Privacy Policy

## 1. Introduction

OxPlugins ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at oxplugins.com, use our products, or interact with our services.

By using the Service, you consent to the practices described in this policy.

## 2. Information We Collect

### 2.1 Information You Provide

Account information — name, email address, and password when you register

Payment information — billing details processed securely through Stripe, PayPal, or Klarna (we do not store full card numbers)

Support communications — messages, attachments, and contact details submitted through support channels

Partner applications — business information submitted through the Partner Programme application form

### 2.2 Information Collected Automatically

Usage data — pages visited, features used, and interactions with the website

Device information — browser type, operating system, and device type (desktop, mobile, tablet)

IP address — used for security, fraud prevention, and approximate geographic location (country/city level). IP addresses are hashed with a daily rotating salt and never stored in raw form.

Cookies — we use essential cookies for authentication and session management. See Section 7 for details.

### 2.3 Information from Third Parties

Payment providers — transaction confirmations and billing events from Stripe, PayPal, and Klarna

## 3. How We Use Your Information

We use your information to:

Provide, maintain, and improve our services

Process purchases and deliver license keys

Send transactional emails (order confirmations, license renewals, password resets)

Provide customer support

Detect and prevent fraud, abuse, and security threats

Analyse website usage to improve user experience (using first-party analytics only — no third-party tracking pixels)

Comply with legal obligations

We do not sell, rent, or trade your personal information to third parties.

## 4. Data Sharing

We share your information only in the following circumstances:

Payment processors — Stripe, PayPal, and Klarna process your payment data under their own privacy policies

Email services — we use transactional email services to send order confirmations and support replies

Hosting providers — our website and data are hosted on infrastructure providers that process data on our behalf

Legal requirements — we may disclose information if required by law, court order, or governmental authority

Business transfers — in the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the business

## 5. Data Retention

Account data — retained while your account is active, and for up to 12 months after deletion request

Transaction records — retained for 7 years as required for tax and accounting purposes

Analytics data — raw page view data is retained for 90 days, then aggregated into monthly summaries

Support communications — retained for 24 months after the last interaction

IP hashes — rotated daily and cannot be linked back to an individual after the rotation date

## 6. Your Rights

Depending on your location, you may have the right to:

Access — request a copy of the personal data we hold about you

Rectification — request correction of inaccurate data

Erasure — request deletion of your personal data (subject to legal retention requirements)

Restriction — request that we limit processing of your data

Portability — request your data in a machine-readable format

Objection — object to processing based on legitimate interests

To exercise any of these rights, contact us at support@oxplugins.com. We will respond within 30 days.

## 7. Cookies

### 7.1 Essential Cookies

We use essential cookies for:

Authentication — keeping you logged in to your account

Session management — maintaining your shopping cart and checkout state

Security — CSRF protection and fraud prevention

These cookies are necessary for the Service to function and cannot be disabled.

### 7.2 Analytics

We use first-party, privacy-friendly analytics (no third-party tracking scripts). Page views are recorded with:

Hashed IP addresses (daily rotating salt — no raw IPs stored)

Country and city-level geolocation (where available)

Device type and referrer URL

No cookies are used for analytics tracking

No fingerprinting or cross-site tracking

### 7.3 Third-Party Cookies

If Google Tag Manager is enabled, it may set cookies based on the tags configured. We do not control cookies set by third-party services loaded through GTM.

## 8. Data Security

We implement appropriate technical and organisational measures to protect your data, including:

HTTPS encryption for all data in transit

Encrypted storage for sensitive data (tokens, keys)

Row-level security on our database

Regular security reviews and updates

Access controls limiting who can view personal data

While we strive to protect your data, no method of electronic transmission or storage is 100% secure.

## 9. Children's Privacy

Our Service is not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.

## 10. International Transfers

Your data may be processed in countries outside your country of residence. We ensure appropriate safeguards are in place when transferring data internationally, including standard contractual clauses where applicable.

## 11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We will notify registered users of significant changes via email.

## 12. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

Email: support@oxplugins.com

Subject line: Privacy Request