Privacy policy

1. Who is responsible

Syncore L.L.C. is responsible for the personal data described here, for themelui.com, the live preview and account.themelui.com. You can reach us at hello@themelui.com with any question about your data.

2. What we collect, and why

When you buy

Paddle sells the template as merchant of record and is responsible for the payment details it collects, under Paddle's privacy notice. Paddle shares with us your name, email address and country, your business name and tax number if you give them, and the details of your order. We use them to deliver your licence, email you about it, provide support, handle refunds, and keep the business records the law requires. The basis is our contract with you, and our legal obligations for the records.

Your licence page

account.themelui.com stores your licence: its key, plan, dates and status, and the name and email address it belongs to. When you give developers access, it stores their GitHub usernames and account numbers. When a file is downloaded, it records which version, when, and the country the request came from, worked out from the IP address, which isn't stored. We use this to give you access, to keep to the number of developers your licence allows, and to notice a licence link being shared. The basis is our contract with you, and our legitimate interest in preventing misuse.

ThemeForest purchase codes

When you register a ThemeForest purchase, we check the code with Envato and store it with the email address you give, your Envato username, the type of licence and when your support ends. The basis is providing the licence page you asked for.

Emails

We send your licence email and licence links through Resend. When you write to us, your message is kept in our mailbox so that we can answer it and refer back to it. We don't send newsletters or marketing emails.

Visiting the sites

The sites are hosted by Cloudflare, which processes your IP address and the details of each request to deliver pages and protect them from attacks. themelui.com uses no analytics and no advertising or tracking cookies; Cloudflare may set a strictly necessary security cookie. The site remembers whether you chose light or dark mode in your browser's local storage, which never leaves your device. The live preview keeps its settings the same way and shows only made-up sample data.

Paddle's checkout loads when you scroll towards the prices, click a buy button or open a Paddle payment link. It uses your IP address to show the prices in your currency and with the tax for your country. From then on, Paddle's privacy notice applies, including any cookies it uses to process your payment and prevent fraud.

3. Who we share it with

We use these providers, each only for its part:

• Paddle: selling the template, payments, tax, receipts and refunds.
• Cloudflare: hosting the sites, and the database and file storage behind your licence page. It also receives email sent to hello@themelui.com.
• Resend: sending licence emails.
• GitHub: when you give a developer access, we ask GitHub to invite their account to the repository, and GitHub emails them the invitation.
• Envato: checking ThemeForest purchase codes.

We may also share data with professional advisers, or where the law requires it. We never sell personal data or use it for advertising.

4. International transfers

These providers may process data outside your country, including in the United States. Where the law requires it, those transfers are covered by safeguards such as the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.

5. How long we keep it

We keep your licence details for as long as your licence exists, because they give you access to its downloads and updates. Records the law requires us to keep, such as for tax and accounting, we keep for as long as it requires. Emails you send us we keep while they're useful for supporting you.

6. Your rights

You can ask to see the personal data we hold about you, to correct it, to have it deleted or to have it sent to you or someone else in a common format, and you can object to or ask us to limit how we use it. Deleting it also closes your licence page, which depends on it; your licence itself stays valid, and your Paddle receipt proves it. Write to us and we'll reply within a month. You can also complain to the data protection authority where you live or work.

7. Security

Everything travels over encrypted connections, licence page links are cryptographically signed, and only we, and the providers above for their part, can reach the data.

8. Children

themelui is a tool for developers and isn't meant for children under 16.

9. Changes

When this policy changes, the date at the top changes too. If a change matters for how we use your data, we'll tell licence holders by email.

10. Contact