DATA HANDLING · CURRENT STATE
This page complements the Privacy Notice with a technical description of the website and product's current behavior during Sandbox validation.
The informational pages create no accounts and use no analytics or telemetry. When a plan is selected, the browser loads Paddle Checkout and contacts the ADRiskInsight commerce API solely to initiate and claim the test purchase.
ADRiskInsight runs the assessment on the authorized domain controller. Assessment data is not uploaded to the cloud to perform the analysis or generate reports.
HTML and Excel files are saved to the location selected by the operator. They may contain domain, host, account, SID, DN and other technical identifiers, so they must be reviewed before sharing.
Paddle processes email, country, payment method and, when selected by the buyer, company and Tax ID details. To deliver or recover a license, ADRiskInsight keeps the email temporarily and removes it when the provider accepts the message. Permanent references use an email HMAC; recovery limits abuse with an IP HMAC without storing the clear IP. Cards, tax addresses and Tax IDs are not copied into license tables.
SANDBOX BOUNDARY
The current checkout uses Paddle Sandbox: it creates no real charge and does not yet enable a public download. The terms, privacy notice and refund policy must be reviewed with every data flow before production.