Privacy and Cookies Policy

Plugin Hub is operated by David Lipschitz as a sole trader, ABN 87 760 789 346, in Victoria, Australia. Privacy questions may be sent to info@pluginhub.com.au.

• Accounts and purchases: name, email, billing details, order and product information, payment status and identifiers returned by Stripe. PluginHub does not receive your full card number.
• Licensing: the encrypted licence key, product, entitlement status, activated site URL, activation history and limited validation logs. Security logs may include a hashed IP address.
• Support and contact: the details and message you submit, plus related correspondence and troubleshooting information.
• Website operations: hosting, access, security and error logs, device/browser information, cookies required for accounts, carts, checkout and security, and rolling backups.
• Analytics: where consent permits, Google Analytics receives limited pseudonymous usage and event data. We do not intentionally send names, email addresses, form values, order IDs, licence keys, activated site URLs or installation identifiers.

UATA hosted suggestions: when you choose PluginHub image credits and approve uploads in WordPress, your website sends the selected resized image, your chosen limited context and suggestion language to PluginHub. Image-only mode sends no page context; custom-keyword mode sends the keywords you choose. Website linking exchanges the website address and a short-lived ownership proof. We keep account/site references, credit grants, reservations, usage, refunds and recovery records.

We use information to provide downloads, accounts, checkout, licence activation and transfer, updates, support, fraud and security controls, record keeping, service improvement and legal compliance. We do not sell personal information.

PluginHub relies on service providers including SiteGround for hosting and backups, WooCommerce for commerce functions, Stripe for payments, SMTP/email providers for message delivery, and Google Analytics where consent is given. These providers may process information outside Australia under their own privacy and security terms. Google Search Console helps us understand search visibility but does not add a visitor tracking tag.

For UATA hosted suggestions, PluginHub sends the approved image, context and language to OpenAI or Google Gemini. Customer-owned OpenAI and Gemini connections send these inputs directly from your WordPress website to the selected provider instead. The relevant plugin documentation explains the trigger and data flow. Hosted generation is currently restricted to administrator pre-launch testing.

Necessary cookies support accounts, carts, checkout, preferences and security. Analytics cookies are non-essential and are loaded only under the site’s consent controls where required. You can decline analytics without losing core store functionality. Browser settings can also remove stored cookies, although blocking necessary cookies may affect account or checkout features.

• Transaction and invoice records: generally five years or longer where law requires.
• Google Analytics user and event data: two months initially.
• Ordinary support and enquiry records: generally up to 24 months after closure.
• Licence and account data: while needed to provide the service, plus a limited period for disputes, security and legal records.
• Validation logs: generally 90 days; ordinary server/security logs and rolling backups: generally 30 to 90 days.

Information may be kept longer where required by law or a current dispute, security incident or enforcement matter.

UATA recovery: image and prompt inputs are processed in request memory rather than stored in the hosted job ledger. Delivered suggestion text is available for recovery for 30 days and removed by scheduled cleanup. Accounting and job references remain to prevent duplicate charging and support reconciliation. Provider retention follows the provider’s own policies; this is not a promise of zero retention by OpenAI or Google.

You may ask what personal information we hold about you, request a correction, or raise a privacy concern by emailing info@pluginhub.com.au. We may need to verify your identity before acting. We will assess requests under applicable Australian privacy law and any legal record-keeping obligations.

We use access controls, encryption where appropriate, updates, backups and monitoring intended to protect information. No online service can promise absolute security. We may update this policy when products, providers or legal obligations change and will publish the current date on this page.