We Collect

The company gathers several data types:

• Personal Information: Name and email provided during purchases, newsletter subscriptions, or inquiries
• Payment Information: Processed through Stripe; full credit card details are neither stored nor accessed by ExtraDock
• Device Information: IP address, browser type, operating system, and referral URLs
• Marketing Attribution Identifiers: Click identifiers and promotion codes from tracked marketing links used to attribute purchases and refunds to the link, campaign, or partner that introduced you
• Usage Data: Website and app interaction patterns, including analytics on pages visited and device types
• Referral Survey: The selected source and optional free-text answer. Tracking reports use only the selected source and an opaque submission identifier, never the free text.
• Cookies and Tracking Technologies: Small data files enabling functionality improvements and user preference storage; users may disable these via browser settings
• Diagnostic and Error Data: Technical information automatically collected when the app or website encounters an error, such as stack traces, error messages, device and operating system version, and app version. This data helps identify and fix bugs.

3. How We Use Your Information

Data is utilized to:

• Process purchases and deliver license keys and receipts
• Provide customer support and respond to inquiries
• Send product updates and newsletters (only for subscribers)
• Enhance website services through analytics
• Attribute purchases and refunds to the marketing link, campaign, or partner that introduced the customer
• Ensure legal compliance and prevent fraud
• Diagnose errors, monitor stability, and improve app reliability

Marketing emails include unsubscribe options.

Depending on the processing and your location, ExtraDock relies on consent, performance of a contract, compliance with legal obligations, or legitimate interests such as measuring and improving the website and attributing marketing. Where optional storage requires prior consent, that storage remains off until consent is given. Where ExtraDock uses a regional default based on legitimate interests, you can object or turn it off at any time through Privacy Choices.

4. How We Store and Protect Your Data

Reasonable technical and organizational measures protect information from unauthorized access. Payment data is handled by Stripe per its security standards. Optional website processing is grouped into Analytics, Attribution, and Experience purposes. Google Tag Manager and Google Analytics provide audience measurement; DataFast provides first-party browser analytics, including returning-visitor and journey measurement, and, when permitted, one server-delivered referral-survey goal; LnkFlow provides journey attribution and checkout decoration; and Hotjar provides experience analytics and session replay on approved public routes. DataFast's native Stripe connection and the existing Stripe-to-LnkFlow destination remain the sole payment and refund event owners. ExtraDock application code does not send duplicate payment, refund, or revenue events. Diagnostic and error data is processed through Sentry (Functional Software, Inc.) solely for debugging and stability monitoring. All third-party processors are bound by data processing agreements, and data may be transferred outside the EEA under appropriate safeguards (e.g., Standard Contractual Clauses).

5. Data Retention

Personal information is retained only as needed for stated purposes. Privacy choices expire after the configured consent period, LnkFlow attribution cookies are configured for up to 90 days, and provider-side analytics or replay follows the approved account retention settings. The DataFast delivery ledger stores an HMAC business-key hash and delivery status rather than the original referral identifier. Financial records may be retained for statutory accounting periods. Users may request deletion at support@appitstudio.com.

6. Your Rights (GDPR Compliance)

Where the GDPR applies, individuals may:

• Access, correct, or delete personal data
• Withdraw marketing consent anytime
• Request data portability or processing restrictions
• File complaints with local data protection authorities

Contact support@appitstudio.com to exercise these rights.

7. Cookies

Necessary storage supports security, sessions, and privacy choices. Optional services are grouped into Analytics, Attribution, and Experience purposes. The website obtains its regional privacy context at runtime from a trusted Cloudflare country signal; cached public HTML does not contain a visitor-specific privacy decision. Global Privacy Control overrides every optional regional default, and a permanent privacy preference control is available in the footer.

In the European Economic Area, United Kingdom, Switzerland, and other regions configured for strict opt-in, DataFast, Google Tag Manager/Google Analytics, LnkFlow persistent storage, and Hotjar remain off until you grant the relevant permission. DataFast then uses first-party visitor and session identifiers so visits can be connected into returning-visitor journeys. Rejecting or withdrawing Analytics stops DataFast and clears its applicable cookies.

In known regions not configured for strict opt-in, DataFast Analytics and LnkFlow Attribution storage are enabled by default so ExtraDock can measure journeys and campaign performance. Google Tag Manager/Google Analytics and Hotjar remain off unless you explicitly allow their Analytics or Experience purpose. These defaults can be rejected or changed at any time.

If the country signal is missing, invalid, a Tor code, or cannot be trusted, only DataFast Analytics is enabled by default. The privacy banner remains visible, and LnkFlow persistent storage, Google Tag Manager/Google Analytics, and Hotjar remain off until you explicitly allow them. This unknown-region fallback is intentionally limited to DataFast and does not infer location from your time zone or browser settings.

When a tracked link brings you to our website, LnkFlow temporarily reads the lnk_id click identifier and any lnk_promo promotion code into browser memory. This memory-only attribution does not write to your device. If you open a dedicated ExtraDock checkout during that visit, the click identifier may be passed to Stripe as a client_reference_id. Shared Appit Studio bundle checkout links remain unchanged and are attributed by Appit Studio.

When Attribution storage is permitted, including through an approved non-strict regional default, LnkFlow stores these identifiers in first-party cookies for up to 90 days so attribution can survive navigation and return visits. Declining storage does not remove the memory-only reference from a dedicated checkout link you choose to open during the current page visit. Stripe reports completed purchases and refunds to LnkFlow so we can measure campaign performance and calculate any applicable partner commission.

When the DataFast service is permitted and DataFast server goals are enabled, a committed referral-survey submission may produce one purchase_referral_survey_completed goal containing only the selected source. This goal is not a purchase, sale, payment, refund, revenue event, or proof of Stripe attribution. DataFast identity and application-side server payments remain disabled.

When Experience is permitted and Hotjar is enabled, session replay is limited by route exclusions and suppression settings intended to keep account, authentication, privacy, checkout, thank-you, API, webhook, Livewire, and other sensitive paths out of replay. Hotjar Identify, User Attributes, surveys, console capture, and iframe capture are not enabled by this website integration.

If you reject all optional processing, DataFast stops, LnkFlow does not persist attribution identifiers, and Google Tag Manager, Google Analytics, and Hotjar remain off. Withdrawal clears applicable Analytics, Attribution, and Experience cookies. Memory-only checkout attribution remains available for dedicated ExtraDock links because it does not store or read information from your device. A Global Privacy Control signal suppresses every optional service, including DataFast and all regional defaults. You can accept, reject, customize, or later withdraw optional processing through Privacy Choices in the footer.

8. Third-Party Links

External links on the website fall outside the company's responsibility. Users should review third-party privacy policies before sharing information.

9. Updates to This Policy

Changes will be posted with updated dates. The "Last Update Date" reflects current versions.

10. Contact Us

For privacy inquiries: support@appitstudio.com