1. Overview & Commitment to Privacy
WhosBidding is operated by Fintral (Sole Proprietorship: Nereyda Herrera Montero) (“Fintral”, “WhosBidding”, “we”, “our”, or “us”). We are committed to transparency and collecting only the minimal information necessary to deliver our real-time software observatory and process digital database indexing transactions safely.
2. Information We Process
We operate an account-free software application. We do not ask for or store user passwords, personal profiles, or marketing lists. We process:
- Software Index Data: Public product handle (e.g. @handle or software domain URL) and benchmark target amount submitted during digital checkout.
- Transaction Identifiers: Anonymous Paddle transaction tokens used to verify and reconcile completed index orders with database benchmark rankings.
- Technical Telemetry: Ephemeral IP addresses and user-agent strings used for DDoS defense, rate limiting, and aggregate observatory traffic counting.
3. Payment Processing & Paddle as Merchant of Record
WhosBidding does not collect, store, or process payment card numbers, CVVs, or billing addresses on its servers. All financial transactions are directly processed and handled by Paddle.com (Paddle Payments Limited / Paddle.com Inc.), our Merchant of Record and certified PCI-DSS Level 1 payment infrastructure.
Paddle acts as an independent Data Controller for customer billing details. For details on how Paddle processes payment information, please refer to the Paddle Privacy Notice.
4. Cookies & Local Storage
We do not use advertising cookies, tracking pixels, or cross-site tracking scripts. We utilize standard browser localStorage solely for functional UI preferences (such as saving your Light/Dark mode choice under the whosbidding_theme key).
5. How We Use Information
The processed technical data is used strictly to:
- Calculate and broadcast real-time benchmark index positions.
- Verify and reconcile Paddle checkout events via cryptographically signed webhooks.
- Prevent spam and maintain software index integrity.
- Display aggregate active viewer counts and platform telemetry.
6. Data Sharing & Infrastructure Partners
We do not sell, rent, or monetize user data. Data is shared exclusively with certified technical infrastructure partners:
- Paddle.com: Merchant of Record, transaction processing, and tax compliance.
- Supabase / AWS: Cloud database, atomic state locking, and real-time WebSocket distribution.
- Vercel Inc.: Edge serverless hosting and application delivery.
7. Data Rights (GDPR & CCPA)
Under applicable data protection laws (including GDPR and CCPA), you have the right to access, rectify, or request removal of public software entries associated with your domain. Verified domain owners may submit data requests directly to our compliance team.
8. Contact & Operator Information
WhosBidding is operated by Fintral (Sole Proprietor: Nereyda Herrera Montero). For privacy inquiries, please contact: support@whosbidding.lol.