Legal

Privacy

This page explains what personal information RichPad collects, why we collect it, and the choices you have. It applies to this website, RichPad accounts, and the desktop application. You can read it without an account.

  1. Who we are

    RichPad provides the desktop application and this website. For privacy questions, use the contact page.

  2. Information you give us

    When you create an account or sign in, we collect:

    • your email address;
    • a hash of your password, not the password itself;
    • a hash of a temporary password, if you ask us to email one. The message contains that temporary password. It works for 24 hours and does not replace your password. Signing in with your password, or saving a new password, removes it.
    • an invite code, if registration asks for one. We check the code and do not store it on your account.
    • the time you confirm your email. Creating an account sends one confirmation message to that address. Checkout stays closed until you open the link. Changing the account email sends a confirmation message to the new address and keeps the previous address for 24 hours. Until you open that link, the account shows the new address as unverified. If you do not confirm it in that time, the account email changes back to the previous address.

    If you use the contact form, we also receive the subject, the message, an optional name, the email address you enter, and the country you type. The country has to match the country reported for your connection before the message is sent. That message is emailed to us. It is not added to an account record.

  3. Devices and sessions

    The desktop app may be used on a limited number of devices. When it signs in, we store the computer’s name, the operating system, and a device fingerprint. The fingerprint is a one-way hash of the computer name, the operating-system account name, and the platform. We do not store the operating-system account name itself. We use this information to recognise the device and to enforce the device limit.

    A successful sign-in creates a session for that device. On the website, sign-in sets an HttpOnly cookie named rp_session so you stay signed in. The desktop app stores its own session on that computer. Sessions expire on a set schedule, when you sign out, or, for a device, when you remove it.

  4. Your documents

    Documents, calculations, and other files you create in RichPad stay on your computer. We do not receive those files, and we do not offer cloud storage or document sync. Display preferences the app saves locally also stay on that computer.

    You are responsible for backing up your documents and for who can open them.

  5. Payments

    Paid subscriptions are handled by Paddle.com, our online reseller and Merchant of Record. Paddle collects the payment and billing details you enter at checkout, including payment-card or other payment-method information. We do not receive your full card number.

    We do receive the details we need to turn a subscription into a licence: a Paddle customer identifier, the email on the order, the subscription identifier, the plan, the subscription status, and any scheduled cancellation. Paddle’s own privacy notice applies to the information they collect: paddle.com/legal/privacy.

  6. How we use information

    We use the information above to:

    • create and secure your account;
    • decide whether a licence is active and which devices may use it;
    • provide downloads, the devices page, and billing links;
    • show prices for your country at checkout;
    • reply to messages you send us;
    • limit repeated sign-in, registration, and contact attempts;
    • keep records we need for billing, security, and legal duties.

    We do not sell personal information, and we do not use it for advertising. The website does not include an analytics tracker.

  7. Technical data

    Our host may see your IP address in the ordinary course of delivering the site and the account service. We use the IP address only to apply short-lived rate limits. Those limits are held in memory. They are not written onto your account.

    The pricing page reads a country code supplied by the host or CDN, when one is present, so checkout can show a local price. We do not store that country on your account.

  8. Cookies and other requests

    The only cookie we set is the sign-in cookie described above. It is required to keep a website session. We do not set advertising or analytics cookies.

    Your browser also contacts these services when you use the public site:

    • Google Fonts, to load typefaces. Google receives the request, including your IP address. See Google’s privacy policy.
    • jsDelivr, on the home page only, to load the math typesetting library. The request includes your IP address.
    • Paddle, on the pricing page and during checkout, to show prices and take payment.

  9. Who we share information with

    We share personal information only with:

    • Paddle, to process orders, tax, invoices, renewals, and refunds;
    • the email provider that delivers contact-form messages to us;
    • the host that runs the website and the account service;
    • a person or authority when the law requires us to.

    Those providers process the information so we can run RichPad. We do not allow them to use it for their own advertising.

  10. How long we keep it

    We keep account, licence, and device records for as long as the account exists and for as long as we need them to provide the licence, resolve a dispute, or meet a legal or accounting duty. Billing records from Paddle are kept on the same basis.

    Website and desktop sessions last until they expire, you sign out, or the device is removed. Contact messages stay in the mailbox we use to reply. Rate-limit records are discarded when their short window ends.

  11. Security

    Passwords are stored as hashes. The website session cookie is HttpOnly. Device session tokens are stored as hashes on our side, and the desktop app keeps its copy of the session on your computer. No method of storage or transmission is completely secure.

  12. Your choices

    You can sign out, remove a device, cancel a subscription, or close your account from the Account page. Closing the account deletes the email, password, and device records we hold, and cancels a subscription on that account immediately. Paddle may still keep billing records it is required to hold. You may also use the contact page to ask for a copy of the account information we hold, or to correct it.

    We will use the email address on the account to confirm the request. We will then provide, correct, or delete the account information we hold, except for records we still need for billing, security, fraud prevention, or a legal duty. Depending on where you live, you may also have the right to object to certain processing, to restrict it, to ask for a portable copy, or to complain to a data-protection authority.

  13. Children

    RichPad is a tool for technical work. It is not directed at children under 16, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, email us and we will delete it.

  14. Where information is processed

    We and our providers, including Paddle and our host, may process information in countries other than yours. Those countries may have different data-protection laws. We share information with providers only so they can perform the services described on this page.

  15. Changes

    We may update this page. The date below changes when we do. The new version applies from the time it is posted.

Last updated 31 October 2026.