Privacy Policy

This Privacy Policy describes how Rich Plugins SL ("Rich Plugins", "we", "us", "our") collects, uses, and protects your personal data when you visit https://richplugins.com or use our products and services.

Data Controller

Rich Plugins SL
CIF: B19806272
Registered and fiscal address: Plaza San Cristóbal, 14, 03002 Alacant/Alicante, Spain
Email: support@richplugins.com

Scope

This Privacy Policy applies to visitors of our website and customers using our products and services, including our WordPress plugins and related online dashboards, where applicable (such as admin.richplugins.com). It does not apply to information collected offline or through other channels not related to this website.

Consent

By using our website or services, you consent to this Privacy Policy. Where required by law, consent is obtained explicitly (for example, cookie banners or marketing email subscriptions).

Information We Collect

Depending on your interaction with us, we may collect:

• Contact details such as name, company name, and email address.
• Billing and license information (license key, order ID, subscription status).
• Account information when you register or purchase a license.
• Support communication content when contacting us.
• Technical information such as IP address, browser type, device type, and general analytics data.
• Website and environment information you choose to share for troubleshooting (for example, WordPress version, plugin version, theme/plugins list).

How We Use Your Personal Data

We use your data to:

• Provide, operate, and maintain our website, plugins, and services.
• Process orders, manage licenses and subscriptions.
• Provide support and communicate with you about your account and products.
• Improve and develop our products, services, features and user experience.
• Detect and prevent fraud, abuse or security incidents.
• Send important administrative information (for example, notices about changes to terms, security alerts, subscription and renewal information).
• Send marketing communications (only if legally permitted and with an easy way to opt out).

Legal Basis (GDPR)

We process personal data under the following legal bases:

• Performance of contract (license management, product delivery, support).
• Legitimate interest (security, service improvement, fraud prevention, basic analytics).
• Legal obligation (tax and accounting records, compliance).
• Consent (email marketing, optional resources, cookies where required by law).

CCPA Privacy Rights (Do Not Sell My Personal Information)

We never sell any of our clients' personal data.

Log Files

RichPlugins follows standard practices for log files. Information may include IP address, browser type, ISP, date/time, referring/exit pages and number of clicks. This data is not used to directly identify you and is used for analytics, security and site administration.

Cookies

Like many websites, we use cookies to enhance functionality and user experience, and to perform basic analytics. You may disable cookies in your browser settings, however some features may not function properly.

Payments

Our order process is managed by Paddle.com, who acts as Merchant of Record. Paddle handles billing, tax compliance and payment security. We do not store or process full payment card information on our own servers. Please review Paddle's Privacy Policy for details on their processing.

Data from Review Platforms and Our Plugins

Our products are designed to fetch and display reviews from third-party platforms such as Google, Facebook, Yelp and others, depending on the configuration you choose. When you connect such platforms, we may process the following types of data:

• Business information (for example, business name, address, rating score, profile URL).
• Review data (for example, reviewer display name, profile photo or avatar, rating, review text, review date).
• Technical identifiers needed to retrieve reviews (for example, place ID, page ID, internal identifiers).

This data is used solely to enable you to display and manage reviews on your website or within our dashboard. We do not sell this data or use it for profiling or advertising of unrelated services. Data fetched from third-party review platforms is not stored longer than necessary for display and synchronization purposes, and is otherwise subject to the retention rules described below.

Facebook and Instagram Data

When you connect a Facebook or Instagram account or Page to our services (for example, to display reviews via Meta APIs), we may receive and temporarily store data such as:

• Page name and ID.
• Access tokens and their expiration time.
• Public business profile information (for example, category, profile picture, rating summary).
• Review-related data (for example, reviewer display name, rating, review text, timestamps, merchant replies).

This data is retrieved only after your explicit authorization and is used strictly to:

• Display and manage your Facebook/Instagram reviews in widgets and dashboards.
• Maintain secure communication between your account and the connected Page.

We do not sell or use this data for independent advertising, profiling, or to build audiences on Meta platforms. You can revoke access at any time from your Facebook/Instagram account settings and you may contact us to request deletion of related data stored on our side.

Google API Data

When you connect your Google account or Google Business Profile to our services, we may access and process data such as:

• Business name, address, place ID and profile information.
• Overall rating and rating counts.
• Review details (for example, reviewer display name, rating, review text, review date).

We use this data only to sync and display your Google reviews in your widgets and dashboards and, where applicable, to help you manage replies. We do not sell this data or use it for unrelated advertising or profiling.

When accessing Google APIs, we adhere to the Google API Services User Data Policy and respect any limits or permissions you grant during the authorization flow. You can disconnect access at any time from your Google account and you may contact us to request deletion of related data stored on our side.

Controller vs Processor

We act as a data controller for personal data submitted directly to us (for example, account and contact information), and as a data processor for data fetched through connected third-party APIs under the authorizations you grant.

Third-Party Services

We may use trusted third-party service providers such as hosting companies, analytics platforms, email providers or support tools. These providers only process data as necessary to perform services on our behalf and are bound by appropriate data protection obligations.

Data Retention

We retain personal data only as long as necessary for the purposes described in this policy, unless a longer retention period is required by law. When data is no longer needed, we will delete or anonymize it.

Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure or destruction.

Your GDPR Rights

If you are located in the EU/EEA, you have the right to:

• Access your personal data.
• Correct inaccurate or incomplete personal data.
• Request deletion of your data (where legally applicable).
• Restrict processing of your data in certain situations.
• Object to processing based on legitimate interests or direct marketing.
• Request data portability.

You also have the right to lodge a complaint with your local data protection authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD).

To exercise your rights, please contact us at support@richplugins.com. We will respond within one month as required by GDPR.

International Data Transfers

If personal data is transferred outside the European Union, we will ensure that it is protected by adequate safeguards, such as EU Commission adequacy decisions or Standard Contractual Clauses.

Children’s Information

Our website and products are not intended for children under 16. We do not knowingly collect personal data from minors. If you believe a child has provided us with personal data, please contact us and we will delete it.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Your continued use of our website or services after any changes means you accept the updated policy.

Contact

If you have any questions, please contact us:
Rich Plugins SL
Plaza San Cristóbal, 14
03002 Alacant/Alicante, Spain
Email: support@richplugins.com