This Privacy Policy describes how CloneShield collects, uses and shares information when you use our WordPress plugin, our dashboard at cloneshielder.com and related services (collectively, the "Service"). By using the Service, you agree to the collection and use of information in accordance with this policy.
1. Information we collect
When you create an account, we collect name, email address and company information. When you purchase a license, we collect billing data and transaction identifiers through Stripe or other payment processors.
Inside the WordPress plugin: we store your CS-XXXX license key locally in your wp_options database. We only send our servers: the license key, your WordPress site domain, URLs of pages requested for cloning and anonymous impression/click counters for analytics.
Public pages of the Service: we collect anonymized IP address, user agent, URL accessed, timestamp, browser language and standard log data for security, abuse prevention and aggregated usage analysis.
2. How we use information
Provide, maintain and improve the Service (including page cloning, license validation and analytics).
Process transactions and issue licenses after payment confirmation.
Send service communications (account confirmation, important security notices and updates).
Detect, prevent and address fraud, abuse, attacks and Terms of Service violations.
3. Sharing and third-party services
Payment processors (Stripe and, when applicable, Hotmart/Kiwify/Eduzz/Braip/Monetizze): receive only the data needed to complete the purchase and follow their own policies.
Supabase (PostgreSQL + Edge Functions): hosts database, authentication and serverless functions. Covered by DPA and LGPD/GDPR.
We do NOT sell, rent or trade your personal data to third parties.
4. Cookies and local identifiers
The Service uses strictly necessary cookies (Supabase session authentication), language preference cookies and first-party attribution markers (click_id, session_id).
You can disable cookies in your browser; some restricted features will become unavailable.
5. Your rights (LGPD / GDPR)
You have the right to access, correct, export and request deletion of your personal data.
You can object to or restrict certain uses and withdraw previously given consent.
To exercise these rights, contact the email listed in section 8.
6. Retention
We keep your information for as long as necessary to fulfill contractual obligations, legal requirements (e.g. invoices, receipts), resolve disputes and enforce our agreements.
Aggregated analytics and anonymized data may be retained longer for statistical purposes.
7. International transfers
Some providers (Stripe, Supabase) process data outside your home country. We implement standard contractual clauses and technical/organizational measures compatible with LGPD and GDPR.
8. Contact
Data controller: CloneShield.
Questions, rights requests or privacy incidents: suporte@cloneshielder.com.
Address: Brazil. Response within 15 business days.