Do I have to declare my income considering I am keeping them on the platform? On the site 5euros (the French equivalent of Fiverr), you can use the money earned through microservices by withdrawing it to your bank account, or by spending it on the site in order to buy services from other users. In the second case, is there anything to declare to the taxes?
In the second case, is there anything to declare to the taxes? Yes, just like in the scenario of depositing in your bank account. Otherwise it would be easy for everybody to avoid the heavy tax burden by bartering or transacting without the use of official currency. The Code général des impôts in its Article 13 includes in the concept of bénéfice ou revenu imposable the market value of profits and benefits in kind (&quot;y compris la valeur des profits et avantages en nature&quot;).
The price is not one of the terms and conditions of the CC-SA license. You may chose to attach a price to a derivative work (which you have the right to create under license section 3.b). But any person who receives the derivative work legitimately (from you or from someone who got it from you, directly or indirectly) must get it under the CC-SA license, and has the right to redistribute it, and may do so at no charge if that person so chooses. Also, you may not impose any copy protection or other technological measure that would prevent exercise of the reuser's rights. Whether selling a work that may be redistributed freely is good business is your decision.
The Cayman Islands are well known as a tax haven. They have a corporate tax of 0%, and that includes income from abroad. So by moving your company officially to the Cayman Islands, you can avoid to pay a lot of taxes. Now of course most other countries will still send you a tax bill for any income you make with business activities within their borders. But there are accounting tricks to get around that. For example, many countries only tax profits, not revenue. So you can reduce your annual profits of your national subsidiaries to zero by having them pay money to your company on the caymans. For example, you can transfer your trademark to your subsidiary on the Cayman Islands and then have your subisdiaries in all other countries pay the Cayman company an annual license fee for using that brand name. And the license fee happens to be just so expensive that your national taxable profits become zero. And no, that's not just a Chinese thing. Corporations all around the world use that method to avoid taxes.
No, you're not required to sign any contracts. But since you're offering a service, you do have to manage some compliance tasks. You are a data controller under the UK GDPR, regardless of whether you have a company. This brings with it various compliance requirements. For example, you MUST post a privacy notice in accordance with Art 13 GDPR that explains how you process user's information. You must sign data processing agreements with your data processors, such as your server providers. And you should reconsider transfers of data to the US, since such transfers are illegal or at least quite questionable in the wake of the 2020 Schrems II ruling. You now have prospective users that are asking you for an Art 28 data processing agreement (DPA). These are likely other organizations that are data controllers of their own. For them to use your browser extension, they either need to find a legal basis that allows them to share their user's/employee's data with you (controller to controller transfer), or they need you to act as their data processor (controller to processor transfer). The third alternative is not to use your plugin at all. Of these, a C2P arrangement is most convenient for these other orgs, but involves a bit of paperwork to set up first. If you want to act as their processor, this doesn't mean you'd have to create a company (though a corporation might be very desirable as a liability shield). Being a processor means that you're contractually bound to only use the personal data as instructed by the controller, and not for your own purposes. This restricts what you can do, and has some special compliance requirements. For example, you cannot engage new subprocessors without your controller's approval. However, processor status can also be convenient for you because you're not responsible for interacting with the controller's data subjects, e.g. you're not responsible for handling their data subject access requests. Note that it's possible to simultaneously be a controller for some users, and a processor for others. E.g. Google Docs is offered directly to users as a B2C product so that Google is a controller, but also as a B2B product as Google Workspace, where Google acts as a data processor. Personally, I'd rather not sign any contracts unless I'm doing it as a business, and adequately compensated for providing this service. GDPR is only one compliance aspect out of many, making it unwise to offer a SaaS product as a hobby. For example, copying other people's web content has copyright implications… A potential alternative for some of the organizations asking you might be to make it possible for them to self-host your backend, so that they are not required to rely on you as a data processor. If you have no plans to commercialize your software, making it Open Source could be a solution. But you're in no way required to do that if you don't want to.
It seems that your friend is taking part in a multi-level marketing scheme. However, this does not necessarily exclude a pyramid or snow ball scheme. Both can be illegal in Germany and Switzerland under the respective unfair business practices codes, because the systems do not rely on the sales of goods and services, but on the continuous recruitment of further sales persons. To clarify whether your friend's system is illegal, you could report the scheme to the competent watchdogs. In Germany the "Zentrale zur Bekämpfung unlauteren Wettbewerbs" in Bad Homburg is recommendable. As the company is operating from Switzerland, German law not be applicable without more. Therefore also contacting the Swiss authorities may be advisable. This seems to be the "Staatssekretariat für Wirtschaft SECO" in Bern.
You cannot do this through any established public license that I know of, but you could write your own. The model would be any educational use or non-commercial use license, such as CC NC licenses. The main challenge is defining the excluded classes of usage. That is why you should engage an attorney to draft this for you. I don't think there is any point in adding a $5M penalty clause. You offer a separate paid license for individuals who do not want to comply with the particular terms of your license, and set the fee to whatever you want. Saying that you're gonna fine violators is a bad idea because penalty clauses are illegal. Instead, the standard approach is a liquidated damages clause, where you state what a reasonable estimate of your damages would be. In the case of software that is available for purchase, illegal copying of the software obviously results at least in the cost of the software qua lost revenue as damages. Plus shipping and handling.
You are free to sell or not to sell to whoever you like (unless it is illegal discrimination, like not selling to white Christians), but it doesn't make a difference, because anyone who buys the software from you can legally sell it on to anyone they want. So you cannot control who ends up owning the software. If I want the software and you don't sell it to me, and I still want it, I'll just ask a friend to buy it and give them the money. Other people would just get a pirated copy if you refuse to sell to them (and would have very little bad conscience since they offered you cash and you refused to take it). You can put terms into a license, and in the USA this is binding. The customer may not agree with the license, and in that case they have the right to get a refund for the software. In the EU, I don't think a license is binding, so you'd have to sign a legally binding contract with the buyer. Apart from all that, you have very little chance to find out if the software is used against your wishes and to do anything about it.
Yes. Art 13 requires you to provide “the identity and the contact details of the controller”. You are the data controller. Your name and address are necessary to establish your identity. Using AdSense means you're offering an internet society service commercially. In that case, there's also probably some EU fair competition directive that was implemented in your countries national law and will provide equivalent requirements. For example, my country Germany has a far-reaching Impressumspflicht. Not sure if this is the most relevant EU law, but Art 22 of Directive 2006/123 requires that your country passed laws to ensure that you make available “the name of the provider, his legal status and form, the geographic address at which he is established and details enabling him to be contacted rapidly and communicated with directly and, as the case may be, by electronic means”. I think you would be in scope of this directive since you're acting commercially. This legally mandated self-doxxing is unfortunate for private bloggers, but it's also essential for making it possible to enforce data subject rights: if you were to violate someone's privacy rights, how could they sue you if they don't know where to serve you with a lawsuit? However, all things are a balancing act. These requirements are not intended to limit freedom of expression. If you're just trying to communicate something to the public without jeopardizing your anonymity, then paradoxically social media services can be more attractive.