Privacy Policy

1. Who We Are

The data controller for personal data collected through wpmediacloud.com and the WP Media Cloud plugin is:

Nahnu Fitness LLC (trading as Nahnu Plugins)
Washington State, United States
support@nahnuplugins.com
wpmediacloud.com

For GDPR purposes, Nahnu Fitness LLC is the data controller. We do not have a designated EU representative at this time. If you are an EU resident with questions or concerns, please contact us directly at the email address above.

2. What Data We Collect

We collect only the minimum personal data necessary to provide our products and services. Specifically, we collect:

• Purchase information: your name, email address, billing country, and payment confirmation details (we do not store payment card numbers; these are handled by SureCart and its payment processors);
• Email address: used to deliver your license key, order confirmation, support communications, and, where you have opted in, product update and marketing emails;
• License key and activation data: the license key assigned to your purchase, the number of sites on which it is activated, and activation timestamps, used to validate your license and enforce site limits;
• Support communications: any personal data you include in emails or support requests you send to us.

We do not collect sensitive personal data (such as health information, financial account numbers, or government ID numbers). We do not knowingly collect personal data from children under the age of 16.

The WP Media Cloud plugin itself does not collect personal data from your WordPress site or your end users. The plugin interacts with third-party cloud storage providers using credentials you supply and does not transmit visitor data to us.

3. How We Collect Data

We collect personal data in the following ways:

• Purchase: when you complete a purchase through our checkout powered by SureCart;
• Support requests: when you contact us by email;
• Marketing opt-in: when you voluntarily subscribe to product updates or marketing communications;
• Website analytics: aggregated, anonymised usage data collected through self-hosted analytics tools (see Section 5).

4. How We Use Your Data

We use your personal data for the following purposes and on the following legal bases:

4.1 To fulfil your purchase and deliver the product

Legal basis (GDPR): Contract performance (Article 6(1)(b)).

We use your name, email, and payment confirmation to process your order, issue your license key, and provide access to updates and support during your license period.

4.2 To provide customer support

Legal basis (GDPR): Contract performance (Article 6(1)(b)) and legitimate interests (Article 6(1)(f)).

We use your email address and the content of your support messages to respond to your questions and resolve issues.

4.3 To send transactional emails

Legal basis (GDPR): Contract performance (Article 6(1)(b)).

We send order confirmations, license delivery emails, renewal reminders, and important account notifications. You cannot opt out of these while your license is active as they are essential to the service.

4.4 To send marketing and product update emails

Legal basis (GDPR): Consent (Article 6(1)(a)).

Where you have opted in, we send emails about new features, plugin updates, and occasionally promotional offers. You can withdraw your consent and unsubscribe at any time using the unsubscribe link in any marketing email or by contacting us at support@nahnuplugins.com.

4.5 To comply with legal obligations

Legal basis (GDPR): Legal obligation (Article 6(1)(c)).

We retain purchase and transaction records as required by applicable tax and accounting laws.

4.6 To operate and improve our website

Legal basis (GDPR): Legitimate interests (Article 6(1)(f)).

We use self-hosted, privacy-focused analytics tools to understand how visitors use wpmediacloud.com so we can improve it. This data is aggregated and does not identify individual visitors.

5. Third-Party Data Processors

We share your personal data only with the third-party service providers listed below, and only to the extent necessary to deliver our products and services. Each processor is bound by a data processing agreement or equivalent contractual obligations.

5.1 SureCart (payments and licensing)

SureCart processes payments and manages license records on our behalf. When you purchase, your payment details are transmitted directly to SureCart and its payment processor (Stripe). We receive only an order confirmation and the associated email address. SureCart's privacy policy is available at surecart.com.

5.2 MailerPress with Postmark (email delivery)

We self-host MailerPress and use Postmark as our email delivery provider for transactional and marketing emails. Your email address and name are transmitted to Postmark solely for the purpose of delivering emails you have requested or are entitled to receive. Postmark's privacy policy is available at postmarkapp.com.

