Privacy Policy

Information We Collect

Website Information:

• Contact Form: When you contact us, we collect your name, email address, and message content.
• Newsletter: If you subscribe to our newsletter, we collect your email address.
• Account Information: When you purchase a product, we collect your name, email, and payment information through our payment processor.

Plugin Information:

• License Activation: When you activate a premium license, basic site information (site URL, WordPress version) is sent to our licensing system to validate your license.
• Support Requests: If you submit a support ticket through the plugin, your site URL, email, and message are collected.

How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and support requests
• Send you product updates and newsletters (only if you opted in)
• Process transactions and manage your license
• Improve our products and services
• Comply with legal obligations

We will never sell, rent, or share your personal information with third parties for marketing purposes.

Third-Party Services

We use the following third-party services:

• Freemius: For license management, payment processing, and support tickets. Freemius Privacy Policy
• Payment Processors: Payments are handled securely through Freemius's payment partners (Stripe, PayPal). We do not store your credit card information.
• Email Service: For sending newsletters and transactional emails.
• Cloudflare, Inc.: Hosts our Cycle AI proxy service. Only used when a merchant explicitly enables the optional Cycle AI feature. Cloudflare Privacy Policy
• OpenAI, L.L.C.: Provides the underlying language model that generates Cycle AI campaign drafts. Only used when a merchant explicitly enables Cycle AI. OpenAI Privacy Policy

Each third-party service has its own privacy policy governing the use of your information. See the AI Services (Cycle AI) section below for detailed information about which providers are used only when the optional Cycle AI feature is enabled.

AI Services (Cycle AI)

Starting with Smart Cycle Discounts version 2.0, the plugin includes an optional AI-powered feature called Cycle AI. It lets merchants describe a campaign in their own words and receive a ready-to-run draft. This feature is disabled by default and only becomes active after the merchant explicitly clicks "Enable Cycle AI" in the plugin's first-use consent dialog. No data is sent to any external AI service until the merchant takes that action.

Data sent when Cycle AI is enabled and used:

• The text prompt you type (e.g. "20% off winter jackets this weekend")
• A summary of your WooCommerce store catalog: product names, product IDs, category names, and tag names. This lets the AI reference your actual catalog rather than generic placeholders.
• Your Freemius plugin install ID and, if applicable, your Cycle AI license key. Used to verify your plan tier and enforce per-plan usage quotas.

Data we do not send:

• Customer names, email addresses, or any personally identifiable information about your shoppers
• Order data, transaction history, or sales figures
• Billing or shipping addresses
• Content from pages, posts, WordPress users, or settings unrelated to Cycle AI

Service providers (subprocessors) used by Cycle AI:

• Cloudflare, Inc. (United States) — Hosts our Cycle AI proxy service at cycle-ai-proxy.usa-mv96.workers.dev. The proxy validates your plan tier, enforces usage quotas, and forwards your request to OpenAI. The proxy does not log or persist the content of AI requests. Cloudflare Privacy Policy
• OpenAI, L.L.C. (United States) — Runs the language model (GPT-5-mini for Pro users, GPT-5-nano for free users) that generates campaign drafts from your prompt. OpenAI Privacy Policy · OpenAI API Data Usage Policy

Data retention. Our Cloudflare Worker does not log or store the content of AI requests. License validation results are cached for up to 10 minutes in Cloudflare KV to reduce round trips. Usage quotas are tracked per install for 33 days (free tier, monthly cycle) or 2 days (Pro tier, daily cycle). OpenAI's default retention for API requests is 30 days for abuse monitoring; requests are not used to train models. For detailed information about OpenAI's handling of API data, see OpenAI's API Data Usage Policy.

International transfer. If you are located in the European Economic Area, the United Kingdom, Switzerland, or another region with data transfer restrictions, please note that the Cycle AI proxy and OpenAI service are hosted in the United States. By enabling Cycle AI, you consent to this transfer. We rely on Standard Contractual Clauses with our subprocessors for international transfers where required.

Your rights regarding Cycle AI. You can revoke your consent at any time by disabling the Cycle AI feature in the plugin — this immediately stops any further data transmission. To request deletion of previously transmitted data, please contact us and we will forward your request to our subprocessors. Because the Cycle AI proxy does not retain request content, most deletion requests only involve forwarding to OpenAI under their API data usage terms.

Cookies

Our website uses cookies to:

• Remember your preferences
• Keep you logged in to your account
• Understand how you use our website

You can control cookies through your browser settings. Disabling cookies may affect some website functionality.

Data Retention

We retain your information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements

You may request deletion of your data at any time by contacting us.

Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request that we correct inaccurate data
• Deletion: Request that we delete your personal data
• Opt-out: Unsubscribe from marketing communications at any time
• Data Portability: Request your data in a portable format

California Residents (CCPA): You have the right to know what personal information we collect and request its deletion. We do not sell personal information.

EU/EEA Residents (GDPR): You have additional rights under GDPR, including the right to lodge a complaint with a supervisory authority.

To exercise any of these rights, please contact us.

Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Secure HTTPS connections
• Encrypted data transmission
• Regular security updates
• Limited access to personal data

While we strive to protect your information, no method of transmission over the internet is 100% secure.

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date.

We encourage you to review this policy periodically.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please don't hesitate to reach out.