# Privacy Policy

**Multilingual Press Zone**

**Effective Date**: January 26, 2026
**Last Updated**: January 26, 2026

Press.Zone ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use Multilingual Press Zone ("the Plugin").

**IMPORTANT**: We take privacy seriously. This Plugin is designed with privacy-first principles and collects minimal data necessary for functionality.

---

## 1. Information We Collect

### 1.1 Information You Provide

**License Purchase Information**
- Name and email address
- Payment information (processed by PayPal/Stripe, not stored by us)
- Company name (optional)
- Billing address

**Support Requests**
- Email address
- Name
- Site URL (for troubleshooting)
- WordPress version, PHP version (system info)
- Support conversation history

**Account Information**
- Username
- Email address
- Password (hashed, never stored in plaintext)
- Profile information (optional)

### 1.2 Automatically Collected Information

**License Activation Data**
- Site URL (domain name only)
- License Key
- WordPress version
- PHP version
- Plugin version
- Activation timestamp
- IP address (anonymized - last octet removed)

**Usage Data (Opt-In Only)**
- Number of languages configured
- Number of translations created
- Features used (anonymized)
- Performance metrics (cache hit ratio, query count)
- Error occurrences (error code only, no stack traces)

**Website Analytics**
- Pages visited on press.zone
- Time spent on site
- Referrer information
- Device type and browser
- IP address (anonymized)

### 1.3 Information We Do NOT Collect

**Never Collected**:
- Post content or translations
- User passwords (from your WordPress site)
- Email addresses (from your WordPress users)
- Personal information of your site visitors
- Full IP addresses (always anonymized)
- Database credentials
- FTP/SSH credentials

---

## 2. How We Use Your Information

### 2.1 Essential Uses

**License Management**
- Verify License Key validity
- Track active installations
- Enforce Site limits
- Process renewals

**Support**
- Respond to support requests
- Troubleshoot technical issues
- Provide product assistance
- Send critical security notices

**Product Delivery**
- Deliver Plugin downloads
- Provide software updates
- Send renewal reminders
- Notify of new features

### 2.2 Optional Uses (Opt-In)

**Product Improvement** (Requires Opt-In)
- Analyze feature usage
- Identify performance bottlenecks
- Prioritize new features
- Fix bugs proactively

**Marketing Communications** (Requires Opt-In)
- Send product updates
- Share tips and tutorials
- Announce new features
- Offer special promotions

**Error Tracking** (Requires Opt-In)
- Monitor error rates
- Identify critical bugs
- Improve stability
- Prioritize bug fixes

### 2.3 Legal Uses

**Compliance**
- Comply with legal obligations
- Enforce Terms of Service
- Protect against fraud
- Respond to legal requests

---

## 3. How We Share Your Information

### 3.1 Third-Party Service Providers

We share data with trusted service providers who assist in our operations:

**Payment Processing**
- PayPal: Payment processing
- Stripe: Credit card processing
- **Data Shared**: Name, email, payment amount
- **Purpose**: Process payments
- **Privacy Policy**: https://www.paypal.com/privacy, https://stripe.com/privacy

**Email Services**
- SendGrid or Mailgun: Transactional emails
- **Data Shared**: Email address, name
- **Purpose**: Send receipts, support emails, updates
- **Privacy Policy**: https://sendgrid.com/privacy, https://www.mailgun.com/privacy-policy

**Support Platform**
- Zendesk or Help Scout: Customer support
- **Data Shared**: Email, name, support messages
- **Purpose**: Manage support tickets
- **Privacy Policy**: https://www.zendesk.com/privacy, https://www.helpscout.com/company/legal/privacy

**Error Tracking** (Opt-In Only)
- Sentry: Error monitoring
- **Data Shared**: Error codes, plugin version, anonymized site ID
- **Purpose**: Track and fix bugs
- **Privacy Policy**: https://sentry.io/privacy

**Analytics** (Opt-In Only)
- Google Analytics: Website analytics
- **Data Shared**: Anonymized IP, pages visited, device type
- **Purpose**: Understand how press.zone is used
- **Privacy Policy**: https://policies.google.com/privacy

### 3.2 Legal Requirements

We may disclose your information if required by law:
- Comply with court orders or legal processes
- Enforce our Terms of Service
- Protect our rights and property
- Prevent fraud or abuse
- Protect safety of users or public

### 3.3 Business Transfers

If Press.Zone is acquired or merges with another company, your information may be transferred. We will notify you of any such change.

