WordPress Plugin Privacy Policy

1. Scope

This policy covers visitors to drecha.com and customers who purchase, download, activate, validate, update, or request support or refunds for Drecha WordPress plugins.

2. Data we process

We may process your name, email address, order and payment references, purchased product, encrypted and hashed license records, normalized website URL or domain, installation identifier, activation state, validation timestamps, update checks, protected-download activity, IP-derived security records, refund status, and messages you send us.

We do not need or request the content of your WordPress posts, pages, events, products, orders, or customer records for ordinary license validation.

3. Why we use it

We use this data to complete purchases, issue and validate licenses, enforce activation limits, provide downloads and updates, process refunds, prevent abuse, secure our endpoints, answer support requests, and comply with accounting and legal obligations.

4. Paddle and service providers

Paddle processes checkout, payment, tax, fraud-screening, receipt, dispute, and refund information under its own privacy terms as Merchant of Record. We may use infrastructure, email, logging, and security providers only as needed to operate the website and licensing service. We do not sell personal data as a data-broker product.

5. Retention and security

Purchase, tax, refund, fraud-prevention, and license records may be kept as required for legal, accounting, dispute, and abuse-prevention purposes. License keys are stored encrypted and matched through a one-way hash. Public API requests are validated and rate limited, and license keys should never be placed in URLs.

6. Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, objection, or portability. Some financial and security records must be retained. Open a support ticket for privacy requests; we may verify your identity first.