1. Who we are

PluginForge | WordPress develops and distributes professional WordPress plugins and templates. This Privacy Policy explains how we collect, use, store and protect your personal data.

2. Data we collect

• Account: name, e-mail and password (stored encrypted).
• Digital product orders: billing details and identification required by the payment gateway, billing address and purchase history.
• Physical product orders: full name, shipping address and contact phone number, used solely to enable delivery.
• Browsing: IP address, device and browser type, visited pages and cookies.

3. Legal basis for processing

We process your data based on the following legal grounds:

• Contract performance: to process orders, deliver digital products and arrange delivery of physical products;
• Compliance with a legal or regulatory obligation: to issue tax documents and meet requirements from competent authorities;
• Legitimate interest: for fraud prevention, platform security and service improvement, always respecting your rights and expectations;
• Consent: for marketing communications and non-essential cookies, which can be withdrawn at any time.

4. How we use your data

• Process orders and deliver digital products to your account area;
• Process and ship physical product orders;
• Provide customer service related to orders, payments and account access;
• Send order-related communications, store updates and, with your consent, offers;
• Prevent fraud and keep the platform secure;
• Comply with legal and tax obligations.

5. Payments

Payments are processed by third-party gateways (such as PayPal and other providers). We do not store full credit card numbers on our servers. Payment data follows the gateway's own privacy and security policies.

6. Sharing

We only share data with: (a) payment gateways, to process transactions; (b) infrastructure and hosting providers, to operate the site; (c) carriers and logistics providers, exclusively for the delivery of physical products; and (d) competent authorities, when required by law. We do not sell your data.

7. International data transfer

Some of the service providers we use (such as payment gateways and infrastructure/hosting providers) may process data on servers located outside Brazil. In such cases, we adopt the safeguards required by Brazilian data protection law to ensure an adequate level of protection for your personal data.

8. Cookies

We use essential cookies (store and cart operation), preference cookies (language and currency) and analytics cookies. You can disable cookies in your browser, but parts of the store may stop working properly.

9. Security

We use site-wide HTTPS, restricted administrative access and development best practices to protect your data against unauthorized access, loss or alteration.

10. Your rights

You may request at any time confirmation of the existence of processing, access to your data, correction of incomplete or outdated data, anonymization, blocking or deletion of unnecessary data or data processed unlawfully, portability where applicable, and withdrawal of consent, under applicable law.

11. Account and data deletion

You may request the deletion of your PluginForge account and the personal data associated with it. The request can be made through the support channel indicated in this policy. Once the request is confirmed, we will delete the data associated with the account that does not need to be retained for legal or regulatory obligations, fraud prevention, the regular exercise of rights, or other legitimate grounds for retention.

To request deletion, provide the e-mail address used on the account and, when possible, the order number associated with the account.

12. Retention

We keep your data for as long as needed to fulfill the purposes described in this policy and applicable legal and tax obligations.

13. Complaints to the data protection authority

If you believe your data has not been handled in accordance with applicable law or this policy, in addition to contacting us directly, you may also file a complaint with Brazil's National Data Protection Authority (ANPD), the body responsible for overseeing personal data protection in Brazil.

14. Changes to this policy

We may update this policy from time to time. The current version will always be available on this page with its last revision date.

15. Contact

Data controller / support: privacidade@pluginforgewordpress.com or WhatsApp +55 (91) 99354-1650.

Last updated: August 2026.