Marketplace
en

Privacy policy

Last updated: 13 Nov 2026

Who is responsible

Reportman AI, S.L. (NIF B93963213, Calle Rutlla, 109, puerta B, 17003 Girona) is the controller of the personal data described here. Contact: info@openplex.dev.

Visiting the website

The website is served through Cloudflare, which protects it and passes requests to our server at OVHcloud in France; Cloudflare sees your IP address and the request, as any such service does. Our server does not keep a log of visits: it only records errors, without your IP address. There are no analytics, advertising or tracking.

The website sets only cookies that are strictly necessary for what you ask for, so they need no consent: lang and theme remember the language and theme you choose (one year); developers who sign in get opx_dev (their session, 30 days) and opx_csrf (protects the forms, until the browser closes). Stripe's pages set their own cookies, under Stripe's policy.

Buying a licence

Stripe Payments Europe, Ltd. (Ireland) takes the payment and collects your card details, name, e-mail and, where needed, billing address. We receive from Stripe your e-mail address, the amount, the currency and the payment identifiers, and we keep the order and the licence (the key is stored encrypted). We send the licence to your e-mail through our mail provider, Hostinger.

If you buy an extension made by a third-party developer, we tell its developer the date, the extension and the amounts of the sale, but not who you are.

Developer accounts

If you sign up as a developer, we keep your e-mail address, display name (shown as the publisher of your extensions), country, prefix, a hash of your password (never the password itself), the date you accepted the developer terms, your submissions, and your sales and payouts. To pay you, Stripe collects your identity and bank details directly in your Stripe Connect account, under its own privacy policy; from Stripe we receive the account's identifier and whether it can receive transfers. We send you e-mails about your account, your submissions and your sales.

OpenPlex panels

OpenPlex panels connect to the marketplace to read the catalogue (sending the panel's version and architecture), to download extensions (sending the licence key for paid ones) and, for some extensions, to check a licence. We don't record which panels connect.

Purposes and legal bases

  • Selling and delivering licences, and answering your questions: performance of the contract.
  • Running developer accounts, reviewing their extensions and paying their share of sales: performance of the contract.
  • Keeping accounting and tax records: legal obligation.
  • Keeping the service secure and preventing fraud: legitimate interest.

There are no automated decisions or profiling, and we don't sell personal data.

How long

Orders and their records: six years, as required by the Spanish Commercial Code (Article 30) and tax law. Licences: while they exist, and then for that same period. Messages you send us: as long as needed to answer them. Developer accounts: while they exist; their sales and payouts are kept like orders.

Who else processes data

Cloudflare (website delivery and security), OVHcloud (server), Stripe (payments) and Hostinger (e-mail). Cloudflare and Stripe may process data outside the European Economic Area; those transfers rely on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

Your rights

You can ask for access to your data, its rectification or erasure, restriction of or objection to its processing, and its portability, by writing to info@openplex.dev. You can also complain to the Spanish Data Protection Agency (www.aepd.es).