Base Features
Free Online Help
Request Support
Last updated: September 29, 2026
This policy covers www.wpeasycart.com, WP EasyCart accounts and licenses, and the services the WP EasyCart plugins connect to (connect.wpeasycart.com, licensing.wpeasycart.com and cloud.wpeasycart.com). WP EasyCart is operated by Level Four Development, LLC, 4212 SW Kirk Ave, Pendleton OR 97801, USA. Questions or requests: info@wpeasycart.com.
We are committed to responsible data management and follow the principles of data protection law. When you buy from us, register an account or ask for support, we collect the information you give us: your name, email address, billing address, license keys and the sites they are used on, order history and your support messages. We use it to deliver your purchases and licenses, provide updates and downloads, answer support requests, prevent fraud, meet our legal obligations and, if you choose, send you news about WP EasyCart. We never sell it.
The WP EasyCart plugins run on your own website. The information your shoppers enter is stored on your website and controlled by you as the store owner, not by us. We receive it only where a feature you switch on sends it to one of our services, as described in section 4. What the WP EasyCart plugins store on your website:
We use cookies as part of our normal business to keep you signed in, keep your cart and understand how visitors use our website. A cookie is a small piece of data the website stores in your browser. You can set your browser to refuse cookies; some parts of the site, such as the cart and your account, may then not work.
Our website uses Google Analytics and the Meta (Facebook) Pixel. They use cookies and similar identifiers and can collect information such as pages visited, device, approximate location and purchases made on our site. You can block them in your browser.
Some data may not be removed on request because we must keep it. This includes order information, which identifies the buyer. The law requires us to keep it for business, tax and legal purposes, so it is not deleted on request and is kept as a legitimate interest.
If a particular Service requires you to open an account, you will be required to complete the registration process by providing certain information and registering a username and password for use with that Service. You are responsible for maintaining the confidentiality of the username and password and also for all activities which take place under your account. You agree to immediately notify us of any unauthorized use of your password or account or any other breach of security. In no event will Level Four Development, LLC be liable for any indirect or consequential loss or damage whatsoever resulting from the disclosure of your username and/or password. You may not use another person’s account at any time without the express permission of the account holder.
When a store owner connects Google Merchant Center from WP EasyCart PRO, they sign in with Google and allow access to Google’s Merchant API (https://www.googleapis.com/auth/content). WP EasyCart uses this access only to:
Storage: the access is kept by the store owner’s own WordPress site, encrypted. WP EasyCart’s connection server (connect.wpeasycart.com) only passes the sign-in to the store. It holds it, encrypted, for at most five minutes, and renews access without keeping it. It stores no Merchant Center data.
Sharing: we do not sell Google user data, use it for advertising, or share it, except to provide this feature, to comply with the law, or with the owner’s consent.
Removal: Disconnect (Settings › Search & AI) revokes access at Google; owners can also remove it at myaccount.google.com/permissions.
WP EasyCart’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Some plugin features connect to services we run at connect.wpeasycart.com, so a store can use an outside service without its own developer app. Every request carries the store’s site address and, for most, its license key. Our server logs each request: time, service, outcome, the site address, the sending IP address and a shortened (masked) license key. Our connection services’ own logs never record passwords or access tokens. Sign-in hand-offs are encrypted and deleted after they are collected, or after five minutes at most. We do not sell this information or use it for advertising.
When WP EasyCart Premium checks for or installs extensions, we receive the license key, the site address, and the versions of WordPress, PHP and the WP EasyCart plugins and extensions installed. We use this to check the license and serve the right downloads. We record these checks and downloads in Google Analytics, including the site’s address and software versions; the license is identified there only by a one-way code, and the license key, emails and names are never sent to Google. The site’s list of installed extensions is kept for up to 30 days.
Connecting Xero signs you in on Xero’s website. Your Xero access stays on your own site, encrypted; our server passes renewals through without keeping them. So that Xero’s change notifications reach your store, we keep your store’s notification address and a signing secret for each connected Xero organization, encrypted, until you disconnect. Notifications waiting to be delivered are kept for up to 24 hours.
