Privacy Policy

How we handle your data, clearly and honestly.

Overview

Position5 ("we", "us", "our") is committed to protecting your privacy. This policy explains what information we collect, why we collect it, how we use it, and your rights regarding your data. This policy applies to all products and services operated by Position5, including our websites and software products.

Data controller

Position5 is the data controller responsible for your personal data. If you have questions about how we process your data or wish to exercise your rights, contact us at cr.carlosandres@gmail.com.

Legal basis for processing

We process your personal data under the following legal bases:

  • • Contract performance: processing necessary to fulfill purchases, deliver licenses, and provide our services
  • • Legitimate interest: essential site functionality, security, and fraud prevention
  • • Consent: analytics tracking (you may grant or withdraw consent at any time via the cookie preferences banner)
  • • Legal obligation: where required for financial record-keeping or regulatory compliance

Information we collect

Account & purchase information

When you purchase a product or create an account, we collect your name, email address, and payment information. Payment processing is handled entirely by Stripe and we do not store your credit card number or full payment details on our servers.

License & usage data

We collect license activation data (site URL, activation date) to enforce license terms and provide update delivery. This is limited to what is necessary for license validation.

Analytics data (consent required)

With your consent, we collect anonymized website analytics to understand how visitors interact with our site. This data is stored on our own servers and is never shared with third parties. Specifically, we collect:

  • • Pages visited and page titles
  • • Referrer URL (how you found our site)
  • • Device type, browser, and operating system
  • • Screen resolution and browser language
  • • Anonymized IP address (last octet removed before storage)
  • • UTM campaign parameters (if present in the URL)

Analytics tracking only activates after you grant consent via our cookie preferences banner. You can withdraw consent at any time by clicking "Manage preferences" in the cookie banner, accessible from any page on our site.

How we use your information

  • • To fulfill purchases and deliver license keys and product downloads
  • • To manage your account, subscriptions, and license activations
  • • To provide customer support and respond to inquiries
  • • To send transactional emails (purchase confirmations, license details, renewal notices)
  • • To improve our products and services based on anonymized analytics (with your consent)

Cookies

Essential cookies

We use a single essential cookie (cc_cookie) to remember your cookie consent preferences. This cookie is strictly necessary for the site to respect your privacy choices and does not require consent under GDPR.

Analytics (no cookies)

Our analytics system does not use cookies. Instead, it uses a temporary session identifier stored in your browser's sessionStorage, which is automatically cleared when you close your browser tab. This identifier cannot track you across sessions or across different websites.

Third-party services

We use the following third-party services that may process your data in accordance with their own privacy policies:

Our analytics data is processed and stored exclusively on our own infrastructure and is never shared with third-party analytics providers.

Data sharing

We do not sell, rent, or trade your personal information to third parties. We only share data with third-party services as described above, which is limited to what is necessary to operate our products and process payments.

International data transfers

All analytics and website data is stored on our own servers. Payment data processed by Stripe may be transferred internationally in accordance with Stripe's data processing agreements and privacy policy. Where data is transferred outside the European Economic Area (EEA), appropriate safeguards are in place, including Standard Contractual Clauses.

Data retention

We retain your account and purchase information for as long as your account is active or as needed to provide services. If you request account deletion, we will remove your personal data within 30 days, except where we are required to retain it for legal or financial record-keeping purposes.

Anonymized analytics data is retained for up to 24 months and then automatically purged. Because analytics IP addresses are anonymized before storage, this data cannot be linked back to individual users.

Your rights

Under the General Data Protection Regulation (GDPR) and applicable privacy laws, you have the right to:

  • • Access: request a copy of the personal data we hold about you
  • • Rectification: request correction of inaccurate or incomplete data
  • • Erasure: request deletion of your personal data ("right to be forgotten")
  • • Restriction: request restriction of processing in certain circumstances
  • • Data portability: request your data in a structured, machine-readable format
  • • Object: object to processing based on legitimate interest
  • • Withdraw consent: withdraw analytics consent at any time via the cookie preferences banner, without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at cr.carlosandres@gmail.com. We will respond to your request within 30 days.

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.

Security

We use industry-standard security measures to protect your data, including HTTPS encryption for all web traffic, secure password hashing, and secure payment processing through Stripe's PCI-compliant infrastructure. IP addresses collected for analytics are anonymized before storage. No method of transmission over the internet is 100% secure, but we take reasonable steps to protect your information.

Changes to this policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date. For material changes that affect how we process your data, we will make reasonable efforts to notify you. Continued use of our services after changes constitutes acceptance of the updated policy.

Questions about your data? Contact us at cr.carlosandres@gmail.com.

Last updated: February 2026