Privacy policy
Giftaro is sold by Virtualix Inc. and runs on your own server. That shapes this whole policy: there is a short list of things we hold about you, and a much longer list of things we deliberately never see.
1. Who is responsible
Virtualix Inc., a company incorporated in Canada, is the controller of the personal information described here. Giftaro is our product. Write to hello@giftaro.co with any privacy question or request.
2. What we collect
Only what is needed to sell you a licence and support it.
- Account
- Your name and email address.
- Billing
- Billing country, and the tax identifier you enter if you provide one. Payment details go directly to Stripe and are described below.
- Licence
- Your plan, licence key, the sites you activate it on, and renewal dates.
- Support
- The content of emails you send us, and anything you choose to include in them.
- Website
- Standard server logs from our host, including IP address and browser type, kept for security and troubleshooting.
3. What we never see
Giftaro runs entirely inside your own WordPress installation. Gift card numbers, PINs, balances, ledger entries, eGift recipients and your customers' personal data never leave your server. They are not sent to us, and we have no mechanism to read them.
The plugin does not phone home with store data. It contacts us only to check that your licence is valid and to look for updates.
We also never see your customers' payment card details. Those are handled by whatever payment gateway you have configured in your own store, which is a relationship between you and that gateway.
4. Payments and Stripe
We use Stripe to process payments for Giftaro licences. When you buy or renew, you enter your card details directly with Stripe. We never see or store your full card number. We receive only the last four digits, the card brand, and whether the payment succeeded.
Stripe receives your personal data and processes it in accordance with Stripe's Privacy Policy. That includes your name, email address, billing address, card details and transaction history, and Stripe uses it to process the payment and to meet its own legal and anti-fraud obligations.
5. Why we hold it
- To sell you a licence, take payment, and issue your licence key.
- To let your installation confirm that its licence is valid and receive updates.
- To answer your support emails.
- To send transactional email: receipts, licence keys, renewal reminders and security notices. These are part of the service and are not marketing.
- To meet tax, accounting and anti-fraud obligations.
We do not sell your personal information, and we do not share it with advertisers.
7. How long we keep it
Account and licence records are kept while your licence is active and for seven years afterwards, because tax law requires us to keep records of sales. Support emails are kept for three years. Server logs are kept for 30 days.
8. Your rights
You can ask us to show you the personal information we hold about you, correct it if it is wrong, or delete it. Email hello@giftaro.co and we will respond within 30 days.
Deletion has one limit: we cannot delete records we are legally required to keep for tax purposes until that period has passed. Everything outside those records can be removed.
If you are in Canada you may complain to the Office of the Privacy Commissioner of Canada. If you are in the United Kingdom or the European Economic Area you may complain to your national data protection authority.
10. Security
Our site is served over HTTPS. Payment details go directly to Stripe and never touch our servers. Access to our billing and support systems is limited to people who need it and protected by two-factor authentication.
No system is perfectly secure. If a breach ever affected your personal information we would tell you and the relevant regulator as the law requires.
11. Changes
If we change this policy in a way that materially affects you, we will email active licence holders. The date at the top of this page always shows the current version.
12. Contact
Privacy questions and requests go to hello@giftaro.co. Other ways to reach us are on the contact page.