Privacy Policy

Last updated: October 11, 2026

Siteryn builds WordPress and WooCommerce plugins and themes for online stores around the world. This Privacy Policy explains what personal information we collect when you visit siteryn.com, create an account, buy a product, activate a license, download updates or contact us; why we collect it; who we share it with; and the choices and rights you have.

It is written for an international audience and is intended to meet the requirements of the EU and UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act as amended by the CPRA (CCPA), and other applicable privacy laws.

1. Who we are

Siteryn (“Siteryn”, “we”, “us” or “our”) operates siteryn.com, our customer account area, our checkout, and the licensing and update service our products connect to. For the personal information described in this policy, Siteryn is the data controller.

If you have any questions about this policy or how we handle your information, contact us at hello@siteryn.com or through our contact page.

2. Information we collect

Information you give us

Account details — your name, email address and password (stored only in encrypted, hashed form), and optional profile details such as your company, website or profile photo.
Billing and order details — billing name, address, country, region, postal code and, where applicable, your VAT or tax number; the products, plans, prices, discounts and taxes on each order; and your invoices.
Support and communications — support tickets, replies and file attachments, feature requests and votes, and messages you send through our contact form (name, email, optional phone number, topic and message).
Newsletter — your email address and when and where you subscribed.
Affiliate program — if you join, your affiliate profile, payout details and referral activity.
Plugin feedback — if you choose to answer the optional survey shown when you deactivate one of our plugins: your reason and comment, the plugin and version, your site address, technical versions (WordPress, PHP, WooCommerce) and, only if you provide it, your email address.

Information created when you use our products

Licenses and activations — your license keys (stored in hashed form), the website addresses where a license is activated, the installed product version, and activation, validation and update-check dates.
Downloads — which product and version you downloaded and when.

Information collected automatically

Technical information — such as your IP address, browser and device type, and the pages you visit. We use IP addresses for security, fraud and abuse prevention and rate limiting; where we keep them for that purpose (for example with contact form, newsletter and feedback submissions) we store only a one-way, salted hash rather than the address itself.
Cookies — see section 8.

We do not collect or store your full payment card details. Payments are handled by our payment providers (see section 5).

3. Our plugins and themes on your website

Siteryn plugins and themes run on your own website and server. The data they process there — for example your store’s customers, orders, wishlists, quotes or reviews — stays on your website. We do not receive it, and for that data you are the data controller.

Our Pro products connect to siteryn.com only to activate and validate your license and to check for and download updates. For this they send your license key, your website address, the product identifier and the installed version — never your store’s customer or order data.

Some of our products include optional AI features. When you enable them, your website sends the content needed for the feature (for example product details or customer questions) directly to the AI provider you configure, using your own API key and under that provider’s terms. Siteryn does not receive that content.

4. How we use your information and our legal bases

We use personal information only for the purposes below. Where the GDPR applies, each use relies on the legal basis shown.

To provide what you buy — creating and managing your account, processing orders, issuing licenses, activating them on your websites, providing downloads and updates, and handling renewals, refunds and cancellations. Legal basis: performance of our contract with you.
To support you — answering support tickets, contact messages and chat questions. Contract, or our legitimate interest in helping visitors and customers.
To send service emails — order confirmations and invoices, license details, renewal, expiry and payment notices, and support replies. Contract.
To keep our services secure — preventing fraud, license abuse, spam and unauthorised access. Legitimate interests.
To improve our products — understanding how our products are used and why customers deactivate them. Legitimate interests, or your consent for optional feedback.
To send our newsletter — only if you subscribe. Consent, which you can withdraw at any time.
To meet legal obligations — tax, accounting and record-keeping requirements, and responding to lawful requests. Legal obligation.

We do not use your personal information for automated decision-making that produces legal or similarly significant effects on you.

5. Payments

Payments on siteryn.com are processed by trusted third-party payment providers — Stripe, PayPal and Paddle. You enter your payment details on, or through, the provider’s secure systems; we receive only the information needed to confirm your payment and manage your order and subscription (for example the payment status, transaction reference and the last digits or type of your payment method where the provider shares them).

Where Paddle processes your order, Paddle acts as the reseller and merchant of record and handles payment, invoicing and sales tax for that order. Each provider processes your information under its own privacy policy.

6. Chat assistant

Our website offers a chat assistant that answers questions about our products. Its replies are generated by an AI service (currently provided by OpenAI), so the messages you type are sent to that provider to produce a response. Conversations are stored for up to 30 days to provide the service and hand questions over to our team, and are then deleted.