5.3 Plausible Analytics (website analytics)

We self-host Plausible Analytics to measure website traffic. Plausible does not use cookies, does not collect personal data, and does not track visitors across websites. All analytics data is aggregated and anonymous. No personal data is shared with or processed by Plausible.

5.4 Matomo (website analytics)

We self-host Matomo for additional website analytics. Our Matomo instance is configured with IP anonymisation enabled, meaning your IP address is truncated before storage and cannot be used to identify you. Data collected by Matomo is stored on our own servers and is not shared with third parties.

We do not sell, rent, or share your personal data with any other third parties for their own marketing or commercial purposes.

6. International Data Transfers

Nahnu Fitness LLC is based in the United States. If you are located in the European Union, European Economic Area, or United Kingdom, your personal data will be transferred to and processed in the United States, which may not provide the same level of data protection as your home jurisdiction.

Where we transfer personal data from the EU/EEA to the United States, we rely on appropriate safeguards including Standard Contractual Clauses (SCCs) adopted by the European Commission, where applicable, and the data processing agreements we maintain with our service providers.

7. Data Retention

We retain your personal data for the following periods:

• Purchase and transaction records (name, email, order details, license key): retained for seven (7) years from the date of purchase to comply with applicable tax and accounting obligations. After this period, records are deleted or anonymised.
• Support communications: retained for three (3) years from the date of the last communication, after which they are deleted.
• Marketing email list: retained until you unsubscribe or request deletion. We will also remove you from our marketing list if you have not engaged with our emails for a period of three (3) years.
• Website analytics data: aggregated and anonymous; no personal data is retained in our analytics systems.

Where we are required by law to retain data for a longer period, we will do so and will inform you if relevant.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data. EU/EEA residents have these rights under the GDPR. We extend these rights to all customers regardless of location.

8.1 Right of access

You have the right to request a copy of the personal data we hold about you.

8.2 Right to rectification

You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.

8.3 Right to erasure

You have the right to request that we delete your personal data. We will action deletion requests within thirty (30) days of receiving a written request. Note that we may be required to retain certain data (such as purchase records) for legal or accounting reasons even after a deletion request. In such cases we will inform you of what we are required to retain and why.

8.4 Right to restrict processing

You have the right to request that we restrict the processing of your personal data in certain circumstances, for example while you contest the accuracy of the data.

8.5 Right to data portability

You have the right to receive a copy of personal data you have provided to us in a structured, commonly used, machine-readable format.

8.6 Right to object

You have the right to object to processing based on legitimate interests. You also have an unconditional right to object to processing for direct marketing purposes, which you can exercise at any time by unsubscribing from our marketing emails.

8.7 Right to withdraw consent

Where we process your data on the basis of consent (for example, marketing emails), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

8.8 Right to lodge a complaint

If you are located in the EU/EEA, you have the right to lodge a complaint with your local data protection supervisory authority. A list of EU supervisory authorities is available at edpb.europa.eu.

To exercise any of the above rights, please contact us at support@nahnuplugins.com. We will respond to all requests within thirty (30) days. We may ask you to verify your identity before processing your request.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include encrypted communications (HTTPS), access controls, and secure hosting environments.

No method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect your personal data, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected individuals and relevant authorities as required by applicable law.

10. Children's Privacy

WP Media Cloud is a professional software product not directed at children. We do not knowingly collect personal data from individuals under the age of 16. If we become aware that we have inadvertently collected personal data from a child under 16, we will delete it promptly. If you believe we have collected such data, please contact us at support@nahnuplugins.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. When we make material changes, we will update the "Last updated" date at the top of this page. If the changes are significant, we will make reasonable efforts to notify active customers by email.

We encourage you to review this policy periodically. Your continued use of WP Media Cloud after a change constitutes your acceptance of the updated policy.

12. Contact Us

For any questions, concerns, or requests related to this Privacy Policy or our handling of your personal data, please contact us at:

Nahnu Fitness LLC (trading as Nahnu Plugins)
Washington State, United States
support@nahnuplugins.com
wpmediacloud.com/privacy-policy/

We aim to respond to all privacy-related enquiries within five (5) business days.