Skip to main contentSkip to footer
Relevanssi.

Privacy Policy

Last updated: October 2026

1. Introduction & Data Controller

This Privacy Policy governs the collection, processing and use of personal data in connection with the Relevanssi Premium plugin and the website https://relevanssi.com.

We take data protection very seriously and process personal data in accordance with the EU General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and other applicable data protection laws.

2. Data Controller

eurodata comesio solutions GmbH
Donau-City-Straße 7, 1220 Vienna, Austria
VAT ID (UID): ATU75355358
Email: hello [at] relevanssi.com

3. Data We Collect

We collect the following categories of personal data:

Purchase data: Name, company name, billing address, email address and VAT ID, processed by Paddle as Merchant of Record.

License and installation data: Relevanssi Premium API key, registered website URLs, Relevanssi Premium version, WordPress version, WordPress environment type, registration trigger and server-generated registration timestamps.

Support data and diagnostics: Support tickets, email addresses, messages, logs and information submitted when contacting support. When the Relevanssi Premium support form is used, the submitted support request may include technical diagnostics such as WordPress, Relevanssi Premium, PHP and server information, the active theme and active plugins.

Website visit data: Browser type, operating system, referrer, page visits, clicks, scrolling behaviour, navigation paths, technical device information and interaction data collected through analytics technologies, with consent where required.

Relevanssi Premium installation registration

When Relevanssi Premium is configured with an API key and “Disable outside connections” is not enabled, the plugin automatically sends installation registration requests to relevanssi.com for license administration, delivery of Premium services, support, security and abuse prevention.

The plugin transmits only:

  • the Relevanssi Premium API key;
  • the normalized WordPress home URL, including any subdirectory;
  • the installed Relevanssi Premium version;
  • the installed WordPress version;
  • the WordPress environment type;
  • the registration trigger.

The server stores the API key and normalized site URL and generates SHA-256 hashes for record identification. The server also generates first-seen and last-seen timestamps.

Each WordPress multisite subsite is treated as a separate installation. The same API key may therefore be associated with multiple site URLs.

Routine automatic registration reports are throttled. Saving or changing the API key may trigger an immediate registration. A regular check-in is scheduled approximately every 30 days. Failed requests may be retried at increasing intervals.

Installation registration records do not contain administrator email addresses, website titles, user information, IP addresses as registration fields, themes, plugin lists, search queries or general usage analytics. Installation registration data is not used for marketing or behavioural profiling.

If “Disable outside connections” is enabled for a site, Relevanssi Premium does not send installation registration requests from that site. A network-wide API key does not override this setting for an individual multisite subsite.

4. Purposes and Legal Basis

We process personal data for the following purposes and legal bases:

  • Performance of the contract, including license administration, updates, Premium services and support: Art. 6(1)(b) GDPR.
  • Compliance with legal obligations, including accounting and tax obligations: Art. 6(1)(c) GDPR.
  • Legitimate interests, including security, fraud and abuse prevention and the improvement of our products and services: Art. 6(1)(f) GDPR.
  • Marketing communications are processed only with explicit consent: Art. 6(1)(a) GDPR.
  • We process Relevanssi Premium installation registration data for license administration, delivery of Premium services and support on the basis of Art. 6(1)(b) GDPR.
  • Security and abuse prevention may additionally be based on our legitimate interests under Art. 6(1)(f) GDPR.
  • Website analytics and performance measurement using Google Analytics 4 and comparable non-essential analytics technologies are based on the visitor’s prior consent pursuant to Article 6(1)(a) GDPR.

5. Sharing of Personal Data

We share personal data only with carefully selected recipients where necessary:

  • Paddle.com, acting as Merchant of Record for payment and billing;
  • our EU-based hosting provider;
  • Zendesk, our support ticketing provider;
  • external developers acting under data processing agreements pursuant to Art. 28 GDPR.
  • We do not sell personal data to third parties.
  • Google Ireland Limited and its authorised subprocessors, for consent-based website analytics and associated technical services, including Google Analytics 4 and Google Tag Manager.

6. International Data Transfers

Where personal data is processed outside the European Economic Area, transfers are based on an applicable adequacy decision or appropriate safeguards, such as the EU Standard Contractual Clauses, together with additional technical and organisational safeguards where required.

7. Data Retention Periods

  • Purchase, billing and accounting data: Retained for the periods required by applicable accounting and tax laws, generally for seven years where Austrian statutory retention obligations apply.
  • Customer and license administration data: Retained for the duration of the contractual relationship and thereafter only for as long as necessary for license administration, support or the establishment, exercise or defence of legal claims.
  • Installation registration data: Retained for the duration of the contractual relationship. After the contractual relationship ends, installation registration records are retained only for as long as necessary for license administration, support, security, abuse prevention or the establishment, exercise or defence of legal claims. The necessity of continued retention is reviewed periodically.
  • Support tickets and associated support diagnostics: Retained for a maximum of 24 months after closure, unless longer retention is necessary for an ongoing matter or legal claim.
  • Google Analytics 4: We retain user-level and event-level data in Google Analytics 4 for two months. The retention period for user-level data is not reset upon new user activity. Aggregated reporting data may remain available for longer periods in accordance with Google Analytics’ data retention policies. Google Analytics is used only after the visitor has provided the required consent.