Please do not share passwords, license keys or payment details in the chat. Replies are generated automatically and may be inaccurate — for anything important, contact our team.

7. Emails and newsletter

We send service emails that are necessary for the products you use — such as order confirmations, invoices, license and renewal notices, payment problems and support replies. Because they relate to your purchases and licenses, you cannot opt out of these while you have an active account or license.

We send our newsletter — product news, new releases, offers and tips — only if you subscribe. Every newsletter includes a one-click unsubscribe link, and you can also unsubscribe by contacting us.

8. Cookies

We use a small number of cookies and similar technologies:

Essential cookies — keep you signed in, protect your account and forms, remember your cart and checkout progress, and remember basic preferences. The website cannot work properly without them.
Referral cookie — if you arrive through an affiliate link and accept optional cookies, a cookie records the referral so that the affiliate can be credited if you make a purchase. It is never set if you reject optional cookies, and it expires automatically.
Analytics cookies — if we use analytics to understand how our website is used, we will ask for your consent first where the law requires it.

On your first visit we ask you to accept or reject optional cookies; you can change your choice at any time with the Cookie settings link. You can also control and delete cookies in your browser settings. Blocking essential cookies may stop parts of the website, such as signing in or checking out, from working.

9. How we share information

We share personal information only where needed to run our business, and never more than necessary:

Service providers who work on our behalf — website hosting, payment processing, email delivery, AI chat and, where used, analytics — under contracts that require them to protect your information and use it only for the services they provide to us.
Affiliates — if you buy through an affiliate link, the affiliate sees that a referred purchase occurred and its commission, but not your payment details.
Professional advisers such as accountants and lawyers, where necessary.
Authorities when we are required to by law, or to protect our rights, our customers or the public.
A buyer or successor if Siteryn is involved in a merger, acquisition or sale of assets, subject to this policy.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

10. International data transfers

Siteryn serves customers worldwide. Our team and our service providers may process your information in countries other than the one where you live, including the United States and member states of the European Union. These countries may have data protection laws that differ from those in your country.

When we transfer personal information from the European Economic Area, the United Kingdom or Switzerland to a country that has not been recognised as providing an adequate level of protection, we use appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the UK Addendum where applicable). You can contact us for more information about these safeguards.

11. How long we keep information

Account information — for as long as your account is open. If you ask us to delete your account, we delete or anonymise it, except for information we must keep for the reasons below.
Orders, invoices and payment records — for the period required by tax and accounting laws.
Licenses, activations and download history — for as long as the license exists, and then for a limited period to handle renewals, disputes and abuse prevention.
Support tickets and contact messages — for as long as needed to help you and for a reasonable period afterwards so we can refer back to earlier conversations.
Chat conversations — up to 30 days.
Newsletter — until you unsubscribe; we keep a record of the opt-out so that we do not email you again.
Security logs — for a short period, unless needed to investigate an incident.

12. How we protect your information

We use technical and organisational measures appropriate to the risk, including encrypted HTTPS connections, hashed passwords and license keys, private storage and short-lived, site-bound links for product downloads, access controls for our staff, rate limiting, and signature verification for payment notifications. No method of transmission or storage is completely secure, but we work to protect your information and to respond promptly to any incident.

13. Your privacy rights

Depending on where you live, you may have the right to:

access the personal information we hold about you and receive a copy;
correct inaccurate or incomplete information;
delete your information;
restrict or object to certain processing, including processing based on our legitimate interests;
receive your information in a portable format;
withdraw your consent at any time, where we rely on consent; and
complain to a data protection authority.

EU and UK residents can contact their local supervisory authority, although we would appreciate the chance to address your concern first.

California and other US states — residents of California and of states with similar laws (such as Virginia, Colorado, Connecticut, Utah and Texas) have the right to know what personal information we collect, use and disclose; to access, correct and delete it; and not to be discriminated against for exercising these rights. We do not sell personal information or share it for cross-context behavioural advertising, and we do not use sensitive personal information for purposes that would require offering a right to limit. You may use an authorised agent to make a request on your behalf.

Other countries — residents of countries such as Canada, Brazil, Australia and India have similar rights under their local laws, and we will honour them.

How to make a request: you can update most account details yourself on your account profile, where you can also request account deletion. For any other request, email hello@siteryn.com. We will verify your identity before acting on a request and respond within one month, or within the period required by applicable law.

14. Children's privacy

Our products and website are intended for businesses and adults. They are not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will delete it.

15. Third-party websites

Our website and products may link to third-party websites and services, such as payment providers, documentation hosts or social networks. Their privacy practices are governed by their own policies, and we encourage you to read them.

16. Changes to this policy