Privacy Policy

Last updated: 10 July 2026

DRAFT — pending owner review. This page describes exactly what Undelete365 sends and stores, based on its actual code. It is not a substitute for legal advice; please review it (and have a professional check it if you sell to consumers) before treating it as final.

Who we are

Undelete365 is built and operated by HS Services, a business registered with the Dutch Chamber of Commerce (KVK) under number 27314126. Contact: [email protected].

What Undelete365 does inside your tenant

Undelete365 is a SharePoint Framework (SPFx) web part that your organization installs into its own Microsoft 365 tenant. It runs entirely inside your users' own browser sessions, using their existing SharePoint permissions. The Free tier searches your site's recycle bin (read-only). The Pro tier's Mass Restore feature restores items you choose back out of the recycle bin — an action you explicitly request and confirm, using your own account's existing restore permission; Undelete365 does not grant, escalate, or bypass any permission. HS Services never receives, stores, or has access to your file names, file contents, folder structures, user lists, or any other tenant data — none of that ever leaves your tenant.

The one thing that does leave your tenant: license validation

If a license key has been entered in the web part's settings, it periodically calls https://license.undelete365.com/validate and sends exactly three values:

That's the entire payload. No file names, counts, statistics, or usage data are ever included. This call is cached for 7 days and tolerates 14 days of the license server being unreachable before Pro features pause. If no license key is entered, the Free tier makes this call zero times.

What we collect when you buy a Pro license

Purchasing goes through Mollie B.V., a Dutch, PCI-DSS-certified payment processor. When you check out, we (via our checkout system) receive your email address and, if you provide it, your name. Mollie itself processes your payment card or bank details directly — we never see or store those.

We use your email address only to: deliver your license key, send your invoice, and respond if you contact support. We do not use it for marketing, and we do not share it with anyone except the processors named on this page.

Your license key, purchase email, and order status are stored in our infrastructure (Cloudflare Workers KV) for as long as the license is valid — which, since licenses are perpetual, is indefinitely, unless you ask us to delete it (see "Your rights" below).

Email delivery

Your license-key email is sent via Resend, a transactional email provider, using an address on our own verified domain ([email protected]).

This website

This marketing website (undelete365.com) does not use cookies, analytics, or any third-party tracking scripts. It only loads resources from its own domain.

Your rights

Under the GDPR, you can ask us to access, correct, or delete the personal data we hold about you (your email address and order history). To do so, email [email protected] and include the tenant hostname or license key associated with your purchase so we can find your record.

Changes to this policy

If this policy changes, the "last updated" date above will change with it. We won't change what data we collect without updating this page first.

Contact

HS Services · KVK 27314126 · Netherlands · [email protected]