Legal

Privacy Policy

Your privacy matters to us. Learn how we collect, use, and protect your personal information.

GDPR Compliant
CCPA Compliant
Last Updated: November 30, 2025

At Authority Plugins ("we," "us," or "our"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our products, or engage with our services.

1. Information We Collect

Personal Information

We may collect personal information that you voluntarily provide when you:

  • Register for an account
  • Purchase a product or service
  • Subscribe to our newsletter
  • Contact us through our website
  • Participate in surveys or promotions

This information may include your name, email address, billing address, payment information, and any other information you choose to provide.

Automatically Collected Information

When you visit our website, we automatically collect certain information, including:

  • IP address and location data
  • Browser type and version
  • Operating system
  • Pages visited and time spent on our site
  • Referral sources
  • Device information

2. How We Use Your Information

We use the information we collect for various purposes, including:

  • Providing, operating, and maintaining our services
  • Processing transactions and sending related information
  • Responding to your inquiries and providing customer support
  • Sending promotional communications (with your consent)
  • Improving our products and services
  • Detecting and preventing fraud
  • Complying with legal obligations

3. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect information about your browsing activities. Cookies are small data files stored on your device that help us improve your experience on our website.

You can control cookies through your browser settings. However, disabling cookies may affect the functionality of our website.

4. Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

Service Providers

We may share information with third-party vendors who help us operate our business

Legal Requirements

We may disclose information if required by law or in response to valid legal requests

Business Transfers

In connection with any merger, acquisition, or sale of company assets

With Your Consent

We may share information for any other purpose with your explicit consent

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • SSL/TLS encryption for data transmission
  • Secure data storage with access controls
  • Regular security audits and updates
  • Employee training on data protection

6. Your Rights

Depending on your location, you may have certain rights regarding your personal information:

Access

Request a copy of the personal information we hold about you

Correction

Request correction of inaccurate information

Deletion

Request deletion of your personal information

Opt-out

Opt out of marketing communications

Data Portability

Request transfer of your data to another service

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws than your country. When we transfer your information internationally, we take appropriate safeguards to protect your privacy.

For transfers from the European Economic Area (EEA), we rely on:

  • Standard Contractual Clauses approved by the European Commission
  • Adequacy decisions for countries deemed to have adequate data protection
  • Your explicit consent where appropriate

9. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Our retention periods are based on:

Account information

Retained while your account is active and for 3 years after closure

Transaction records

Retained for 7 years for tax and accounting purposes

Support tickets

Retained for 3 years after resolution

Marketing preferences

Retained until you unsubscribe or request deletion

Website analytics

Aggregated data retained indefinitely; individual data for 26 months

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to Know: You may request information about the categories and specific pieces of personal information we collect about you
  • Right to Delete: You may request deletion of your personal information, subject to certain exceptions
  • Right to Opt-Out: You may opt-out of the sale of your personal information (we do not sell personal information)
  • Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise these rights, contact us at privacy@authorityplugins.com or call us at the number provided below.

11. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR):

  • Right of Access: Request a copy of your personal data
  • Right to Rectification: Request correction of inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data ("right to be forgotten")
  • Right to Restrict Processing: Request limitation of how we use your data
  • Right to Data Portability: Request transfer of your data in a machine-readable format
  • Right to Object: Object to processing based on legitimate interests or direct marketing
  • Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
  • Right to Lodge a Complaint: File a complaint with your local supervisory authority

Legal Basis for Processing: We process your personal data on the following legal bases:

  • Contract: Processing necessary to fulfill our contractual obligations to you
  • Consent: Processing based on your explicit consent (e.g., marketing communications)
  • Legitimate Interests: Processing necessary for our legitimate business interests
  • Legal Obligation: Processing required to comply with applicable laws

12. Third-Party Services

Our website and services may contain links to third-party websites and services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any personal information.

We use the following third-party services:

Stripe

Payment processing - Privacy Policy

Google Analytics

Website analytics - Privacy Policy

Intercom/Help Scout

Customer support - Check their respective privacy policies

AWS

Cloud hosting and data storage - Privacy Policy

13. Children's Privacy

Our services are not intended for children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children under these ages. If you believe we have collected information from a child under the applicable age, please contact us immediately and we will take steps to delete such information.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. We will notify you of any material changes by:

  • Posting the new Privacy Policy on this page
  • Updating the "Last updated" date at the top of this policy
  • Sending you an email notification for significant changes (if you have an account)

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

15. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about our privacy practices, please contact us:

Data Protection Officer: For GDPR-related inquiries, please contact our Data Protection Officer at dpo@authorityplugins.com.