Skip to content
Hire on Upwork

Privacy Policy

How we collect, use, and protect your information.

Last updated: 16 May 2026

This Privacy Policy describes how ONVORE ("we", "us", or "our") collects, uses, and shares information when you visit onvore.com, install our plugins on your WordPress site, or purchase a subscription from us.

We respect your privacy and only collect the data we need to deliver our products and run our business. This page explains what that data is, why we collect it, and what control you have over it.

1. Who we are

ONVORE is operated from Hämeenkatu 11, 33100 Tampere, Finland. For privacy questions, write to support@onvore.com.

We are the data controller for the personal data described in this policy.

2. Information we collect

2.1 Information you give us directly

  • Account information — when you subscribe to a plugin, our payment provider (Lemon Squeezy) collects your name, email, billing address, and payment details on our behalf. We receive your name, email, and the country portion of your billing address.
  • Support correspondence — when you email us, we keep the contents of that conversation so we can help and reference it later.
  • Contact form submissions — name, email, and message you submit through forms on onvore.com.

2.2 Information collected automatically when you visit onvore.com

  • Server logs — IP address, browser type, pages visited, and approximate location, retained for up to 30 days for security and performance monitoring.
  • Cookies — see our Cookie Policy for details.

2.3 Information collected by our plugins on your WordPress site

  • Licence validation pings — when you activate or validate a Pro licence, the plugin sends your licence key and the URL of your site to our payment provider's licence API. No other data is transmitted.
  • Optional anonymous error reports — if you opt in via plugin settings, hashed error fingerprints (not error messages, stack traces, or any user data) are sent to us so we can identify and fix bugs. Off by default.

We do not collect, transmit, or have access to your customers' data, your vendors' personal data, the contents of imported products, or anything else processed by your WordPress site beyond what's listed above.

3. Why we collect this information

  • To deliver the plugins and services you've purchased.
  • To verify subscription status and prevent licence misuse.
  • To send transactional email (purchase receipts, renewal reminders, security notices).
  • To provide customer support when you ask for help.
  • To improve our plugins by fixing reported bugs.
  • To meet legal and tax obligations.

4. Legal bases for processing (GDPR)

Where the General Data Protection Regulation applies, we rely on the following legal bases:

  • Contract — to deliver the products and services you've purchased.
  • Legitimate interest — to keep our site secure, prevent fraud, and improve our products.
  • Consent — for optional analytics and error reporting (always opt-in).
  • Legal obligation — to keep records for tax and accounting purposes.

5. Who we share data with

We share the minimum data necessary with the following sub-processors:

  • Lemon Squeezy (payments, subscriptions, licence keys) — operates as Merchant of Record for our sales. Privacy policy.
  • Our email provider — used to send transactional emails (receipts, support replies).
  • Our hosting provider — runs onvore.com.

We do not sell or rent your personal information to anyone, ever.

6. International transfers

Some of our sub-processors are based outside the European Economic Area. Where they are, we rely on Standard Contractual Clauses approved by the European Commission, or other lawful transfer mechanisms, to ensure your data remains protected to GDPR standards.

7. How long we keep your data

  • Account & subscription data — for as long as your subscription is active, plus 7 years after cancellation (to meet accounting and tax record-keeping requirements).
  • Support correspondence — 3 years from last contact, then deleted.
  • Server logs — up to 30 days.
  • Contact form submissions — up to 12 months after last reply, then deleted.

8. Your rights

If GDPR applies to you, you have the right to:

  • Access the personal data we hold about you.
  • Have inaccurate data corrected.
  • Have your data deleted (see our Data Deletion Policy).
  • Object to or restrict certain processing.
  • Receive your data in a portable format.
  • Withdraw consent for optional processing at any time.
  • Lodge a complaint with your local data-protection authority.

To exercise any of these rights, email support@onvore.com. We respond within 30 days.

9. Security

We protect data with HTTPS everywhere, encrypted databases, principle-of-least-privilege access controls, and regular security reviews of our plugin code. No system is 100% secure, but we take the responsibility seriously.

10. Children's data

Our products are not directed at children under 16. We do not knowingly collect data from anyone under that age. If you believe a child has provided us with personal information, please contact us and we'll delete it.

11. Changes to this policy

We may update this policy occasionally — when our practices change, when laws change, or when we add new features. The "last updated" date at the top of this page always reflects the most recent revision. Material changes will also be announced by email to active subscribers.

12. Contact

For any privacy question or to exercise your rights, email support@onvore.com.