Privacy policy
Giftaro runs on your own server. That shapes this whole policy: there is a short list of things we hold about you, and a much longer list of things we deliberately never see.
1. Who is responsible
Virtualix LLC, a company based in Indianapolis, Indiana, United States, is the controller of the personal information described here. Giftaro is our product. Write to hello@giftaro.co with any privacy question or request.
2. What we collect
Only what is needed to sell you a licence and support it.
- Account
- Your name and email address.
- Billing
- Billing country, and the tax identifier you enter if you provide one. Payment details go directly to our reseller, Freemius, and are described below.
- Licence
- Your plan, licence key and renewal dates, and the sites you activate it on, as described below.
- Support
- The content of emails you send us, and anything you choose to include in them.
- Website
- Standard server logs from our host, including IP address and browser type, kept for security and troubleshooting.
Licence activation and updates are handled by Freemius’s licensing software, which is built into the plugin. When you activate your key on a site, it sends Freemius the key, the site’s address, an identifier for the site and technical details such as the Giftaro version, and it can include the name and email address of the WordPress user who activates it. Two things are sent only if you switch them on, and both start switched off: diagnostic info (your WordPress and PHP versions and the site’s title and language) and your list of plugins and themes. The first activation on a site, and each update download, also carry WordPress’s standard request header, which names the WordPress version and the site’s address. If the activation screen asks whether you want security and feature updates, educational content and offers by email, your answer is sent too.
After that it checks your licence and looks for updates about once a day, which keeps those site details up to date, and it tells Freemius when Giftaro is deactivated or uninstalled on the site. If you deactivate Giftaro on a site that is not connected to Freemius, such as one where a licence was never activated, Freemius may ask why. Answering is optional. The answer is kept on the site and sent when Giftaro is uninstalled. Anonymous feedback starts ticked: the answer then goes with the site identifier and without anyone’s name or email address, though the request header still names the site’s address. If you untick it, the answer goes with the site’s address, WordPress’s standard request header and the WordPress user’s name and email address. A site connected to Freemius is not asked, because there the answer could not be anonymous, and an answer kept from before a site was connected goes with its licence record.
3. What we never see
Giftaro runs entirely inside your own WordPress installation. Gift card numbers, PINs, balances, ledger entries, eGift recipients and your customers' personal data never leave your server. They are not sent to us, and we have no mechanism to read them.
The plugin does not send gift card or customer data anywhere. Its licensing software sends Freemius the licence details described in section 2.
We also never see your customers' payment card details. Those are handled by whatever payment gateway you have configured in your own store, which is a relationship between you and that gateway.
4. Payments and Freemius
Giftaro licences are sold through our online reseller Freemius, Inc., which is the Merchant of Record for our orders. When you buy or renew, you enter your payment details directly with Freemius. We never see or store your full card number. Freemius shares with us what we need to provide and support your licence, such as your name, email address, billing country, the plan you bought and whether the payment succeeded.
Freemius receives your personal data and processes it in accordance with Freemius's Privacy Policy. That includes your name, email address, billing address, payment details and transaction history, which Freemius and its payment partners use to process the payment, collect tax and meet their own legal and anti-fraud obligations. It also includes the licence activation details described in section 2.
5. Why we hold it
- To sell you a licence, take payment, and issue your licence key.
- To let your installation confirm that its licence is valid and receive updates.
- To answer your support emails.
- To send transactional email, ourselves or through Freemius: receipts, licence keys, renewal reminders and security notices. These are part of the service and are not marketing.
- To meet tax, accounting and anti-fraud obligations.
We do not sell your personal information, and we do not share it with advertisers.
7. How long we keep it
Account and licence records are kept while your licence is active and for seven years afterwards, because tax law requires us to keep records of sales. Support emails are kept for three years. Server logs are kept for 30 days.
8. Your rights
You can ask us to show you the personal information we hold about you, correct it if it is wrong, or delete it. Email hello@giftaro.co and we will respond within 30 days.
Deletion has one limit: we cannot delete records we are legally required to keep for tax purposes until that period has passed. Everything outside those records can be removed.
If you are in Canada you may complain to the Office of the Privacy Commissioner of Canada. If you are in the United Kingdom or the European Economic Area you may complain to your national data protection authority.
10. Security
Our site is served over HTTPS. Payment details go directly to Freemius and never touch our servers. Access to our billing and support systems is limited to people who need it and protected by two-factor authentication.
No system is perfectly secure. If a breach ever affected your personal information we would tell you and the relevant regulator as the law requires.
11. Changes
If we change this policy in a way that materially affects you, we will email active licence holders. The date at the top of this page always shows the current version.
12. Contact
Privacy questions and requests go to hello@giftaro.co. Other ways to reach us are on the contact page.