Skip to main contentSkip to footer
Relevanssi.

Privacy Policy

Last updated: August 2026

1. Introduction & Data Controller

This Privacy Policy governs the collection, processing and use of personal data in connection with the Relevanssi Premium plugin and the website https://relevanssi.com.

We take data protection very seriously and process personal data in accordance with the EU General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and other applicable data protection laws.

2. Data Controller

eurodata comesio solutions GmbH
Donau-City-Straße 7, 1220 Vienna, Austria
VAT ID (UID): ATU75355358
Email: hello [at] relevanssi.com

3. Data We Collect

We collect the following categories of personal data:

Purchase data: Name, company name, billing address, email address and VAT ID, processed by Paddle as Merchant of Record.

License and installation data: Relevanssi Premium API key, registered website URLs, Relevanssi Premium version, WordPress version, WordPress environment type, registration trigger and server-generated registration timestamps.

Support data and diagnostics: Support tickets, email addresses, messages, logs and information submitted when contacting support. When the Relevanssi Premium support form is used, the submitted support request may include technical diagnostics such as WordPress, Relevanssi Premium, PHP and server information, the active theme and active plugins.

Website visit data: Browser type, operating system, referrer, page visits, clicks, scrolling behaviour, navigation paths, technical device information and interaction data collected through analytics and session replay technologies, with consent where required.

Relevanssi Premium installation registration

When Relevanssi Premium is configured with an API key and “Disable outside connections” is not enabled, the plugin automatically sends installation registration requests to relevanssi.com for license administration, delivery of Premium services, support, security and abuse prevention.

The plugin transmits only:

  • the Relevanssi Premium API key;
  • the normalized WordPress home URL, including any subdirectory;
  • the installed Relevanssi Premium version;
  • the installed WordPress version;
  • the WordPress environment type;
  • the registration trigger.

The server stores the API key and normalized site URL and generates SHA-256 hashes for record identification. The server also generates first-seen and last-seen timestamps.

Each WordPress multisite subsite is treated as a separate installation. The same API key may therefore be associated with multiple site URLs.

Routine automatic registration reports are throttled. Saving or changing the API key may trigger an immediate registration. A regular check-in is scheduled approximately every 30 days. Failed requests may be retried at increasing intervals.

Installation registration records do not contain administrator email addresses, website titles, user information, IP addresses as registration fields, themes, plugin lists, search queries or general usage analytics. Installation registration data is not used for marketing or behavioural profiling.

If “Disable outside connections” is enabled for a site, Relevanssi Premium does not send installation registration requests from that site. A network-wide API key does not override this setting for an individual multisite subsite.

4. Purposes and Legal Basis

We process personal data for the following purposes and legal bases:

  • Performance of the contract, including license administration, updates, Premium services and support: Art. 6(1)(b) GDPR.
  • Compliance with legal obligations, including accounting and tax obligations: Art. 6(1)(c) GDPR.
  • Legitimate interests, including security, fraud and abuse prevention and the improvement of our products and services: Art. 6(1)(f) GDPR.
  • Marketing communications are processed only with explicit consent: Art. 6(1)(a) GDPR.
  • We process Relevanssi Premium installation registration data for license administration, delivery of Premium services and support on the basis of Art. 6(1)(b) GDPR.
  • Security and abuse prevention may additionally be based on our legitimate interests under Art. 6(1)(f) GDPR.

5. Sharing of Personal Data

We share personal data only with carefully selected recipients where necessary:

  • Paddle.com, acting as Merchant of Record for payment and billing;
  • our EU-based hosting provider;
  • Zendesk, our support ticketing provider;
  • FullStory, Inc., our digital experience analytics and session replay provider;
  • external developers acting under data processing agreements pursuant to Art. 28 GDPR.
  • FullStory is used to analyse website usability, identify technical issues, understand user interactions and improve our products and services. FullStory processes data only after the user has provided consent where required by applicable law.
  • We do not sell personal data to third parties.

6. International Data Transfers

Where personal data is processed outside the European Economic Area, transfers are based on an applicable adequacy decision or appropriate safeguards, such as the EU Standard Contractual Clauses, together with additional technical and organisational safeguards where required.

7. Data Retention Periods

  • Purchase, billing and accounting data: Retained for the periods required by applicable accounting and tax laws, generally for seven years where Austrian statutory retention obligations apply.
  • Customer and license administration data: Retained for the duration of the contractual relationship and thereafter only for as long as necessary for license administration, support or the establishment, exercise or defence of legal claims.
  • Installation registration data: Retained for the duration of the contractual relationship. After the contractual relationship ends, installation registration records are retained only for as long as necessary for license administration, support, security, abuse prevention or the establishment, exercise or defence of legal claims. The necessity of continued retention is reviewed periodically.
  • Support tickets and associated support diagnostics: Retained for a maximum of 24 months after closure, unless longer retention is necessary for an ongoing matter or legal claim.
  • Session replay and analytics data: Retained according to the configured FullStory retention period, currently not exceeding 12 months.

8. Your GDPR Rights

Subject to the conditions and limitations provided by applicable law, you have the following rights:

  • Right of access;
  • right to rectification;
  • right to erasure (“right to be forgotten”);
  • right to restriction of processing;
  • right to data portability;
  • right to object to processing based on legitimate interests;
  • right to withdraw consent at any time where processing is based on consent;
  • right to lodge a complaint with the Austrian Data Protection Authority (DSB).

Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise your rights, please contact us at hello [at] relevanssi.com.

9. Cookies & Tracking Technologies

We use essential cookies where necessary for the proper functioning of our website, account and license services.

Non-essential cookies and similar technologies used for analytics or marketing are activated only after explicit consent where required. Consent can be withdrawn at any time through our cookie settings.

10. FullStory Session Replay & Analytics

We use FullStory, a digital experience analytics platform provided by FullStory, Inc. FullStory helps us understand how visitors interact with our website and digital products.

With your consent, FullStory may collect pseudonymized information about user interactions, including page visits, clicks, scrolling behaviour, navigation paths, browser and device information and technical performance data. These insights help us identify usability issues, analyse conversion funnels, troubleshoot technical problems and improve the overall user experience.

FullStory is configured to respect our consent management platform and is activated only after consent has been provided where required. We also use privacy controls and data-masking mechanisms designed to reduce the collection of sensitive information.

Data may be processed by FullStory, Inc. and its authorised subprocessors in accordance with applicable data protection laws and contractual safeguards, including Standard Contractual Clauses where required.

Consent can be withdrawn at any time through our cookie settings.

11. Security Measures

We implement appropriate technical and organisational measures, including encryption in transit, access controls and security monitoring, to protect personal data against unauthorised access, alteration, disclosure or loss. However, no system can guarantee absolute security.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be published on this page together with an updated “Last updated” date. Where appropriate and where we have the necessary contact information, we may also communicate material changes by email.

13. Contact

If you have questions regarding this Privacy Policy or wish to exercise your rights, please contact us:

Email: hello [at] relevanssi.com
Address: Donau-City-Straße 7, 1220 Vienna, Austria

Last updated: August 28, 2026