Privacy Policy

1. Who we are

WC Account Portal is a WordPress plugin from Nahnu Plugins, a brand of Nahnu Fitness LLC, a limited liability company based in Spokane, Washington, United States ("we", "us", "our").

This policy explains how we handle personal information when you visit wcaccountportal.com, try the live demo, buy a plan, use the customer dashboard, activate a license or contact support. For the purposes of laws like the GDPR, Nahnu Fitness LLC is the controller of that information.

It works alongside our Terms of Use and Cookie Policy.

2. What we collect

We collect as little as we can. Here's everything, grouped by what you're doing.

When you buy a plan

• Your name, email address, billing address and country
• A business name and tax ID, if you add them
• What you bought, when and the price
• Payment details are entered into Stripe's secure form. We only see the card type, the last four digits and the expiry date.

When you use your account

• Your login details. Passwords are stored as a secure hash, never in plain text.
• Your plans, license keys, renewals, downloads and the sites where your licenses are active

When you contact support

• Your name, email address, your store's address, the topic and your message
• A system report or screenshots, if you choose to send them. A system report can include technical details about your site, such as versions and active plugins.
• Anything else you choose to tell us
• To block spam, the form sends your message, email address and IP address to OOPSpam for a spam check

When you activate a license or get updates

• Your license key, your site's address and name, and the plugin version, so we can confirm the license, count your sites and deliver updates

When you try the live demo

• The demo is a test store filled with sample data. It doesn't ask for your personal details, so please don't enter real names, addresses, payment details or passwords there.

When you visit the website

• Our server and our CDN, Bunny, keep short technical logs, such as IP address, browser, the page requested and the time. We use them only to keep the site running and secure.
• A record of your cookie choice: the date, your choices, a random device ID, basic device details and your IP address. We keep it to show you gave consent.
• Anonymous visit statistics, explained in the next section

3. Analytics without cookies

To see which pages are useful, we use Plausible and Matomo. We host both ourselves, on our own servers, so your visit data isn't sent to an analytics company.

• Neither tool sets cookies or stores anything in your browser.
• They don't follow you across other websites or build a profile of you.
• IP addresses are not stored. They're used briefly to count unique visits, then discarded or anonymized.
• What we see is totals: page views, where visitors came from, country, browser and device type.

We don't use these statistics to identify anyone, and we don't combine them with your account or order details.

4. Cookies

We only use cookies the site needs to work: keeping you logged in to the customer dashboard and the live demo, running the checkout and remembering your cookie choice. At checkout, Stripe may also use cookies to prevent fraud.

Our Cookie Policy lists them. You can review your choice any time with Cookie settings.

5. How we use it

If you're in the EU, UK or a similar country, the law asks us to name a legal basis for each use. Here they are.

We don't sell your personal information, use it for advertising or make automated decisions about you that have legal or similar effects.

6. Who we share it with

We use a small number of trusted service providers. They can only use your information to provide their service to us.

We may also share information if the law requires it, to protect our rights or someone's safety, or with a buyer if WC Account Portal or Nahnu Plugins changes ownership. If that happens, this policy will still protect your information.

7. International transfers

We're based in the United States, and some of our providers process data in other countries. When information from the EU, UK or Switzerland is transferred, we rely on safeguards the law recognizes, such as the European Commission's Standard Contractual Clauses or the EU-U.S. Data Privacy Framework, where our providers take part in it.

8. How long we keep it

We keep personal information only as long as we need it for the reasons in this policy, then delete or anonymize it.

• Account and licenses: while your account is open, and for a reasonable time after, so you can come back to your purchases
• Orders and invoices: as long as tax and accounting laws require
• Support messages: as long as they help us support you, then deleted
• Server logs: a short time, for security
• Cookie consent records: as long as we need them to show consent was given
• Analytics: totals only, with no personal information

9. Your rights

Wherever you live, you can ask us to:

• Tell you what personal information we have about you and send you a copy
• Correct anything that's wrong
• Delete your information, unless we have to keep it, for example for tax records
• Send your information to you in a portable format
• Stop or limit a use you object to

To make a request, use the support form. We may need to confirm it's really you before we act. We'll reply within one month, or sooner if your local law requires it, and we won't charge you or treat you differently for asking.

If you're in the EU or UK, you can also complain to your local data protection authority. We'd appreciate the chance to help first.

10. US state privacy rights

Some US states, including California, give residents extra privacy rights. You have the rights listed above, and the right to know the categories of information we collect, why, and who we share it with. This policy covers each of those.

If your browser sends a Global Privacy Control signal, we respect it as a request to opt out, though our site has nothing to opt out of.

11. Security

We protect your information with encrypted connections (HTTPS), hashed passwords, limited access, software updates and providers that take security seriously. No system is perfectly secure, so if we learn of a breach that affects you, we'll let you know as the law requires.

12. Children

WC Account Portal is made for store owners, agencies and developers. You must be 18 or older to buy a plan. The site isn't aimed at children under 16, and we don't knowingly collect their information. If you believe a child has given us personal information, contact us and we'll delete it.

13. The plugin on your store

WC Account Portal is built for privacy. It doesn't include tracking or usage reports, and it never sends us information about your store's customers.

• Your customers' data stays on your server. The portal shows orders, addresses, subscriptions and other account details from your own store database. None of it is sent to us.
• Profile photos that customers upload are saved in your own WordPress media library.
• If you turn on a captcha (hCaptcha, Google reCAPTCHA or Cloudflare Turnstile), your customers' browsers load it from that provider when they log in or register. You may need to mention that provider in your own privacy policy.
• License checks and updates send your license key, site address, site name and plugin version to us, as described above.

For your own store, you're the controller of your customers' information, so your own privacy policy covers it.

14. Changes to this policy

We may update this policy as WC Account Portal grows or the law changes. When we do, we'll post the new version here and change the date at the top. If a change is significant, we'll also let customers know by email or in the customer dashboard.

15. Contact us

Questions about your privacy, or want to make a request? Send us a message through the support form and a real person will get back to you.

Nahnu Fitness LLC, Spokane, Washington, United States