Privacy Policy

1. Scope

This Privacy Policy applies to plugins.entitude.com and to the Entitude Plugins products you install on your own WordPress sites. It does not apply to third-party services we link to or integrate with — please review their policies separately.

2. Data We Collect

• Account data: name, email address, password (hashed), billing address.
• Order data: the products you bought, transaction IDs, license keys, invoice records.
• License activations: domain name of each site you activate a license on, plugin version, WordPress version, PHP version.
• Usage analytics: aggregated, anonymised page views and feature usage on plugins.entitude.com. We do not sell this data.
• Support data: the content of tickets, chat transcripts and screenshots you send us.

3. How We Use Your Data

• Process orders, deliver licenses and serve plugin updates.
• Provide priority support and security notifications.
• Improve our products with anonymised, aggregated analytics.
• Send transactional emails (receipts, renewals, security alerts). Marketing email is opt-in only.

4. Legal Basis (GDPR)

We process personal data on the basis of contract (delivering your order), legitimate interest (securing accounts, preventing fraud, product improvement) and consent (marketing emails, optional analytics cookies). You may withdraw consent at any time.

5. Who We Share Data With

• Payment processors (e.g. Stripe, Lemon Squeezy) — to process card payments.
• Email providers (transactional + newsletter) — only to deliver the emails you receive from us.
• Cloud hosting — to operate the website and license API.
• We never sell or rent your personal data to third parties.

6. Retention

Account and order data is retained for as long as you have an active account, plus 7 years for tax and accounting compliance. Support tickets are retained for 3 years. You may request deletion at any time (see your rights below).

7. International Transfers

Some of our processors are located outside the EEA / UK. Where this is the case, transfers are protected by Standard Contractual Clauses (SCCs) or equivalent safeguards.

8. Your Rights

• Access — request a copy of your personal data.
• Rectification — ask us to correct inaccurate data.
• Erasure — request deletion ('right to be forgotten').
• Portability — receive your data in a machine-readable format.
• Object / restrict — to processing based on legitimate interest.
• Withdraw consent — for marketing emails and optional analytics.

9. Security

We use TLS in transit, encryption at rest, hashed passwords (Argon2/bcrypt), least-privilege access controls and regular backups. No system is 100% secure — if you believe your account has been compromised, contact security@entitude.com immediately.

10. Children's Data

Our products are not directed at children under 16, and we do not knowingly collect their data.

11. Contact

For privacy questions or to exercise your rights, contact our Data Protection Officer at privacy@entitude.com. You also have the right to lodge a complaint with your local data protection authority.