Privacy Policy
Last updated: 29 July 2026
This Privacy Policy explains how Widgetsify ("we", "us", "our") collects, uses and protects your personal data when you use widgetsify.com and its tools — Instagram Widget, MultiPin Map, SEO Audit (together, the "Service").
Widgetsify is a property of Saint Art Designs, operated by Bojan Jovanovic, an individual/sole trader based in Serbia ("the Seller", "we").
If you have questions about this policy or want to exercise any of your rights below, contact us at
1. What data we collect
Account data. When you register, we collect your name, username, email address and a hashed password. We never see or store your plain-text password.
Content you add. The Instagram post links, map pin locations/titles/descriptions/links, and URLs you submit for SEO scans. This is content you choose to enter — we don't pull it from any third-party account on your behalf.
Usage data. Basic technical data such as IP address, browser type, and pages visited, collected automatically by the web server and used mainly for security, abuse prevention and enforcing plan limits (e.g. counting widget views, rate-limiting the free SEO scanner). For guests using the free tools without an account, a hashed version of your IP address may be used to enforce daily/monthly limits fairly.
Payment data. We do not collect or store your card details. Subscriptions are processed by Paddle.com Market Ltd ("Paddle"), who acts as the Merchant of Record for all paid purchases (see Section 4). We only receive and store a subscription ID, customer ID, and subscription status from Paddle — never your card number.
Cookies. We use essential cookies for login sessions and CSRF protection. We do not currently use third-party advertising or tracking cookies.
2. How we use your data
- To provide and maintain your account and the widgets/scans you create
- To enforce Free/Pro plan limits (views, number of widgets, daily scans)
- To process payments and manage subscriptions (via Paddle)
- To send you service-related emails (registration confirmation, password reset, billing notifications)
- To detect and prevent abuse, fraud, or violations of our Terms of Service
- To improve the Service
We do not sell your personal data to third parties.
3. Legal basis for processing (GDPR)
Where the General Data Protection Regulation applies, we process your data on these bases:
- Contract — to provide the Service you signed up for
- Legitimate interest — for security, fraud prevention, and enforcing fair usage limits
- Consent — for optional cookies, if introduced in the future
- Legal obligation — for billing/tax records where required by law
4. Third parties who process your data
| Who | What they do | More info |
|---|---|---|
| Paddle.com Market Ltd | Payment processing, subscription billing, tax/VAT compliance. Paddle acts as the Merchant of Record. | paddle.com/legal/privacy |
| Hetzner Hosting | Hosts the website, database and files | — |
| Widgetsify Email Delivery | Delivers account and billing emails | — |
Some of these providers may process data outside the European Economic Area. Where that happens, appropriate safeguards (such as Standard Contractual Clauses) are relied upon by those providers.
5. How long we keep your data
We keep your account data for as long as your account is active. If you delete your account, we remove your personal data within a reasonable period, except where we're required to keep billing records for tax/legal purposes (typically a few years, per Serbian and EU accounting rules).
Guest-created content (widgets built without an account) tied to a session is discarded once the session expires if never claimed by registering.
6. Your rights
If GDPR or a similar law applies to you, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your data ("right to be forgotten"), subject to legal retention requirements
- Restrict or object to certain processing
- Port your data to another provider
- Withdraw consent at any time, where processing is based on consent
To exercise any of these rights, email
You also have the right to lodge a complaint with your local data protection authority.
7. Children's privacy
The Service is not directed at children under 16. We do not knowingly collect data from children.
8. Changes to this policy
We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.
9. Contact
Questions about this policy: