Privacy – 1224Tools Bathymetry

1224Tools (“1224Tools”, “we”, “us”, or “our”) respects your privacy and is committed to handling personal information appropriately in connection with the 1224Tools Bathymetry service (the “Service”).

This Privacy Policy explains what information we collect, how we use it, how it may be shared, how long it may be retained, and the choices available to users.

1. Information We Collect

We may collect or process the following categories of information in connection with the Service.

Account Information

email address;
WordPress username and account identifier;
authentication and session information;
customer account status and internal customer identifiers; and
information necessary to link a website account with the corresponding Bathymetry customer account.

Passwords are handled through the standard WordPress authentication system. We do not store users’ passwords in plaintext.

Subscription and Billing Information

When you sign up for an account, we collect your full name and billing address, including your street address, city, region or state, postal code, and country. You may also provide a second address line and company name.

We use this information to administer your account and subscription, process billing, meet tax requirements, and prepare and manage invoices. You can review and update your billing information in the Dashboard.

We may process information relating to subscriptions and billing, including:

subscription plan;
subscription status;
billing cycle and renewal information;
cancellation, payment-failure, grace-period, suspension, and termination status;
usage-based charges and outstanding payment obligations;
Paddle customer, subscription, transaction, invoice, or related identifiers; and
billing or location information made available to us where necessary for account administration, tax, compliance, or support.

Payment processing is provided by Paddle. Payment card details and other payment credentials are processed by Paddle and are not stored by 1224Tools.

API Key Information

We process information associated with API keys, including:

API key status;
creation, rotation, expiration, revocation, and disablement information;
the account or subscription associated with the key; and
security-related metadata necessary to operate the Service.

API key plaintext is displayed only when a new key is issued or rotated. It is not stored in retrievable plaintext form and cannot later be displayed again by the Service.

Usage Information

We may collect and maintain information concerning use of the Bathymetry API, including:

billable request counts;
plan allowance and remaining allowance;
usage percentage;
overage usage;
usage threshold events, including 80%, 90%, and 100% thresholds;
API-key-level usage information; and
billing-cycle-related usage records.

Technical and Security Information

When you access the website, Dashboard, API, or related systems, we may process technical information such as:

IP address;
browser and user-agent information;
device and operating-system information;
request date and time;
requested URL, path, or API endpoint;
authentication success or failure information;
rate-limit and abuse-prevention information;
error and security-event information; and
server and infrastructure logs reasonably necessary for operation, security, troubleshooting, and fraud prevention.

We do not intentionally include passwords, retrievable API key plaintext, Paddle credentials, administrative secrets, or Dashboard signing secrets in browser-accessible data or ordinary application logs.

Communications

If you contact us, we may retain your name, email address, message content, support history, and other information you voluntarily provide.

2. How We Use Information

We may use information collected through the Service for purposes including:

creating, authenticating, and administering customer accounts;
providing access to the customer Dashboard;
linking website accounts with Bathymetry customer accounts;
providing and securing API access;
issuing, rotating, revoking, and managing API keys;
measuring API usage and enforcing plan allowances;
calculating and administering usage-based charges;
managing subscriptions, renewals, cancellations, upgrades, downgrades, payment failures, grace periods, suspension, and termination;
processing account-deletion requests;
preventing fraud, abuse, scraping, unauthorized access, and security incidents;
diagnosing errors and maintaining the availability and reliability of the Service;
responding to inquiries and support requests;
complying with legal, tax, accounting, security, dispute-resolution, and regulatory obligations; and
enforcing our Terms and protecting the rights, property, and security of 1224Tools, users, and third parties.

3. Cookies and Authentication

The Service uses WordPress authentication and related browser technologies to support secure sign-in and account sessions.

These may include:

standard WordPress authentication cookies;
a WordPress test cookie used to confirm that the browser accepts cookies;
session-related security data;
WordPress REST API nonces used to protect authenticated requests; and
other strictly necessary cookies or similar technologies required for security and operation of the Service.

The customer Dashboard also uses a short-lived, environment-specific Dashboard token to communicate with the Bathymetry backend. This token is valid for approximately five minutes, is stored only in browser memory during use, and is not intended to be stored persistently in the browser.

4. Paddle and Payment Processing

Paddle acts as the payment provider and Merchant of Record for paid subscriptions and related transactions where applicable.

When you make a purchase, renew a subscription, pay an invoice, or otherwise complete a payment-related action, Paddle may independently collect and process information such as your name, email address, billing details, payment information, tax information, location, and transaction information in accordance with Paddle’s own terms and privacy practices.

1224Tools receives only the information reasonably necessary to identify and administer the applicable customer, subscription, transaction, invoice, payment status, tax or billing status, and related Service access.

We send the necessary billing information you provide during signup or update through the Dashboard to Paddle for subscription, billing, tax, and invoice processing.