Connecting QuickBooks signs you in on Intuit’s website. Intuit allows only one active renewal at a time, so our server keeps the QuickBooks renewal token for your connection, encrypted under a separate key, and hands your store short-lived access tokens. We also keep your QuickBooks company ID, your store’s address and notification address, and how many requests your store makes. Notifications waiting to be delivered are kept for up to 24 hours. When you disconnect, we revoke access at Intuit and delete the connection; connections that end otherwise are deleted after 90 days.
Signing in passes the connection, and for Mailchimp your account’s name and data center, to your store, and our server keeps none of it. Klaviyo renewals and disconnects pass through our server without being kept. Your store then talks to Mailchimp or Klaviyo directly.
Signing in passes the connection to your store. Renewals and disconnects pass through our server without being kept. Labels and postage go directly between your store and Stamps.com.
Connecting with Meta passes your store the access Meta grants, plus the IDs of the business, Pixel, catalog, ad account, Pages and Instagram accounts you chose. Our server keeps none of it after the hand-off. Meta’s notices that the connection was installed or removed are logged without access tokens.
When a shopper asks for text updates on an order, the store sends us their phone number, the order number and status, the store’s address and license key, so we can send the texts through our SMS provider, Twilio. Phone numbers and send results are logged on Twilio. Our own servers only pass through the information and we do not use that information. Shoppers can reply STOP or unsubscribe from the order page.
WP EasyCart PRO checks its license with connect.wpeasycart.com, licensing.wpeasycart.com, support.wpeasycart.com, and cloud.wpeasycart.com, sending the license key and the site address.
PayPal: stores that connect PayPal through WP EasyCart send PayPal payments through connect.wpeasycart.com. The order details PayPal needs (amounts, items and, when given, the shipping address) and PayPal’s replies (such as the payer’s name and email address) pass through our server to and from PayPal. They are not kept or stored.
Square, UPS and Intuit Payments: connecting signs you in on the provider’s own website; our server passes the connection, its renewals and disconnects to your store. Our server keeps no tokens; your store keeps its connection until you disconnect.
USPS: stores without their own USPS account use WP EasyCart’s; our server gives the store a short-lived USPS access token, and rate requests go directly between the store and USPS.
Order notifications in the WP EasyCart app: when the store owner turns them on, the store sends us the order number, order total, the site address and license key. No shopper details are sent.
The WP EasyCart plugins include optional usage tracking, off unless you opt in, and you can switch it off at any time. When on, it would send the event (for example, a product added or the plugin activated), your WordPress, PHP and WP EasyCart versions, your site’s language and your license type (Free, Pro or Premium). It sends nothing that identifies you or your customers. Sending is currently switched off in the plugins.
We keep account, order and license records while your account is active and as long as the law requires for tax and accounting (see 1.4). Connection-service sign-in hand-offs are deleted within five minutes. Other connection data is deleted as described in section 4, or when you disconnect. Server logs are kept for 12 months.
You can ask us to access, correct, export or delete your personal information, or to stop sending you marketing email, by writing to info@wpeasycart.com. We answer within one month. Disconnecting a service in your store deletes or revokes that connection at the other service. Store owners are responsible for requests from their own shoppers about data stored on their website; WP EasyCart adds its data to WordPress’s personal data export and erase tools for this. Depending on where you live (for example the EU, UK or California), you may have further rights, including to complain to your local data protection authority.
We protect information in transit with HTTPS and encrypt the access tokens and connection data we store (AES-256). No system is completely secure, but we work to protect your information and review our practices regularly.
Our servers are in the United States. When you use our website and services, your information is processed there.
Our website and services are not directed to children under 16, and we do not knowingly collect their personal information.
We may update this policy from time to time. The date at the top shows the latest change; significant changes are announced on our website.
Level Four Development, LLC
4212 SW Kirk Ave
Pendleton, OR 97801
info@wpeasycart.com