Local-first by design.

1. Controller and contact

Controller: Yitao Li, Chengdu, Sichuan, China. For privacy questions or requests, email liyitao459@gmail.com.

2. Product data stays with the merchant

CertaCart processes product-readiness information inside the merchant’s own WordPress installation. Product metadata, plugin settings, scans, tasks, reports, profile data, and bulk-operation history are stored in that site’s WordPress database.

CertaCart does not send product catalogue content, customer records, orders, storefront content, or CertaCart scan reports to a CertaCart-operated server. We do not operate a remote copy of the merchant’s catalogue. The merchant controls that WordPress installation and remains responsible for its own privacy notices, lawful basis, hosting, access controls, backups, and retention.

3. Freemius analytics, checkout, and licensing

CertaCart uses Freemius for optional installation analytics and, for paid users, checkout, billing, tax handling, account management, licensing, and paid-plugin updates. On first activation, an administrator can allow or skip the disclosed Free analytics connection.

If allowed, Freemius may receive administrator contact details; site URL and title; WordPress, PHP, plugin, and SDK versions; site language; activation, deactivation, or uninstall status; and installed plugin and theme names, slugs, versions, and active status. The opt-in does not include catalogue content, customer records, orders, or CertaCart scan reports.

Paid checkout and licensing require Freemius to process account, billing, tax, device, payment, transaction, license, and site-activation information. We do not receive full payment-card details. Review the official Freemius Privacy Policy and Terms of Service linked below.

4. Support information

When you contact support, we process the name, email address, license or order reference, message, and diagnostic material you choose to send. We use it to answer the request, reproduce defects, protect the service, and maintain a support history.

Do not send passwords, payment-card data, customer records, private catalogue information, or an unredacted production database. Remove or replace personal and confidential information in screenshots, exports, and logs before sending them.

5. Website and email information

Hosting and security providers may process IP address, timestamp, requested URL, browser information, and basic security logs when the website is visited. This information is used to deliver the site, prevent abuse, and diagnose failures.

At launch, CertaCart does not use advertising trackers or sell personal information. Non-essential cookies are not used unless a separate consent choice and updated disclosure are shown before they are set. Support contacts are not added to marketing lists without a separate lawful basis or consent. Freemius may send transactional purchase, license, renewal, cancellation, and refund messages.

6. Why information is processed

Depending on the context and applicable law, processing is based on performance of a contract for paid access, licensing, updates, and support; legitimate interests in operating and securing the product; consent where optional analytics or marketing requires it; and compliance with legal, tax, accounting, fraud-prevention, and dispute obligations.

7. Sharing and retention

Information is shared only as needed with providers that host the public site or email, provide support tooling, protect the service, or process licensing and transactions. It may also be disclosed when required by law, to protect rights and safety, or as part of a business transfer subject to appropriate safeguards. Personal information is not sold or rented.

Product data in WordPress remains under the merchant’s control. CertaCart’s delete-on-uninstall option is off by default and may be enabled before uninstalling. Routine web security logs are normally retained for up to 30 days. Support records are normally retained for up to 24 months after closure, then deleted or anonymized unless an active issue or legal obligation requires longer. Billing, tax, transaction, and license records are retained by Freemius under its policies and legal obligations.

8. International transfers and rights

Service providers may process information outside your country. Where required, the relevant provider or controller uses recognized transfer mechanisms and safeguards. Review Freemius’s privacy policy for processing associated with checkout, licensing, and optional analytics.

Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing; receive a portable copy; withdraw consent; or complain to a data-protection authority. Withdrawing consent does not affect earlier lawful processing. For data stored only in a WordPress site, contact that site’s operator. For Freemius account, payment, or license data, use Freemius’s privacy request process.

9. Security, children, and changes

Reasonable technical and organizational measures are used for the information handled, but no internet service or storage system is completely secure. Report a suspected vulnerability privately to liyitao459@gmail.com.

CertaCart is a business product and is not directed to children. This policy may be updated when the product, providers, or legal requirements change. The updated effective date will be posted here, with additional notice where a change materially affects processing.

Freemius policies

For checkout, licensing, and optional analytics information processed by Freemius, review the official Freemius Privacy Policy and Freemius Terms of Service.