Privacy Policy

Arsen Zakaryan IE, an individual entrepreneur registered in the Republic of Armenia, trading as Solzet, Hakob Hakobyan 1, Yerevan, Armenia, is the data controller for the personal data described here. For any privacy question or request, email contact@solzet.com.

When you contact us. Our contact and enquiry forms collect your name, email address, and - where the form asks - your company, your role, and the message you write. Only the fields you fill in.

When you buy a licensed control. The payment itself is handled by Paddle as Merchant of Record (see our Terms of Service). Paddle passes us your name, email address, country and subscription status so we can issue and support your licence. We never receive or store your card details.

When a licensed control runs. The control periodically confirms its licence with our licensing service. That check sends the licence key, an identifier for the Dynamics 365 / Dataverse environment it is running in, and a timestamp. It exists to stop a single licence being used across unlimited environments. It does not send your records, your field values, or any other business data from your environment.

When you browse the site. Google Analytics 4 records pages viewed, approximate location derived from IP address, referrer, and general device and browser information. This is aggregate audience measurement - we do not use it to identify individual visitors.

When you browse the site (our own analytics). We also run ZetTrack, analytics we host ourselves rather than a third-party product. Before you answer the cookie banner, and if you decline it, we record only page views: the page, the page title, where you arrived from, the time, your browser, device type, screen size, language and timezone, and the IP address your request came from. No identifier cookie is set, and nothing identifies you from one day to the next.

If you accept cookies, we additionally record how you use the site: links and buttons you click, how far you scroll, how long a page is open and in front of you, files you download, and which form fields you click into. We record the names of form fields, never what you type in them. We never record keystrokes, never capture passwords or hidden fields, and never replay your session.

Linking earlier visits after you accept. When you accept cookies, we link the anonymous visits made from the same browser and the same IP address in the previous 24 hours to your new visitor record, so that the record shows your complete browsing history on the site rather than starting at the moment you clicked Accept. Anonymous visits are never linked to anyone who declines or does not answer the banner.

Your IP address. We use it to work out an approximate location (country, region, city) from a location database held on our own server, and, for business visitors, to try to identify the organisation you are visiting from. For that second purpose the IP address may be looked up in the public RIPE internet registry and with IPinfo (see section 4). Consumer broadband, mobile networks, VPNs and cloud providers are deliberately not identified.

• To reply to you - because you asked us to (your consent, and our legitimate interest in answering enquiries about our work).
• To deliver and support your licence - because it is necessary to perform the contract you entered into.
• To enforce licence terms - our legitimate interest in preventing a single paid licence being used beyond what was bought.
• To understand how the site is used - our legitimate interest in improving it, via aggregate analytics.
• Anonymous page views (ZetTrack) - our legitimate interest (GDPR Art. 6(1)(f)) in knowing which pages are read and where visitors come from. This sets no cookie and creates no identifier that persists between days.
• Personalised tracking (ZetTrack) - your consent (GDPR Art. 6(1)(a)). Clicks, scroll depth, time on page, the visitor identifier that persists between visits, and linking your earlier anonymous visits happen only if you accept the cookie banner. Declining costs you nothing on the site. You can withdraw consent at any time by clearing cookies for solzet.com or by emailing us.
• To meet our legal and tax obligations - for transaction records.

We do not sell personal data to third parties, and we do not use it for automated decision-making that produces legal effects.

We share data only with the service providers that make the site and the product work:

• Paddle.com Market Ltd (Paddle) - Merchant of Record: payment processing, invoicing, tax and refunds. See Paddle's privacy notice.
• Google Analytics 4 (Google) - website audience measurement.
• Microsoft 365 - our email, including the email that carries your licence key.
• Our own infrastructure - enquiries, contact-form and checklist requests, licence records and our own ZetTrack analytics are received and stored entirely on a server we operate ourselves, rented from Contabo and hosted in the EU. Form submissions are not passed to any third-party form service.
• IPinfo and the RIPE registry - an IP address is looked up with these services to find the organisation that owns or uses the network it belongs to. Only the IP address is sent.
• OpenRouter - a third-party AI API we use to analyse our own visitor analytics: to suggest which company a business visit came from, to classify a company's industry, and to summarise site traffic. What is sent is the visit pattern: the network range the visit came from (the first three parts of the IP address, a /24 range, never the full address), the network owner's name, the approximate location, and the pages and topics viewed. We never send your name, email address or full IP address.

We may also disclose data where the law requires it. We do not share your data with advertisers.

We operate from Armenia, and the providers above operate in the EU, the UK and the United States. Where personal data leaves the region it was collected in, we rely on the safeguards those providers put in place, such as the European Commission's standard contractual clauses.

Our own analytics and enquiry data are stored on a server hosted in the EU. The only parts that leave the EEA are the IP lookups with IPinfo and the analysis requests to OpenRouter described in section 4, both of which are based in the United States.

• Enquiries - up to 24 months after our last exchange, then deleted.
• Customer and licence records - for as long as the licence is active, and afterwards for as long as tax and accounting law requires us to keep the transaction record.
• Licence validation logs - retained short-term for troubleshooting and abuse detection, then removed.
• Google Analytics - kept in Google Analytics for the retention period set in that product.
• Our own analytics (ZetTrack) - individual events (page views, clicks, scrolls) are deleted after 12 months, keeping only anonymous daily totals per page. Session records are deleted after 24 months. Visitor records are deleted 24 months after that visitor's most recent visit, so if you never come back you are removed two years later. These periods are enforced automatically by a monthly job.

Depending on where you live, you can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or send it to another provider. You can object to processing based on legitimate interests, and withdraw consent at any time.

Email contact@solzet.com and we will respond within 30 days. If you are in the EU or UK and are unhappy with our response, you can complain to your local data protection authority.

Deleting your analytics record. Email contact@solzet.com from the address you used with us, or tell us roughly when you visited, and we will delete everything we hold about your visits: the visitor record, every session, every event, any form you submitted, and any location or company lookup used only for you. We do this within 30 days and confirm when it is done. If you have also been in touch with us about business, we may keep the contact record and correspondence where we need it for a contract or a legal claim (GDPR Art. 17(3)); we will tell you if so, and what we kept.

For data held by Paddle as Merchant of Record - invoices, payment details, billing history - contact Paddle directly using the link on your receipt.

Google Analytics sets its own cookies to measure site usage.

Our own analytics (ZetTrack) sets up to three first-party cookies on solzet.com. Once you answer the cookie banner, one cookie remembers your choice (1 year), whether you accept or decline. Only if you accept, two more are set: an anonymous visitor identifier (1 year) and a session identifier (30 minutes, refreshed while you browse). They contain your choice or a random identifier and nothing else: no name, no email address, no IP address. If you decline, the cookie recording your decision is the only one we set, and any visitor or session cookie from an earlier Accept is removed.

Paddle sets its own cookies during checkout, which are necessary for the payment to work. We do not use advertising or cross-site tracking cookies of any kind.

You can block or delete cookies in your browser settings. Blocking analytics cookies does not affect how the site works.

The site and our licensing service are served over HTTPS. Licence keys are cryptographically signed, and credentials and customer records are held on access-controlled systems. No system is perfectly secure, but we treat this data as data we would not want leaked about ourselves.

Our website and products are business tools intended for organisations. They are not directed at children, and we do not knowingly collect data from anyone under 16.

We may update this policy. The "last updated" date at the top always reflects the current version, and we will tell active customers by email about material changes.

Arsen Zakaryan IE, Hakob Hakobyan 1, Yerevan, Armenia
contact@solzet.com