Privacy Policy
Effective date: 2026-04-01 · Version 1.0
BATENCORE · SAHLA MADINA SARL A.U · Tan-Tan, Morocco
Article 1
Data Controller
The data controller is
SAHLA MADINA SARL A.U, operating BATENCORE, headquartered in Tan-Tan, Morocco.
Contact:
contact@batencore.com
Article 2
Data We Collect
Depending on the Service used, we may collect the following data:
- BATEN CODE scan engine (free): No data collected. The engine runs entirely on your local machine. No telemetry, no network calls, no data transmitted to our servers.
- D7_SEAL purchase: Email address (for certificate delivery), payment data (processed by Paddle — we do not store card details), order reference, SHA-256 hash of the scanned codebase.
- Subscription plans (PRO, TEAM, ZAHIR): Email address, subscription ID, usage metrics (seal count, audit count). Payment data handled exclusively by Paddle.
- CERT (institutional): Contact person name, email, organization. Governed by a separate Data Processing Agreement (DPA) signed prior to deployment.
- Website visits: No tracking cookies. No analytics. No third-party scripts except the Paddle payment SDK on pricing pages.
Article 3
Purpose of Processing
We process personal data solely for the following purposes:
- Delivering the purchased Service (D7_SEAL certificate, subscription access)
- Sending transactional emails (order confirmation, certificate delivery, subscription receipts)
- Fraud prevention and payment verification (via Paddle)
- Legal and tax compliance obligations
We do not sell, rent, or share personal data with third parties for marketing purposes.
Article 4
Data Retention
Order and payment records: 10 years (legal obligation).
D7_SEAL certificates: Retained indefinitely as part of the public verification registry.
Account data: Retained for the duration of the subscription + 12 months after cancellation.
Email communications: 3 years.
Article 5
Your Rights (GDPR)
If you are located in the European Economic Area, you have the following rights under the GDPR:
- Right of access — obtain a copy of your personal data
- Right of rectification — correct inaccurate data
- Right of erasure — request deletion, subject to legal retention obligations
- Right to restriction of processing
- Right to data portability
- Right to object to processing
Article 6
Cookies and Local Storage
BATENCORE does not use tracking cookies or analytics.
We use
localStorage in your browser solely to remember your language preference (EN/FR/DE/ES). This data never leaves your device and is not transmitted to our servers.
The Paddle payment SDK (loaded only on /pricing pages) may set its own cookies for fraud detection. These are governed by
Paddle's Privacy Policy.
Article 7
Third-Party Processors
Paddle.com Market Limited — payment processing and Merchant of Record. Paddle stores and processes payment data under their own privacy policy. BATENCORE does not receive or store card details.
Hetzner Online GmbH — cloud hosting provider. Our servers are located in Germany (EU). Hetzner processes IP addresses as part of standard server log operations.
Article 8
Governing Law
This Privacy Policy is governed by French law. Disputes shall be subject to the exclusive jurisdiction of the courts of Paris, France, without prejudice to your rights under mandatory local consumer protection laws.
Article 9
Contact
SAHLA MADINA SARL A.U · BATENCORE
Tan-Tan, Morocco
contact@batencore.com