The short version
Your customers, sales, stock and staff records live in your own WooCommerce database on your own hosting. They are never sent to us and we have no way to read them.
The plugins are self-hosted. There is no cloud service behind the till, no analytics call, and no telemetry — a sale rung up on your counter is written to your database and goes nowhere else.
What we do hold
If you buy a licence, we store:
- Your email address — to send the licence key, receipts, renewal reminders and support replies.
- Your shop's domain — because a licence covers one website, and the only way to know whether it is on one website is to record which one.
- What you bought and when it renews — the order reference, the term, and whether it is current.
- A short-lived, salted hash derived from the IP address your shop checks in from. Not the address itself: a value that changes daily and cannot be reversed. It exists to notice one key being used from a dozen places, which is the only fraud signal we have.
That is the whole list. We do not store your licence key — only a one-way hash of it — which is why we can never email you an old key and can only issue a new one.
What the plugin sends
Once a day, and when you activate or remove a licence, the paid plugin asks our server whether the licence is current. That request contains the key, your shop's domain and the plugin version. Nothing else — no product data, no customer data, no sales figures.
The free plugins send nothing at all. They never contact us, and will keep working with outbound network access blocked entirely.
Who else is involved
- Paddle.com Market Ltd — Merchant of record for sales outside India. They handle the payment and hold the billing details; we never see your card.
- Razorpay Software Private Limited — Payment gateway for sales within India. They handle the payment and hold the billing details; we never see your card.
- Cloudflare — hosts this website and the licence server.
- Resend — delivers the licence key, receipts and support email.
We do not sell, rent or share your details with anyone else, and there is no advertising or tracking on this site.
How long
Licence and order records are kept while your licence is active and for seven years afterwards, because tax law in both India and the countries Paddle sells into requires it. Support email is kept for two years. The IP-derived hash is kept for thirty days.
Your rights
Ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it — email support@codeboldcommerce.com and we will answer within thirty days. Deletion is limited only by the tax records above, which we are required to keep and cannot remove on request.
If you are in the EU or UK and are not satisfied with how we have handled something, you can complain to your national data protection authority.
Cookies
This site sets no cookies and runs no analytics. Signing in to your account area sets one cookie, which keeps you signed in and does nothing else. It is removed when you sign out.
Changes
If this policy changes in a way that affects what we hold or who we share it with, we will email everyone with an active licence. The date at the bottom of this page is the last substantive change.
CodeBold IT Solutions
H-No 2-2-220/123, Street No 2, Royal Enclave, Macha Bollarum, Secunderabad, Telangana 500010, India
India
support@codeboldcommerce.com
Last updated 27 August 2026.