This policy explains how SquareSync for Woo collects, uses, and protects your personal information. Your privacy is important to us.
We are committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights regarding your personal information.
SquareSync for Woo runs on your own WordPress server. Your business data (products, orders, customers) stays on your servers—we do not have access to it.
We only collect data necessary to provide our services: account information, license validation, and basic usage analytics to improve the plugin.
We collect the following categories of information: • Account Information: When you purchase a subscription, we collect your name, email address, billing address, and payment information (processed securely by Stripe). • License & Site Information: To validate your license, we collect your website URL, WordPress version, PHP version, and plugin version. This helps us provide support and ensure compatibility. • Support Communications: When you contact support, we retain your communications to provide assistance and improve our services. • Usage Analytics: We collect anonymised usage data from our website (not from the plugin on your server) to understand how users interact with our marketing site and documentation. We do NOT collect or have access to your WooCommerce products, orders, customer data, Square credentials, or any business data processed by the plugin on your server.
We use the information we collect for the following purposes: • Service Delivery: To provide, activate, and manage your SquareSync for Woo license and subscription. • Customer Support: To respond to your enquiries, troubleshoot issues, and provide technical assistance. • Product Improvement: To analyse trends, identify bugs, and develop new features based on aggregated, anonymised data. • Communication: To send transactional emails (purchase confirmations, license expiry notices), and with your consent, product updates and newsletters. • Legal Compliance: To comply with applicable laws, regulations, and legal processes. We will never sell your personal information to third parties or use it for purposes unrelated to providing our services.
We share your information only with trusted third parties necessary to operate our business: • Payment Processing: Stripe processes all payments. Your payment card details are handled directly by Stripe and are never stored on our servers. See Stripe's Privacy Policy for details. • Email Services: We use email service providers to send transactional and marketing emails. • Analytics: We use privacy-focused analytics on our website to understand visitor behaviour. • Hosting & Infrastructure: Our website and licensing systems are hosted on secure cloud infrastructure. We require all third-party providers to maintain appropriate security measures and only process your data according to our instructions. We do not share your data with advertisers or data brokers.
SquareSync for Woo is a self-hosted WordPress plugin. This means: • Your Business Data Stays With You: All WooCommerce products, orders, customers, and Square data remain on your own WordPress server. We cannot access this data. • Square API Credentials: Your Square API keys are stored in your WordPress database, not on our servers. We never have access to your Square account. • Data Synchronisation: When the plugin syncs data between WooCommerce and Square, this happens directly between your server and Square's servers—our systems are not involved in this data transfer. • Your Responsibility: You are responsible for the security of your WordPress installation, including regular backups, security updates, and compliance with data protection laws regarding your customers' data.
We implement appropriate technical and organisational measures to protect your personal information: • Encryption: All data transmitted between your browser and our servers is encrypted using TLS/SSL. • Secure Payment Processing: Payment information is handled by PCI-DSS compliant processors (Stripe). • Access Controls: Access to personal data is restricted to authorised personnel who need it to perform their duties. • Regular Security Reviews: We regularly review and update our security practices. While we take security seriously, no system is completely secure. We encourage you to use strong passwords and keep your WordPress installation updated.
We retain your personal information for as long as necessary to provide our services and comply with legal obligations: • Account Data: Retained for the duration of your subscription and for 3 years after cancellation for legal and accounting purposes. • Support Communications: Retained for 2 years to provide ongoing support and identify recurring issues. • Payment Records: Retained for 7 years as required by Australian tax law. • Usage Analytics: Aggregated and anonymised data may be retained indefinitely. You may request deletion of your personal data at any time, subject to our legal retention requirements.
Depending on your location, you may have the following rights regarding your personal data: • Access: Request a copy of the personal data we hold about you. • Correction: Request correction of inaccurate or incomplete data. • Deletion: Request deletion of your personal data, subject to legal retention requirements. • Portability: Request your data in a structured, machine-readable format. • Objection: Object to processing of your data for certain purposes. • Withdraw Consent: Where processing is based on consent, withdraw that consent at any time. To exercise these rights, contact us at [email protected]. We will respond within 30 days. For Australian residents, you may also lodge a complaint with the Office of the Australian Information Commissioner (OAIC).
Our services are operated from Australia. If you are located outside Australia, your information may be transferred to and processed in Australia or other countries where our service providers operate. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses where applicable. By using our services, you consent to the transfer of your information to Australia and other jurisdictions.
SquareSync for Woo is intended for business use and is not directed at children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately and we will delete it.
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will: • Post the updated policy on this page with a new "Last Updated" date. • Notify active subscribers via email for significant changes. • Provide a summary of changes where appropriate. Your continued use of SquareSync for Woo after changes are posted constitutes acceptance of the updated policy. We encourage you to review this policy periodically.
For privacy-related questions or to exercise your data rights, contact us at [email protected].