01 Who we are

PrecisionWP is an Israeli business that publishes WordPress plugins and operates the precisionwp.net website, the customer dashboard, the license API, and the update service. For the personal data processed through these, PrecisionWP is the data controller. In this policy, "we", "our" and "us" means PrecisionWP; "you" means the person whose data we're describing.

For anything privacy-related - questions, requests, or complaints - email [email protected].

Because we have customers worldwide, this policy is written around the EU General Data Protection Regulation (GDPR), the UK GDPR, and Israel's Protection of Privacy Law, 5741–1981. Where other local rules apply to you, we aim to meet the highest applicable standard.

02 Roles & responsibilities

For personal data about you as our customer - your account, your purchase, and any support you ask for - we are the controller, and this policy explains how we handle it.

Our Plugins run entirely on your own WordPress server. We don't receive personal data about your site's visitors, so we're not your data processor and there's nothing for us to handle on that side. Whatever personal data you collect from your own visitors through our Plugins is yours to control - you're responsible for telling them what you collect and for obtaining any consents they require.

We may also create aggregated, statistical, or de-identified data from how the Service is used, for analytics and product improvement. Once data can no longer be linked to an identifiable person, it falls outside this policy.

03 What we collect & why

We keep this list short - every row exists because we genuinely need it for the reason beside it. Our products are all virtual, so we never ask for a shipping or billing address.

04 Who we share data with

We don't sell, rent, or trade personal data, and we don't hand it to anyone for their own marketing. The only outside parties that receive data through our website are the two analytics tools we run - and because those tools live on Google's and Microsoft's servers, using them does count as sharing, so we list them here in full.

Both providers act as our processors under their respective data-processing terms, and we've configured them to be as privacy-preserving as the tools allow - including IP anonymisation and turning off any use of the data for their own advertising. Both load only after you accept analytics cookies. Because both may transfer data to the United States, we rely on the EU–US Data Privacy Framework and Standard Contractual Clauses for those transfers - see §5.

We may also disclose data where we're legally required to (a valid court order or regulator request), to protect our rights or the safety of others, or as part of a merger, acquisition, or sale of assets - in which case we'll tell you before your data becomes subject to a different privacy policy.

05 International transfers

PrecisionWP is based in Israel, and Israel is recognised by the European Commission as providing an adequate level of data protection - so transfers of personal data from the EEA and the UK to us are permitted under that adequacy decision.

Our website and customer data are hosted with OVHcloud (OVH SAS, a French provider) in its Frankfurt, Germany data centre - inside the EEA, so no additional transfer safeguards are needed for the hosting itself. The two analytics tools we use - Google Analytics and Microsoft Clarity - process data on Google's and Microsoft's infrastructure, which includes servers in the United States. For those US transfers we rely on the EU–US Data Privacy Framework (and its UK extension) together with Standard Contractual Clauses. You can request a copy of the relevant safeguards by emailing [email protected].

06 How long we keep your data

We keep personal data only for as long as we need it, then delete or irreversibly anonymise it. The specific periods are in the table in §3; the principles behind them are:

• Account & identity data is kept for the life of your account and for a short wind-down window after you close it, so we can handle refunds, disputes, and final receipts;
• Purchase & invoice records are kept for 7 years because Israeli tax law requires it - we can't delete these early, even on request;
• Server & security logs are kept for 90 days and then purged automatically.

When a retention period ends, deletion is automated. Data you delete may persist in routine backups for a short additional period before those backups are cycled out and overwritten.

07 Your rights

Under the GDPR (and equivalents) you have the right to:

• Access - get a copy of the personal data we hold about you;
• Rectification - ask us to correct anything that's wrong;
• Erasure - ask us to delete your data (with limits where we're legally required to keep it, e.g. tax records);
• Portability - get your data in a structured, machine-readable format;
• Restriction - ask us to pause processing while a dispute about your data is resolved;
• Object - to processing based on legitimate interest, including any direct marketing;
• Withdraw consent - for anything we process on the basis of your consent, at any time and without affecting what we did before you withdrew it.

To exercise any of these, email [email protected] - we respond within 30 days and never charge for a reasonable request. We may need to verify your identity first, to make sure we're not handing your data to someone else.

You also have the right to complain to your local data protection authority. In Israel, that's the Privacy Protection Authority; in the EU, your country's supervisory authority; in the UK, the Information Commissioner's Office. We'd appreciate the chance to sort it out first, though.

08 How we contact you

We send two kinds of messages - the line between them matters for what you can opt out of.

Service messages

Things we need to tell you to actually run the Service: receipts, license-key emails, password resets, security alerts, billing failures, and material changes to this policy. You can't opt out of these while your account is active - they're part of the Service itself.

Promotional messages

Things we'd like to tell you but don't have to: new product launches, feature highlights, and the occasional tip or discount. We only send these where you've opted in, and every message includes a one-click unsubscribe link. To change your preferences at any other time, email [email protected].

If you've opted out of promotional messages, you'll still receive service messages - that's not a way around your preference, it's just how the two categories work.

09 Cookies

Strictly necessary cookies - the ones that sign you in to your account and protect our forms - are always on, because the site can't work without them, and they don't require consent. Everything else is analytics, and those cookies load only after you accept them in our cookie banner. You can change your choice at any time by reopening the banner.

10 Automated decisions

We don't make decisions that produce legal or similarly significant effects about you based solely on automated processing, and we don't build advertising or behavioural profiles of you. Some automated systems run in the background - for example, rate-limiting and abuse prevention on the license API - but a person reviews anything that would actually block or cancel your account, and you can ask us to explain or reconsider that outcome.

11 Children

Our Service is a professional developer tool and isn't directed at children. We don't knowingly collect personal data from children. If you're a parent or guardian and you believe a child has given us their data, email [email protected] and we'll delete it.

12 Changes to this policy

We may update this policy at any time. Changes take effect as soon as we post the revised version and update the "Last updated" date at the top of this page - so it's worth checking back now and then. Where a change is material, we'll make reasonable efforts to flag it (for example, a notice on the site or an email to account holders). If you keep using the Service after a change takes effect, you're accepting the updated policy.