### 3.4 We Do NOT Sell Your Data

**We never sell your personal information to third parties.** Period.

---

## 4. Data Security

### 4.1 Security Measures

We implement industry-standard security measures:

**Technical Safeguards**
- SSL/TLS encryption for data in transit
- AES-256 encryption for data at rest
- Secure password hashing (bcrypt)
- Regular security audits
- Penetration testing
- Firewall protection

**Organizational Safeguards**
- Limited employee access (need-to-know basis)
- Background checks for employees
- Confidentiality agreements
- Security training
- Incident response plan

**Infrastructure Security**
- Servers in secure data centers
- Regular backups
- DDoS protection
- Intrusion detection
- Security monitoring 24/7

### 4.2 Data Breach Notification

In the event of a data breach:
- We will notify affected users within 72 hours
- We will notify relevant authorities as required
- We will provide details of the breach
- We will explain steps we're taking to prevent recurrence

### 4.3 Your Responsibility

You are responsible for:
- Keeping your password secure
- Not sharing your License Key
- Securing your WordPress site
- Installing security updates promptly

---

## 5. Data Retention

### 5.1 Retention Periods

**Active Subscription**
- License data: Duration of subscription + 2 years
- Support tickets: Duration of subscription + 1 year
- Usage data: Rolling 90 days (if opted in)
- Error logs: Rolling 30 days (if opted in)

**After Subscription Ends**
- Account information: 2 years (for renewals)
- License history: 7 years (tax/legal compliance)
- Support history: 1 year
- Usage data: Deleted immediately

**After Account Deletion**
- Personal data: Deleted within 30 days
- Anonymized data: May be retained for statistics
- Legal/financial records: 7 years (compliance)

### 5.2 Data Deletion

You can request data deletion at any time by:
- Emailing privacy@press.zone
- Using in-plugin data export/delete tool
- Submitting GDPR data deletion request

We will delete your data within 30 days, except:
- Legal/tax records (7-year retention required)
- Anonymized statistical data
- Backups (deleted in next backup cycle, max 90 days)

---

## 6. Your Privacy Rights

### 6.1 GDPR Rights (EU/EEA/UK)

If you are in the EU, EEA, or UK, you have these rights:

**Right to Access**
- Request copy of your personal data
- Request details of how we use your data

**Right to Rectification**
- Correct inaccurate personal data
- Complete incomplete personal data

**Right to Erasure ("Right to be Forgotten")**
- Request deletion of your personal data
- Exceptions: Legal obligations, legitimate interests

**Right to Restriction of Processing**
- Limit how we use your data
- Applies during disputes or verification

**Right to Data Portability**
- Receive your data in machine-readable format
- Transfer to another service

**Right to Object**
- Object to processing for direct marketing
- Object to processing based on legitimate interests

**Right to Withdraw Consent**
- Withdraw consent for opt-in features
- Does not affect prior processing

**Right to Lodge a Complaint**
- File complaint with supervisory authority
- We prefer you contact us first

### 6.2 CCPA Rights (California)

If you are a California resident, you have these rights:

**Right to Know**
- Categories of data collected
- Purposes of collection
- Third parties we share with

**Right to Delete**
- Request deletion of personal information
- Exceptions apply (legal obligations)

**Right to Opt-Out**
- Opt out of sale of personal information
- **Note**: We don't sell your information

**Right to Non-Discrimination**
- Equal service regardless of privacy choices
- No penalties for exercising rights

### 6.3 Exercising Your Rights

To exercise privacy rights:

**Email**: privacy@press.zone
**Subject**: [Privacy Request - {Right Name}]
**Include**:
- Full name
- Email address
- License Key (if applicable)
- Specific request details

**Response Time**: 30 days (may extend to 60 days for complex requests)

---

## 7. Cookies and Tracking

### 7.1 Cookies We Use

**Essential Cookies** (Always Active)
- Session cookies: Keep you logged in
- Security cookies: Prevent CSRF attacks
- Preference cookies: Remember your settings

**Analytics Cookies** (Opt-In)
- Google Analytics: Website usage statistics
- **Opt-Out**: Browser settings or Google Analytics opt-out

**Marketing Cookies** (Opt-In)
- Email tracking: Track email opens/clicks
- **Opt-Out**: Unsubscribe from marketing emails

### 7.2 Third-Party Cookies

Third-party services may set their own cookies:
- PayPal (payment processing)
- Stripe (payment processing)
- Google Analytics (if opted in)

Refer to their privacy policies for cookie details.

