This policy covers information we control: visitors to our website, customers who buy a plan, and sites that activate a Pro license. It does not cover the personal data you collect and process inside your own copy of PrimoCRM, which you control (see the next section).

PrimoCRM is a self-hosted plugin. The contacts, subscribers, campaigns, and other data you manage with it are stored in your own WordPress database on your own hosting.

We collect only what we need for the situations below:

• 1
  When you buy a plan: your name, email address, billing country, and the order details. Payment is processed by Paddle (see section 6); we receive order and contact details from Paddle to deliver your license and provide support, but not your full card number.
• 2
  When you activate a Pro license: your license key and the URL of the site where it is activated, plus basic technical data needed to validate the key.
• 3
  When you contact support: your email address and anything you include in your message.
• 4
  When you visit our website: standard server and cookie data as described in our Cookie Policy.

We use the information above to: process your order and deliver your license; validate license activations and enforce plan limits; provide support and product updates; send you essential service messages about your purchase; keep records for tax and accounting; and keep our website and service secure. We do not sell your personal information.

Where the GDPR applies, we rely on: performance of a contract (to deliver and support what you bought and validate your license); legal obligation (to keep tax and accounting records); and legitimate interests (to secure and improve our service and prevent abuse). Where we rely on consent, such as for optional analytics cookies, you may withdraw it at any time.

Purchases through our website are processed by Paddle, which acts as the Merchant of Record and as an independent data controller for payment processing. Paddle collects and handles your payment details and calculates applicable tax and VAT.

To confirm that a Pro license is valid and within its site limit, the Pro add-on contacts our licensing service at license.primocrm.com and sends your license key and site URL. We use this only to validate licenses, enforce plan limits, and deliver updates. The free plugin does not connect to our servers or transmit any data to us.

We share limited information only with service providers who help us run the business, under appropriate agreements:

• 1
  Paddle — payments, tax, and invoicing (Merchant of Record).
• 2
  Our hosting and licensing infrastructure — to run the website and the license-validation service.
• 3
  Email/support tools — to respond to your messages and send essential service emails.
• 4
  AppSumo — if you purchased through AppSumo, order and redemption data is shared with them to activate your deal.

We may also disclose information if required by law or to protect our rights.

We keep order and license records for as long as your license is active and afterward as needed to meet legal, tax, and accounting obligations. Support correspondence is kept only as long as needed to help you and maintain a support history. When information is no longer needed, we delete or anonymize it.

Our service providers may process data in countries outside your own, including outside the EEA/UK. Where that happens, we and our providers rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, to protect your information.

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise any of these, email privacy@primocrm.com. If you are in the EEA or UK, you also have the right to complain to your local data protection authority.

Our website uses a small number of cookies. See our Cookie Policy for the full details and how to manage them.

PrimoCRM is a business tool and is not directed to children. We do not knowingly collect personal information from anyone under 16.

We take reasonable technical and organizational measures to protect the information we hold. No method of transmission or storage is completely secure, but we work to keep our systems and your data safe.

We may update this policy from time to time; the “Effective date” above shows the latest version. For any privacy question or request, contact us at privacy@primocrm.com or by post at Dhaka, Mirpur 10, Bangladesh.