This Privacy Policy explains how SurgeWP (“we”, “us”, “our”) collects, uses, discloses, and protects your personal information when you use our website and services.
Website: https://www.surgewp.com
Contact: hello@surgewp.com
1) What personal information we collect
A) Information you provide
- Account information (name, email address, username)
- Orders and billing info (billing name/address, email, purchase history, receipts)
- Support requests (messages, attachments, screenshots/files, technical details you submit)
- Content submitted to AI features (prompts, text, code, images, files) (see Section 6)
B) Information collected automatically
- Technical data (IP address, browser type, device info, OS, referrer URLs)
- Usage data (pages viewed and interactions, where analytics is enabled)
- Security/anti-abuse signals
2) Payments
We offer payments through third-party payment processors, including Stripe and PayPal. Payment details (such as your card information) are collected and processed directly by the relevant payment processor in accordance with their privacy policies. We do not store full payment card details on our servers.
We may store payment-related metadata such as transaction IDs, payment status, purchase amounts, products/licenses purchased, and billing details required for invoicing, record-keeping, support, and fraud prevention.
3) Plugin licensing, updates, and activation data
If you use our Products, we may collect and store information to verify license validity, deliver updates, enforce plan limits, and provide support. This may include:
- license key (or hashed form),
- activation domain(s)/site URL(s),
- environment details relevant to compatibility (e.g., WordPress/PHP versions),
- request metadata (IP address, timestamps, user agent) related to licensing/update checks.
4) Comments
If visitors leave comments, we collect the data shown in the comments form, plus IP address and browser user agent string to help spam detection.
An anonymized string created from your email address (a hash) may be provided to Gravatar. Gravatar’s privacy policy: https://automattic.com/privacy/. After approval, your profile picture may be visible publicly in the context of your comment.
5) Cookies
We use cookies and similar technologies for core site functionality and to improve your experience. Cookies may include essential cookies (login/session, security, preferences) and analytics cookies.
Google Analytics (GA4)
We may use Google Analytics 4 (GA4) to measure and analyze traffic and usage patterns. GA4 may collect information such as pages visited, interactions, device/browser details, approximate location, and IP-related data (subject to Google’s configuration and policies). This helps us improve site performance and user experience.
You can manage cookies through your browser settings. Disabling cookies may impact site functionality.
6) Third-party services and AI providers
Some features integrate with third-party services, including AI providers. If you use AI features, your submitted content (“Input”) may be transmitted to the relevant provider to generate output (“Output”). Providers may process data under their own terms and policies.
Do not submit sensitive, confidential, or personal information through AI features unless you have a lawful basis and are comfortable with third-party processing.
7) Embedded content
Pages may include embedded content (e.g., videos). Embedded content behaves as if you visited the third-party site directly, which may collect data and use cookies under their own policies.
8) Who we share your data with
We may share personal information with trusted third parties only as needed to operate and deliver our services, such as:
- payment processors (Stripe, PayPal),
- email and customer communication providers,
- analytics providers (Google Analytics 4),
- hosting/CDN/security providers,
- spam/fraud prevention services,
- AI providers when you use AI features.
We may also disclose information where required by law or to protect our rights and users.
9) Data retention
We retain information only as long as necessary for the purposes described in this policy, including legal, accounting, and security requirements. Some records (e.g., invoices/order records) may need to be retained even if you request deletion.
10) Your rights and choices
You may request access, correction, or deletion of personal information we hold about you, subject to legal/administrative exceptions.
Contact: hello@surgewp.com
Email communications
We may send transactional emails (receipts, account notices, license/renewal notices) and optional marketing emails (product updates/announcements). You can unsubscribe from marketing emails at any time using the link in the email. Transactional emails may still be sent where necessary to provide the service.
11) Where your data is processed
Our service providers may process data in countries other than your own. By using our services, you acknowledge that international data transfers may occur.
12) Security
We take reasonable steps to protect personal information, but no transmission or storage method is completely secure.
13) Changes
We may update this policy from time to time. Updates will be posted on this page with a revised “Last updated” date.
