autora lab

Privacy Policy

Last updated: October 8, 2026

1. Who we are

Autora Lab is the trading name of Chandan Kumar Gouda, Bellaguntha, Odisha, India. We're the controller of the personal data described here. For anything about your data, email [email protected].

2. What we collect and why

  • Purchases and licenses. Paddle, our merchant of record, collects your payment details, so we never see your card number. Paddle sends us your name, email address and Paddle's IDs for your order. We store your email, license key, plan, renewal dates and those IDs to issue your license, email you your key, handle renewals and refunds, and give you support. Legal basis: performing our contract with you.
  • Sites that use a license. When a licensed plugin activates or checks for updates, it sends its license key, the site's URL, the product and the installed version. We keep each site's URL with the dates it was activated and last checked in, until the site is deactivated. Legal basis: performing our contract with you.
  • Your account. You sign in with your license key. We then set one cookie that keeps you signed in for up to 30 days. Legal basis: performing our contract with you.
  • Messages you send us. The contact form, integration requests and “Notify me” signups send us your email address and what you wrote (and your name, on the contact form). They arrive in our inbox as emails, and this website doesn't keep a copy. Legal basis: our legitimate interest in answering you, or your consent when you ask us to email you.
  • Security. To stop abuse, we count requests per IP address for up to 10 minutes, and our servers keep standard request logs. Legal basis: our legitimate interest in keeping our services safe.
  • Website analytics. We count visits to autoralab.net with Umami. It records the pages you view, the site or campaign link that brought you here, your browser, operating system, device type and country, and whether you opened or completed a checkout. It uses no cookies, stores no personal information and doesn't follow you to other sites. It records nothing on checkout or account pages. Legal basis: our legitimate interest in understanding how the site is used.
  • Live chat. Our chat window runs on Tidio. Tidio's AI assistant, Lyro, can answer questions from our product information, and our team can read and join any chat. It stores an ID in your browser so a conversation carries on from page to page, and shows us which page you're on and the campaign link that brought you here. If you chat with us, Tidio keeps your messages and any name or email you give. We don't show it on checkout or account pages. Legal basis: our legitimate interest in answering your questions.

3. Cookies

Our own site sets one cookie, and only when you sign in to your account. Umami uses no cookies. Tidio stores an ID in your browser for the chat. Paddle's checkout may set its own cookies to process your payment and prevent fraud.

4. Who we share it with

We share data only with the services that run our business, and only what each one needs:

  • Paddle.com Market Limited: our merchant of record, for payments, tax, invoices, subscriptions and refunds.
  • Resend: sends our emails, such as your license key and the messages from our forms.
  • Cloudflare: runs our domain, protects the site, stores the plugin downloads and forwards email sent to our addresses.
  • Google: hosts the inbox where your emails and form messages arrive.
  • Umami: website analytics.
  • Tidio: live chat.
  • Our server host: runs the website and the license service.
  • Authorities and advisers: when the law requires it, or to protect our rights.

We don't sell your personal data. Some of these services process data outside your country, including in the United States. Where the law requires it, they protect it with safeguards such as standard contractual clauses.

5. How long we keep it

  • License and purchase records: while your license exists, then as long as tax and accounting law requires.
  • Site records: until the site is deactivated.
  • Emails and form messages: as long as we need them to answer you and follow up.
  • “Notify me” signups: until we've sent that announcement, or sooner if you ask.
  • Rate-limit counts: up to 10 minutes.
  • The sign-in cookie: 30 days, or until you sign out.

6. Your rights

Depending on where you live, you can ask to see, correct or delete your personal data, to restrict or object to how we use it, or to get a copy to take elsewhere. Where we rely on your consent, you can withdraw it at any time. Email [email protected] and we'll reply within one month. You can also complain to your local data protection authority.

7. Security

The website and license service run over HTTPS. The license database isn't reachable from the internet, and only our team can access it.

8. Children

Our products are for businesses. They aren't meant for children, and we don't knowingly collect their data.

9. Changes

We may update this policy. We'll post changes here and update the date at the top.

10. Contact

Chandan Kumar Gouda, Bellaguntha, Odisha, India. Email [email protected].