PRIVACY COMMITMENT: CodeClove Technologies (“CodeClove”, “we”, “us”, “our”) respects your privacy and is committed to protecting your personal data in strict compliance with global data protection laws, including the European Union General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act (CCPA/CPRA), and India’s Digital Personal Data Protection Act (DPDP).
1. Data Controller Information
The entity responsible for processing your personal data (the Data Controller) is:
CodeClove Technologies
Data Protection Officer: [email protected]
General Privacy Inquiries: [email protected]
Website: https://codeclove.com
2. What Personal Data We Collect
We only collect data that is strictly necessary to provide, license, secure, and improve our digital software and support services:
- Account & Contact Data: Name, work email address, company name, and encrypted account password when you register or make a purchase.
- Billing & Transaction Records: Billing address, country, tax/VAT identification number (if applicable), purchase history, and payment transaction IDs. Note: All payment card processing is handled directly by PCI-DSS Level 1 certified processors (Stripe, PayPal). CodeClove never sees, processes, or stores your credit card numbers or banking credentials.
- Software License Telemetry: When our plugin checks for software updates or validates your license key, our licensing server receives the active website domain URL, license key, plugin version, WordPress core version, and PHP version. This technical data is processed solely to authenticate update delivery and prevent license fraud. We do NOT collect customer visitor data, store order databases, or student/user records from your website.
- Technical & Log Data: IP address, browser user-agent, operating system, and anonymous site analytics to monitor server performance, mitigate DDoS attacks, and prevent fraudulent transactions.
3. Legal Bases for Processing (GDPR Article 6)
We process your personal data under the following lawful legal grounds:
- Performance of a Contract (Art. 6(1)(b)): To process your purchase, issue license keys, deliver software updates, manage your account, and provide technical support.
- Legitimate Business Interests (Art. 6(1)(f)): To prevent software piracy, detect fraudulent transactions, protect network security, and maintain software stability.
- Legal & Tax Compliance (Art. 6(1)(c)): To maintain financial accounting records, invoice logs, and comply with international tax/VAT regulations.
- Consent (Art. 6(1)(a)): For optional email newsletters and marketing communications. You may withdraw your consent at any time via the one-click unsubscribe link.
4. Third-Party Subprocessors & Service Providers
We do not sell, rent, or trade your personal data. We share data only with trusted third-party service providers (subprocessors) bound by strict Data Processing Agreements (DPAs):
| Subprocessor | Purpose | Location / Transfer Safeguard |
|---|---|---|
| Stripe Inc. | Payment gateway & fraud prevention | USA / Standard Contractual Clauses |
| PayPal Inc. | Payment gateway & checkout processing | USA / Binding Corporate Rules |
| Cloudflare Inc. | CDN, DDoS protection & DNS security | Global Edge Network / Standard Contractual Clauses |
| AWS / DigitalOcean | Cloud infrastructure & licensing servers | Encrypted Cloud Data Centers / ISO 27001 |
5. International Data Transfers
For transfers of personal data originating from the European Economic Area (EEA) or UK to countries without an adequacy decision, we ensure appropriate safeguards are implemented, specifically the European Commission’s approved Standard Contractual Clauses (SCCs) and strict end-to-end encryption.
6. Data Retention Policy
We retain personal data only as long as necessary to fulfill the purposes for which it was collected:
- Account Data: Retained for the duration of your active account plus three (3) years following your last license expiry.
- Financial & Tax Invoices: Retained for seven (7) years in compliance with statutory financial accounting laws.
- License Telemetry Logs: Retained on rolling 90-day security log cycles, after which logs are anonymized or permanently purged.
7. Your Data Protection Rights
Regardless of your geographic location, CodeClove affords you the following fundamental privacy rights:
- Right to Access: You can request a complete copy of the personal data we hold about you.
- Right to Rectification: You can update or correct inaccurate profile and billing information directly via your account settings.
- Right to Erasure (“Right to be Forgotten”): You may request the permanent deletion of your personal data, provided we are not legally required to retain it for tax or legal compliance.
- Right to Data Portability: You can receive your account and purchase data in a structured, commonly used, machine-readable format.
- Right to Object & Restrict Processing: You have the right to object to processing based on legitimate interests or request restrictions on data processing.
To exercise any of these rights, email our Data Protection Officer at [email protected]. We respond to all verified requests within thirty (30) calendar days free of charge.