Privacy Notice — Demoplaybook

1. Who we are

PSR Software Sales Enablement GmbH ("we", "us") operates Demoplaybook (the "Service"). We are the data controller for personal data processed through the Service.

Contact: hello@presalesrockstars.com

2. What personal data we collect

Account data: email address, name, password hash, authentication provider (e.g. Google).
Profile data: optional profile information you add (e.g. full name, avatar).
Learning data: which courses and lessons you access, progress, completion status.
Support and communications: messages you send us and metadata about those messages.
Usage and device data: log data, IP address, browser type, device identifiers, session timestamps.
Login events: we log sign-ins to detect suspicious activity and account sharing.

Payment data (card details, billing address, tax IDs) is collected and processed directly by Paddle as Merchant of Record — we never see or store full payment credentials.

3. Why we process your data and on what legal basis

To provide the Service — account creation, delivering courses, tracking progress. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
To process orders — sharing minimal information with Paddle to fulfil your purchase. Legal basis: performance of a contract.
To secure the Service — fraud prevention, abuse detection, account-sharing checks. Legal basis: legitimate interests (Art. 6(1)(f) GDPR).
To communicate with you — transactional emails (magic links, receipts, course updates). Legal basis: performance of a contract.
To improve the Service — aggregated usage analysis. Legal basis: legitimate interests.
To comply with law — bookkeeping and tax obligations. Legal basis: legal obligation (Art. 6(1)(c) GDPR).

4. Who we share data with

We share personal data only with the following categories of recipients:

Paddle.com — as Merchant of Record for payments, subscription management, tax compliance, invoicing and refunds.
Infrastructure and service providers — hosting, database, authentication, video streaming, transactional email and analytics providers acting as processors on our behalf.
Professional advisers — accountants and legal counsel where necessary.
Public authorities — where we are required by law to disclose data.

We do not sell your personal data.

5. International transfers

Some of our processors are located outside the European Economic Area (EEA). Where personal data is transferred outside the EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (SCCs) or an applicable adequacy decision.

6. How long we keep your data

We keep personal data for as long as your account is active and for as long as necessary to provide the Service. After account deletion, we delete or anonymise personal data within a reasonable period, except where we are required to retain it for legal, accounting, or fraud- prevention purposes (typically up to 10 years for invoicing records under German law).

7. Your rights

Under the GDPR you have the right to:

access the personal data we hold about you;
request correction of inaccurate data;
request erasure of your data ("right to be forgotten");
restrict or object to certain processing;
data portability;
withdraw consent where processing is based on consent;
lodge a complaint with a supervisory authority (in Germany, the competent state data protection authority).

To exercise any of these rights, email hello@presalesrockstars.com. We will respond within one month.

8. Security

We apply appropriate technical and organisational measures to protect your data, including encryption in transit (HTTPS), encrypted storage, role-based access controls and audit logging. No system is perfectly secure, but we work continuously to protect your data.

9. Cookies and similar technologies

We use strictly necessary cookies and local storage to keep you signed in, remember your preferences and secure the Service. We may also use limited analytics to understand how the Service is used. Where consent is required for non-essential cookies, we will ask for it. You can control cookies through your browser settings.

10. Children

The Service is intended for professional adult learners and is not directed at children under 16. We do not knowingly collect personal data from children.

11. Changes to this notice

We may update this Privacy Notice from time to time. The "Last updated" date at the top reflects the most recent change. Please see also our Terms & Conditions.