Privacy Policy

Your privacy is important to us. This Privacy Policy outlines how your personal information is collected, used, and shared when you visit, subscribe, register, or make a purchase from PluginsCafe.

This Privacy Policy explains how PluginsCafe (“we”, “us”, “our”) collects, uses, and protects information when you visit pluginscafe.com, purchase our products, or use our WordPress plugins, including the plugin features that connect to Google Sheets (the “Service”).

1. Information we collect

Website and account information. When you register, purchase, or contact us, we may collect your name, email address, billing details handled by our payment processor, and the messages you send us. We do not store full payment card numbers.

Technical information. We may receive your website URL and plugin version so we can provide updates, licensing, and support.

Google user data (only with your permission). If you click “Connect with Google” in a plugin and approve access, the plugin receives:

  • An OAuth access token and refresh token that let the plugin act on your behalf.
  • Your Google account email address, shown in the plugin settings so you know which account is connected.
  • The names and IDs of the spreadsheets and tabs you select, so the plugin can save your form data to them.

2. How we use your information

We use website, account, and technical information to provide and support our products, process orders, send service messages, prevent fraud, and meet legal obligations. We use Google user data only to provide the features you request in the plugin, such as saving form submissions to a Google Sheet you choose.

3. Google APIs and scopes we request

The plugin requests only the access it needs:

  1. https://www.googleapis.com/auth/spreadsheets: lets the plugin read, create, and update cells in the Google Sheets you choose, so it can write your form submissions to a sheet and show tab names for selection.
  2. https://www.googleapis.com/auth/drive.file: lets the plugin access only the spreadsheets that it creates or that you explicitly select with the Google file picker. The plugin cannot see your other Drive files.
  3. openid and https://www.googleapis.com/auth/userinfo.email: used only to display the email address of the connected Google account.
 

You can review and remove these permissions at any time at https://myaccount.google.com/permissions.

4. Google user data: Limited Use disclosure

PluginsCafe’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular:

  • We use Google user data only to provide and improve the user-facing features of the plugin.
  • We do not sell Google user data.
  • We do not use Google user data for advertising, including retargeting or interest-based ads.
  • We do not use Google user data to develop, improve, or train generative AI or machine learning models.
  • We do not transfer Google user data to others, except as needed to provide the feature you requested, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to you.
  • No human reads your Google user data unless you give us explicit permission, it is necessary for security or abuse investigation, or the law requires it.

5. How Google sign-in works and where data is stored

To complete Google sign-in, you are redirected through our authentication server at pluginscafe.com. This server receives the authorization code from Google, exchanges it for tokens using our protected client credentials, and processes token refresh requests. It passes the tokens to your website and does not store them.

Your access token, refresh token, authorization data, connected email, and spreadsheet names and IDs are stored in your own website’s database. Your form submission data is sent directly from your website to your Google Sheet and is not stored on our servers. As the site owner, you control the data stored on your website.

6. Data security

We use HTTPS to protect data in transit and keep our client credentials only on our server, never inside the plugin. We review our security practices regularly. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

7. Data retention and deletion

  • Disconnect anytime from the plugin settings. This removes the stored Google tokens and connected account details from your website’s database.
  • Revoke access at any time at https://myaccount.google.com/permissions.
  • Request deletion of any personal information we hold by emailing support@pluginscafe.com. We will respond within 30 days.

 

We keep website and account information only as long as needed to provide the Service, meet legal and accounting obligations, and resolve disputes.

8. Sharing of information

We do not sell or rent your personal information. We share information only with service providers that help us operate our business (such as hosting, payment processing, and email delivery), under appropriate confidentiality obligations, and where required by law.

9. Communications

Where permitted by law, we may send informational or promotional emails. You can opt out using the unsubscribe link in any email. We may still send service messages about your account, orders, or support requests.

10. Third-party links

This policy applies only to our website and plugins. We are not responsible for the privacy practices of other websites we link to.

11. Children

Our Service is not directed to children under 13, and we do not knowingly collect their personal information. If you are under 18, you must have a parent or guardian’s consent before submitting personal information.

12. Your rights

Depending on where you live, you may have the right to access, correct, delete, or restrict use of your personal information. To exercise these rights, contact us at support@pluginscafe.com.

13. Changes to this policy

We may update this policy from time to time. We will post the new version here with a new “Last updated” date, and we will notify you of material changes through our website or by email.

14. Contact us