1) Information we collect

1.1 On our website

• Basic visit data: IP address, browser/user-agent, pages viewed, and referrer (standard web logs).
• Contact/support: if you contact us, we receive the info you provide (name, email, message, attachments).
• Checkout/Customer Portal: when you purchase or manage a license, our commerce provider collects order details (billing email, name, address if provided for invoices, tax/VAT data where required).

1.2 In the plugin (Free & Pro)

• License activation (Pro): site URL, WordPress/PHP versions, plugin version, and license key/ID to validate updates and entitlements.
• Error logs: if enabled or provided to support, logs may include technical information about your site’s environment to help diagnose issues.
• Optional usage analytics: only with explicit opt-in. This may include anonymized/aggregated data about settings used and environment versions to guide product improvements. You can opt out at any time from the plugin settings.

2) How we use information

• Provide the plugin, updates, license checks, and security fixes.
• Process purchases, renewals, and invoicing through our commerce provider.
• Offer support and respond to requests.
• Maintain and improve the plugin and website (e.g., compatibility and performance).
• Communicate important notices (e.g., security or critical updates).

3) Legal bases (GDPR/UK GDPR)

• Contract: to deliver purchases, licensing, and updates.
• Legitimate interests: to secure and improve our software and site.
• Consent: for optional analytics and certain cookies/technologies.
• Legal obligation: to comply with tax/accounting and regulatory requirements.

4) Processors & services we use

We share data with service providers only as needed to operate Authica. Examples include:

• Licensing & Payments: A commerce/licensing provider (e.g., Freemius) acts as Merchant of Record to process orders, taxes, subscriptions, and license activations. They receive order and licensing data you provide during checkout/activation.
• Bot protection (optional): Cloudflare Turnstile may process IP/browser signals to verify requests if you enable bot protection in the plugin.
• Hosting/CDN & Email: Our website hosting/CDN and email provider(s) process technical logs and messages necessary for site delivery and support.

These providers may process data in countries outside your own. We rely on appropriate safeguards (such as contractual clauses) where required.

5) Cookies & similar technologies

Our website may use strictly necessary cookies for security, session, and licensing operations. Optional analytics or embedded services may set additional cookies—these will only run with your consent where required. In the plugin, cookies are generally not used by Authica itself, but third-party services you enable (e.g., Turnstile) may set their own cookies per their policies.

6) Your choices

• Opt-in analytics: you can opt in/out any time from the plugin settings.
• Emails: you can unsubscribe from non-essential emails via a link at the bottom of the email.
• Do Not Track: we respect standard browser settings where technically feasible, but behavior may vary by service.

7) Data retention

We retain personal data only as long as necessary for the purposes described here (e.g., while a license is active, to provide support, or to meet legal/accounting obligations). We may retain anonymized or aggregated information that does not identify you.

8) Security

We use reasonable technical and organizational measures to protect your information. No system is 100% secure, so please keep your site, plugins, and licenses confidential and up to date.

9) Your rights

If you are in the EEA/UK (or similar jurisdictions), you may request to access, correct, delete, or restrict processing of your personal data, or to receive a portable copy. You may also object to processing based on legitimate interests, and withdraw consent where processing is based on consent.

To exercise rights, email [email protected]. We may need to verify your identity before fulfilling a request.

10) California (CCPA/CPRA)

California residents have the right to request access to, deletion of, and details about personal information we collect, as well as to opt out of certain data sharing. We do not sell personal information as defined by CCPA/CPRA. To make a request, email [email protected].

11) Children’s privacy

Authica is not directed to children under 13 (or the age required by local law). We do not knowingly collect personal information from children.

12) International transfers

Your information may be processed outside your country (e.g., by our payments/licensing provider or hosting/CDN). Where required, we use appropriate safeguards (such as standard contractual clauses) to protect your data during transfers.

13) Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a new “Last updated” date. Material changes may be communicated by email or in the plugin.

14) Contact

For privacy questions or requests, email [email protected]. If you require a postal address for formal correspondence, please request it via email.