8. Your GDPR Rights

Subject to the conditions and limitations provided by applicable law, you have the following rights:

  • Right of access;
  • right to rectification;
  • right to erasure (“right to be forgotten”);
  • right to restriction of processing;
  • right to data portability;
  • right to object to processing based on legitimate interests;
  • right to withdraw consent at any time where processing is based on consent;
  • right to lodge a complaint with the Austrian Data Protection Authority (DSB).

Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise your rights, please contact us at hello [at] relevanssi.com.

9. Cookies & Tracking Technologies

We use essential cookies where necessary for the proper functioning of our website, account and license services.

Non-essential cookies and similar technologies used for analytics or marketing are activated only after explicit consent where required. Consent can be withdrawn at any time through our cookie settings.

10. Google Analytics 4 & Google Tag Manager

We use Google Analytics 4 (GA4), a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to understand how visitors interact with our website and to improve its content, usability and performance.

Google Analytics may collect information such as pages visited, session duration, interactions with website elements, referral sources, approximate geographic location, browser and device information, and pseudonymous identifiers.

Google Analytics uses cookies and similar technologies to distinguish visitors and analyse website usage. IP addresses may be processed during data collection to determine approximate geographic information but are not logged or stored by Google Analytics 4.

We use Google Tag Manager to manage and deploy website tracking technologies. Google Tag Manager is a technical management tool and does not itself create user profiles or perform independent website analytics. The Google Tag Manager container is delivered locally through our consent management solution.

Google Search Console
We use Google Search Console, a service provided by Google Ireland Limited, to monitor the indexing, technical performance and visibility of our website in Google Search. The service provides search performance statistics, such as search queries, impressions, clicks and average search positions.

Our website is verified through a DNS record. Google Search Console does not require us to install additional visitor-tracking cookies or scripts on our website.

Google Search Console is linked to Google Analytics 4 to help us better understand organic search performance. Search Console reports generally provide aggregated search performance data.

Consent and legal basis

Google Analytics is activated only after visitors have provided their consent through our cookie consent management platform, Borlabs Cookie. The legal basis for this processing is Article 6(1)(a) GDPR, together with applicable requirements concerning the storage of and access to information on users’ devices.

We use Google Consent Mode v2 in its basic implementation. If a visitor does not consent to analytics, Google Analytics tracking is not activated and no analytics measurement data is transmitted through our GA4 integration.

Visitors may withdraw or modify their consent at any time through the cookie settings available on our website. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

Data processing and international transfers

Google may process analytics data through its infrastructure and authorised subprocessors, including in countries outside the European Economic Area. Where required, such transfers are subject to appropriate safeguards under applicable data protection laws, including the EU Standard Contractual Clauses or applicable adequacy decisions.

We have linked Google Analytics with Google Search Console to analyse the performance of our website in organic Google Search. This allows us to evaluate search visibility and website traffic.

Purchase and Conversion Measurement

With your consent, we use Google Analytics 4 to measure purchases of Relevanssi Premium and evaluate the effectiveness of our website and marketing channels.

When a purchase is successfully confirmed by our payment provider, Paddle, our website may transmit a purchase event directly from our server to Google Analytics 4 using Google’s Measurement Protocol.

This event may include a pseudonymous Google Analytics client identifier, an associated session identifier where available, a transaction reference, the purchased product, the purchase amount, tax amount and currency. We do not transmit customer names, email addresses, billing addresses or payment card details as part of these purchase events.

Purchase tracking is performed only where valid consent for Google Analytics has been recorded and has not subsequently been withdrawn before transmission. Without the required consent or identifiers, no purchase event is transmitted to Google Analytics 4.

Temporary checkout attribution records are retained only as necessary for processing and verification and are subsequently deleted or minimised in accordance with our retention procedures.

Further information about Google’s data processing practices is available at:
https://policies.google.com/privacy
https://support.google.com/analytics/answer/12017362

11. Security Measures

We implement appropriate technical and organisational measures, including encryption in transit, access controls and security monitoring, to protect personal data against unauthorised access, alteration, disclosure or loss. However, no system can guarantee absolute security.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be published on this page together with an updated “Last updated” date. Where appropriate and where we have the necessary contact information, we may also communicate material changes by email.

13. Contact

If you have questions regarding this Privacy Policy or wish to exercise your rights, please contact us:

Email: hello [at] relevanssi.com
Address: Donau-City-Straße 7, 1220 Vienna, Austria

Last updated: October 12, 2026