Privacy Notice
Last updated 26 August 2026
This notice explains what personal data WebBox (Slave Tanushev) ("WebBox", "we") collects, why, and what rights you have. It covers this website and the software we sell, including the WordPress plugin WebBox Booking Expert.
The short version. We collect your email address when you buy or contact us, and our software checks a licence key against a domain. We never see your card details - Paddle handles payment. We do not sell or share your data for advertising, and we never see the bookings or guest details stored on your own website.
Who is responsible
WebBox (Slave Tanushev), [[FULL ADDRESS]], North Macedonia.
Contact: slavetanusev@gmail.com
What we collect and why
| Data | Why | Kept for |
|---|---|---|
| Your email address and name | To deliver your licence key, send update and security notices, and answer support requests. | As long as your licence is active, plus 24 months. |
| Your licence key and the domain it is activated on | To enforce the number of sites a licence covers, and to let you move it. | As long as the licence exists. |
| Order details (product, amount, country, order reference) | To provide support and meet our accounting obligations. Collected by Paddle and shared with us; we never receive your card number. | As required by tax law, typically 10 years. |
| Support emails | To answer you, and to recognise recurring problems worth fixing. | 24 months. |
What our software sends to us
When you activate a licence, or when the plugin re-checks it on its daily schedule, it sends two things: the licence key and the domain of the site. Nothing else.
It does not send bookings, guest names, email addresses, payment details, or any other content from your site. Those stay in your own WordPress database, on your own hosting, where we have no access to them. The free edition contains no licensing code at all and communicates with us in no way whatsoever.
Your guests' data
If you use WebBox Booking Expert, the bookings your guests make are stored on your website and belong to you. For that data you are the controller and we are not a processor, because it never reaches us. Your own obligations to your guests - a privacy notice on your hotel's site, lawful retention, responding to their requests - remain yours.
Payments
Our order process is conducted by our online reseller Paddle.com, which is the Merchant of Record for all our orders. Paddle collects and processes your payment information under its own privacy policy, available at paddle.com/legal/privacy. We receive from Paddle only the order details listed above.
Who else we share data with
- Paddle - payment processing, invoicing and tax, as our Merchant of Record.
- [[EMAIL PROVIDER]] - to send licence keys and reply to support.
- [[HOSTING PROVIDER]] - where this website and our licence records are hosted.
We do not sell your personal data, and we do not share it with advertisers.
This website
This site sets no tracking or advertising cookies and runs no third-party analytics. Standard server logs may record IP addresses for security and troubleshooting, and are kept for 30 days.
Paddle's checkout, which opens on our pricing page, sets its own cookies as part of processing your order. Those are described in Paddle's privacy policy.
Legal basis
- Performance of a contract - delivering your licence, validating it, and providing support.
- Legal obligation - keeping records required for tax and accounting.
- Legitimate interests - security, fraud prevention, and telling existing customers about security updates to software they own.
Your rights
Depending on where you live, you may have the right to access the data we hold about you, correct it, delete it, restrict or object to how we use it, receive a copy in a portable format, or withdraw consent where consent is the basis we relied on.
Email slavetanusev@gmail.com and we will respond within 30 days. If you are in the EU or UK and are unhappy with our response, you can complain to your national data protection authority.
One practical limit worth stating plainly: if you ask us to delete your data while your licence is active, we have to deactivate the licence, because the licence record is the data.
Changes
If this notice changes materially, we will update the date at the top and, where the change affects you, tell existing customers by email.