Paddle is the primary service used to store and process your billing profile. We retain the account-linking and processing records needed to operate the Service, without unnecessarily storing duplicate copies of your full billing address in our WordPress website or Cloudflare D1 databases.

5. Service Providers

We may use third-party service providers to operate the Service, including providers for:

website hosting;
content delivery, network infrastructure, storage, databases, API execution, abuse prevention, and security, including Cloudflare;
payment processing and subscription administration, including Paddle;
email or communication services where used;
monitoring, diagnostics, and security; and
other technical services reasonably necessary to operate the Service.

These providers may process information only to the extent necessary to provide their services or as otherwise permitted by their own applicable terms and privacy obligations.

6. Disclosure of Information

We do not sell personal information.

We may disclose information where reasonably necessary:

to service providers acting on our behalf;
to Paddle for payment, subscription, billing, tax, refund, dispute, and transaction administration;
to prevent or investigate fraud, abuse, attacks, security incidents, or violations of the Terms;
to comply with applicable law, legal process, court orders, or lawful governmental requests;
to establish, exercise, or defend legal claims;
to protect the rights, property, or safety of 1224Tools, users, or third parties; or
in connection with a business transfer, restructuring, succession, or similar transaction, subject to applicable law.

7. International Processing

The Service uses infrastructure and service providers that may process or store information outside your country or region.

Accordingly, personal information may be transferred to or processed in countries whose data-protection rules differ from those of your place of residence. Where required, we take reasonable measures to handle such transfers in accordance with applicable law.

8. Security

We use reasonable technical and organizational measures designed to protect information against unauthorized access, disclosure, alteration, loss, misuse, and destruction.

Measures used by the Service include, where applicable:

HTTPS encryption;
WordPress authentication and session controls;
short-lived customer-scoped Dashboard tokens;
environment separation between test and production systems;
API key hashing and non-storage of retrievable plaintext keys;
API key rotation and revocation;
CSRF protection;
authorization controls designed to prevent cross-account access;
rate limiting and abuse detection;
restricted administrative credentials and secrets;
security logging and monitoring; and
access controls applied to backend systems and infrastructure.

No system can guarantee absolute security, and we cannot guarantee that unauthorized access, disclosure, loss, or misuse will never occur.

9. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including operation of the Service, subscription administration, billing, security, fraud prevention, legal compliance, tax and accounting obligations, and dispute resolution.

Some technical, billing, transaction, security, fraud-prevention, or legal records may be retained after account closure where reasonably required or permitted by applicable law.

10. Subscription Cancellation and Account Deletion

Canceling a subscription is separate from deleting an account.

Cancellation normally stops future renewal but does not immediately delete the customer account or personal information. Access may continue until the end of the applicable paid subscription period, subject to the Terms.

A request to delete an account may be placed on hold while there are outstanding balances, unpaid usage-based charges, unresolved transactions, disputes, security investigations, or other unresolved legal or contractual obligations, unless applicable law requires deletion or other action regardless of those obligations.

Once applicable obligations have been resolved, or where applicable law otherwise requires it, we will delete or anonymize personal information associated with the account within a reasonable period, generally within 30 days.

Completion of account deletion results in revocation of associated API keys and termination of access to the customer Dashboard and Service.

We may retain limited records after deletion where reasonably necessary for legal, tax, accounting, security, fraud-prevention, or dispute-resolution purposes.

11. Your Rights and Requests

Depending on applicable law and your place of residence, you may have rights relating to your personal information, such as requesting access, correction, deletion, or other handling of personal information.

Requests may be submitted through our contact page. We may request reasonable information to verify your identity and protect customer accounts before acting on a request.

We may decline or limit a request where permitted or required by applicable law, including where retention is necessary for legal, tax, accounting, security, fraud-prevention, payment, contractual, or dispute-resolution purposes.

12. Account and Security Verification

For security-sensitive requests, including requests involving account access, API keys, billing, subscription changes, or account deletion, we may require reasonable authentication or identity verification before processing the request.

You should never send passwords, API key plaintext, payment card numbers, administrative credentials, or other sensitive secrets through ordinary support messages.

13. Children

The Service is intended for persons who are legally capable of entering into the applicable agreement. The Service is not directed to children, and users must satisfy the eligibility requirements stated in the Terms.

14. Security Incidents

If we become aware of a security incident involving personal information, we will investigate and take reasonable remedial measures. Where required by applicable law, we will provide appropriate notices to affected individuals or authorities.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to the Service, applicable law, security practices, service providers, or business operations.

The updated version will be published on this website. Where required by applicable law or where a change is materially significant, we may provide additional notice.

16. Contact

For questions, privacy requests, account-deletion requests, or other inquiries regarding this Privacy Policy, please use our contact page:

Contact 1224Tools

17. Relationship to Other Terms

Use of the Service is also subject to the following:

If another applicable agreement, law, or mandatory third-party requirement provides greater privacy protection or imposes additional obligations, that requirement will apply to the extent required.