Privacy

1Who is responsible

The data controller is STRUCTURES.LV SIA, a limited liability company registered in Latvia under number 41203065119, with its registered office at Džohara Dudajeva gatve 11 – 72, Rīga, LV-1084, Latvia. For anything at all to do with your data, including any of the requests in section 6, email support@wordcomments.com and a person will read it.

There is no data protection officer, because the scale of this does not require one.

2Your documents stay on your computer

Comment Navigator reads comments, replies and tracked changes from the document open in Word, and writes exports, reports and anonymised copies to files on your own computer. No document, file name, comment or any other content is ever uploaded, transmitted, stored by us or seen by us. There is no cloud service involved in any feature, which is why it works the same with the network unplugged.

The add-in has no analytics, no crash reporting and no account. Your licence key is verified by a signature check performed entirely on your computer, so even activation involves no call to us.

A few things are written on your computer, and stay there:

Uninstalling removes the log but keeps the rest, so that reinstalling or upgrading does not cost you your licence. To remove everything, delete the registry key HKEY_CURRENT_USER\Software\CommentNavigator and the folder %LOCALAPPDATA%\CommentNavigator. If you ever send us a log file to help diagnose a problem, that is your decision and you can read it first.

3What buying a licence collects

Purchases go through Paddle.com Market Ltd, which is the merchant of record and handles the payment itself. Paddle collects your payment details, billing address and tax location. We never see your card details. Paddle is an independent controller of what it collects — see the Paddle privacy notice.

Paddle then tells us that a purchase completed, and our system issues the key. What we hold as a result is:

That is the whole list. We do not build a profile, we do not run automated decision-making, and we do not send marketing email — the only messages we will ever send you are your licence key and replies to things you ask us.

4Where it is kept, and who else touches it

The licence record lives in Microsoft Azure Table Storage in the Sweden Central (Sweden) region. We use these processors, each doing one job:

Sending the licence email means your name and email address reach a provider in the United States. That transfer is covered by the European Commission’s Standard Contractual Clauses in the provider’s data processing agreement. No one else receives your data, and we will never sell it, rent it, or hand it over for anyone else’s marketing. We would disclose it only if the law required us to.

5How long it is kept

• Your licence record — for as long as the licence is valid, which is indefinitely. The point of keeping it is that you can write to us in five years having lost your key, and we can send it back. Ask us to erase it and we will, but then we can no longer re-issue your key.
• Support emails — 24 months after the conversation ends.
• Payment and tax records — kept by Paddle for as long as tax law requires, typically several years. That is Paddle’s obligation, not ours, and it is not something we can shorten.

6Your rights

Under the GDPR you can ask us to give you a copy of what we hold about you, correct it, erase it, restrict what we do with it, hand it over in a portable form, or object to our processing it on the basis of legitimate interest. Email support@wordcomments.com. We will respond within one month, and there is no charge.

If you think we have handled your data badly, please tell us first — but you have the right to complain to a supervisory authority regardless. Ours is the Data State Inspectorate of Latvia, and you may also complain to the authority in the EU country where you live or work.

7This website

This website sets no cookies of its own and loads no fonts, trackers or analytics from third parties by default.

If we turn on Google Analytics 4 (Google Ireland Limited), a small bar will first ask whether we may use analytics cookies. Until you answer OK, nothing from Google Analytics loads and no cookie is set; answer No and it stays that way. If you answer OK, we use it to count visits, see which pages and links are used, and tell whether a download or a purchase followed a visit. Google sets the cookies _ga and _ga_…, which last up to two years, and receives your IP address, browser details and the pages you view. Google Analytics 4 does not store IP addresses. Google signals and advertising features are off, so this data is not used for ads or linked to a Google account. Reports are kept for 14 months. Google may process the data in the United States under the EU–US Data Privacy Framework. The legal basis is your consent, and your choice is remembered in your browser’s local storage under cn-consent. You can change your mind at any time with the Cookies link at the bottom of every page; answering No removes the Google Analytics cookies. See Google’s privacy policy.

Paddle supplies the checkout and shows the price in your own currency on the home page. To do that, Paddle sees your IP address to work out which country you are in, and once you open the checkout Paddle sets what it needs to run it. That is covered by Paddle’s own privacy notice, linked in section 3.

The website is hosted on Microsoft Azure Static Web Apps, whose ordinary server logs may briefly record your IP address, as any web server does.

8Changes

If this policy changes, the new version appears here with a new date at the top. If a change materially affects people who have already bought — a new processor, say, or a new purpose — we will email everyone holding a licence rather than leave it to be discovered.