Home / Privacy Policy
๐Ÿ”’ GDPR & CCPA Compliant

Privacy Policy

Last Updated: September 1, 2026

๐Ÿ›ก๏ธ

Billing Data & Payment Processor Disclosure

CapiFlow Pro does not collect, store, or process raw payment card details or banking credentials on our servers. Financial transactions and order fulfillment are conducted by our authorized Merchant of Record, Lemon Squeezy (Lemon Squeezy LLC, a Stripe company), operating under strict PCI-DSS Level 1 security standards and tokenized 256-bit SSL encryption.

1. Who We Are

CapiFlow Pro ("We", "Us", or "Our") provides self-hosted Meta Conversion API (CAPI) tracking, automated fraud prevention, and courier logistics automation software for WooCommerce stores. We are committed to protecting the personal data of our website visitors, license holders, and software users.

2. Core Architecture: 100% Self-Hosted Customer Data

Unlike third-party cloud container proxies (such as Stape.io or Google Cloud GTM servers), CapiFlow Pro operates as a 100% self-hosted engine inside your own WordPress environment:

  • Zero Customer Data Ingestion: Your store customers' PII, phone numbers, shipping addresses, and cart contents never touch our servers.
  • Direct Server-to-Endpoint Dispatch: Event payloads are hashed via SHA-256 and sent directly from your server to Meta Graph API and courier APIs.
  • License Verification Telemetry: The plugin communicates with our API solely for license activation, automated update checks, and domain validity verification.

3. Information We Collect on Our Website

When you interact with our website, create an account, or purchase a license, we collect:

  • Account Details: Your name, business email address, and billing company name.
  • License Activation Records: The domain URL(s) where your license key is activated and plugin version metadata.
  • Order Records: Transaction ID, purchase date, plan tier, and country (handled via certified payment gateways).
  • Server Logs & Cookies: IP address, browser type, operating system, and essential session cookies.

4. How We Use Your Information (Legal Basis)

Under GDPR (Article 6), we process your data under the following lawful bases:

  • Contract Performance: To deliver license keys, provide software downloads, verify site activations, and provide technical support.
  • Legitimate Interests: To prevent software piracy, detect fraudulent transactions, and optimize website stability and security.
  • Legal Compliance: To comply with tax, financial, and regulatory accounting obligations.

5. Your Privacy Rights (GDPR & CCPA)

Depending on your jurisdiction (including EU/EEA, UK, and California), you hold the following rights:

  • Right to Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate account information.
  • Right to Erasure ("Right to be Forgotten"): Request deletion of your account and personal records (subject to statutory tax retention rules).
  • Right to Data Portability: Request your data in a machine-readable structured format.
  • Right to Opt-Out: Unsubscribe from non-essential promotional communications at any time.

6. Contact Data Protection Team

To exercise your privacy rights or discuss our data protection practices, please contact our Data Protection Team:

๐Ÿ”’ Data Protection Email: privacy@capiflowpro.com

๐Ÿ“ง General Support: support@capiflowpro.com

๐Ÿ’ณ Payment Security: PCI-DSS Level 1 Compliant Encrypted Gateways