Privacy Policy

We are committed to responsible data management and follow the principles of data protection law. When you buy from us, register an account or ask for support, we collect the information you give us: your name, email address, billing address, license keys and the sites they are used on, order history and your support messages. We use it to deliver your purchases and licenses, provide updates and downloads, answer support requests, prevent fraud, meet our legal obligations and, if you choose, send you news about WP EasyCart. We never sell it.

1.1 Your store’s customers

The WP EasyCart plugins run on your own website. The information your shoppers enter is stored on your website and controlled by you as the store owner, not by us. We receive it only where a feature you switch on sends it to one of our services, as described in section 4. What the WP EasyCart plugins store on your website:

• Usernames and encrypted passwords, for shoppers who create an account or save their account information during checkout.
• Email addresses, saved with orders and accounts.
• Billing addresses, required on all orders for payment, tax and contact purposes.
• Shipping addresses, optional depending on the store and product setup, and used for shipping and tax calculations.
• Order history and order data saved per shopper, which can contain personal information including products, options and costs.
• IP addresses, saved when an order is processed to help payment processors detect and prevent fraud.
• Cookies and session data used for the shopping cart and ecommerce tracking, which can include an identifier that ties a shopper to their cart, account and purchase history.
• For some payment processors, the last four digits and expiration date of a card, used in order management to verify terminal orders.
• Newsletter sign-ups, with the date, where the person signed up and, for sign-ups on the store, their IP address, as a record of consent.
• Where each order came from (for example a search engine, an ad campaign or an AI assistant), read from a first-party cookie and subject to the store’s cookie consent settings.
• Checkout protection records of declined payments and security checks, kept for 30 days in one-way coded (hashed) form, to stop card testing.
• Store activity: daily totals of product views, searches and visits, with nothing that identifies a visitor.
• When the store owner switches them on, tracking codes such as Google Analytics and the Meta (Facebook) Pixel collect information such as order data, location and pages visited. This information is not saved by WP EasyCart; it is sent directly to those services.
• Third-party applications the store owner adds, such as analytics and order tracking, may store location, IP address, order and other personal information.
• Full card numbers are never stored by WP EasyCart; payments go to the store’s payment processor.

1.2 Cookies

We use cookies as part of our normal business to keep you signed in, keep your cart and understand how visitors use our website. A cookie is a small piece of data the website stores in your browser. You can set your browser to refuse cookies; some parts of the site, such as the cart and your account, may then not work.

1.3 Analytics on our website

Our website uses Google Analytics and the Meta (Facebook) Pixel. They use cookies and similar identifiers and can collect information such as pages visited, device, approximate location and purchases made on our site. You can block them in your browser.

1.4 Information we must keep

Some data may not be removed on request because we must keep it. This includes order information, which identifies the buyer. The law requires us to keep it for business, tax and legal purposes, so it is not deleted on request and is kept as a legitimate interest.

If a particular Service requires you to open an account, you will be required to complete the registration process by providing certain information and registering a username and password for use with that Service. You are responsible for maintaining the confidentiality of the username and password and also for all activities which take place under your account. You agree to immediately notify us of any unauthorized use of your password or account or any other breach of security. In no event will Level Four Development, LLC be liable for any indirect or consequential loss or damage whatsoever resulting from the disclosure of your username and/or password. You may not use another person’s account at any time without the express permission of the account holder.

When a store owner connects Google Merchant Center from WP EasyCart PRO, they sign in with Google and allow access to Google’s Merchant API (https://www.googleapis.com/auth/content). WP EasyCart uses this access only to:

• list the Merchant Center accounts the owner can upload products to, so they can choose one;
• create and update a scheduled data source that fetches the store’s own product feed;
• start a fetch when the owner asks;
• show the latest fetch result and product issues in the store’s settings.

Storage: the access is kept by the store owner’s own WordPress site, encrypted. WP EasyCart’s connection server (connect.wpeasycart.com) only passes the sign-in to the store. It holds it, encrypted, for at most five minutes, and renews access without keeping it. It stores no Merchant Center data.

Sharing: we do not sell Google user data, use it for advertising, or share it, except to provide this feature, to comply with the law, or with the owner’s consent.

Removal: Disconnect (Settings › Search & AI) revokes access at Google; owners can also remove it at myaccount.google.com/permissions.

WP EasyCart’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We keep account, order and license records while your account is active and as long as the law requires for tax and accounting (see 1.4). Connection-service sign-in hand-offs are deleted within five minutes. Other connection data is deleted as described in section 4, or when you disconnect. Server logs are kept for 12 months.

You can ask us to access, correct, export or delete your personal information, or to stop sending you marketing email, by writing to info@wpeasycart.com. We answer within one month. Disconnecting a service in your store deletes or revokes that connection at the other service. Store owners are responsible for requests from their own shoppers about data stored on their website; WP EasyCart adds its data to WordPress’s personal data export and erase tools for this. Depending on where you live (for example the EU, UK or California), you may have further rights, including to complain to your local data protection authority.

We protect information in transit with HTTPS and encrypt the access tokens and connection data we store (AES-256). No system is completely secure, but we work to protect your information and review our practices regularly.

Level Four Development, LLC
4212 SW Kirk Ave
Pendleton, OR 97801
info@wpeasycart.com