### 7.3 Do Not Track

We respect Do Not Track (DNT) browser signals. When DNT is enabled:
- Analytics are disabled
- Marketing cookies are blocked
- Only essential cookies are used

---

## 8. Children's Privacy

The Plugin is not intended for children under 16. We do not knowingly collect information from children. If you believe we have collected information from a child, contact us immediately at privacy@press.zone and we will delete it.

---

## 9. International Data Transfers

### 9.1 Data Location

Your data may be processed in:
- United States (primary servers)
- European Union (backup servers)
- Other countries where our service providers operate

### 9.2 Safeguards

When transferring data internationally, we use:
- Standard Contractual Clauses (EU Commission approved)
- Adequacy decisions (for approved countries)
- Participant in Privacy Shield (if applicable)

### 9.3 EU-US Data Transfers

For EU data transfers to US:
- We comply with GDPR requirements
- We use Standard Contractual Clauses
- We ensure adequate protection measures

---

## 10. Changes to This Policy

### 10.1 Notification of Changes

We may update this Privacy Policy from time to time. We will notify you of material changes via:
- Email to registered email address
- Admin notice in WordPress dashboard
- Announcement on press.zone website

### 10.2 Effective Date

Changes are effective 30 days after notification for existing users. For new users, changes are effective immediately upon posting.

### 10.3 Review

We recommend reviewing this Privacy Policy periodically for any changes.

---

## 11. Contact Us

### 11.1 Privacy Team

**Email**: privacy@press.zone
**Subject Line**: [Privacy Inquiry]

**Response Time**: 5 business days (2 business days for Enterprise customers)

### 11.2 Data Protection Officer

**Email**: dpo@press.zone
**Phone**: [Phone Number]

### 11.3 EU Representative

For GDPR matters:
**EU Representative**: [Name/Company]
**Email**: eu-rep@press.zone
**Address**: [EU Address]

### 11.4 Mailing Address

**Press.Zone**
[Street Address]
[City, State ZIP]
[Country]

---

## 12. Additional Information

### 12.1 California Residents

Under California Civil Code Section 1798.83, California residents can request:
- List of personal information categories disclosed to third parties
- Names and addresses of those third parties

Contact us at privacy@press.zone with "California Privacy Request" in subject line.

### 12.2 Nevada Residents

Nevada residents can opt out of sale of certain covered information. While we don't sell information, you can email privacy@press.zone with "Nevada Do Not Sell Request".

### 12.3 Australia Residents

Under Australian Privacy Principles, you have rights similar to GDPR. Contact privacy@press.zone to exercise these rights.

---

## 13. Privacy by Design

The Plugin is built with privacy-first principles:

**Minimal Data Collection**
- Only collect what's necessary
- No tracking by default
- Opt-in for non-essential features

**Local Data Storage**
- Translations stored on your WordPress site
- We don't store your content
- Full control over your data

**Transparency**
- Clear disclosure of data collection
- Easy-to-understand privacy settings
- No hidden tracking

**User Control**
- Easy opt-out mechanisms
- Data export functionality
- Complete data deletion

---

## 14. Compliance Certifications

We are committed to maintaining compliance with:
- **GDPR** (General Data Protection Regulation)
- **CCPA** (California Consumer Privacy Act)
- **SOC 2** (Security and availability - in progress)
- **ISO 27001** (Information security - planned)

---

## 15. Questions and Concerns

If you have questions about this Privacy Policy or our privacy practices:

**General Inquiries**: privacy@press.zone
**GDPR Requests**: gdpr@press.zone
**CCPA Requests**: ccpa@press.zone
**Data Breach Reports**: security@press.zone

We take privacy seriously and will respond promptly to your concerns.

---

**Last Updated**: January 26, 2026
**Version**: 1.0

**Effective Date**: This policy is effective as of January 26, 2026.

---

**IMPORTANT LEGAL NOTICE**: This Privacy Policy should be reviewed by a qualified attorney before use, especially for GDPR, CCPA, and other privacy law compliance. This template is provided for informational purposes only and does not constitute legal advice.