Privacy Policy – Time-Based Offers for WooCommerce

This Privacy Policy explains what information Time-Based Offers for WooCommerce ("we", "us") collects when you use our website and the Time-Based Offers for WooCommerce plugin, why we need it, and how long we keep it. We only collect what is needed to run the service, and we never sell your data.

1. How our service works

Time-Based Offers for WooCommerce is a connected service. The plugin you install on your store works together with your Time-Based Offers account on our servers. Your account keeps your plan, license and discount rules, and our servers confirm the discounts your shoppers claim. This is what keeps your rules safe, applies the right features for your plan, and protects your store from misuse of discounts.

2. Information you give us on our website

Account details: your name, email address and password. Passwords are stored in a scrambled (hashed) form, so nobody — including us — can read them.
Plan and license details: your plan (Free Trial or Pro), trial start and end dates, license key, number of licensed websites and the website addresses connected to your license.
Purchase details: amount, currency, date, billing name, billing country, payment method type (for example "Card" or "PayPal") and the transaction reference. Card and bank details are handled by our payment provider, Paddle, and never reach our servers.
Messages: anything you send us through the contact form, such as your name, email and message.

3. Information the plugin sends from your store

When the plugin is active, your store communicates with our servers over an encrypted (HTTPS) connection:

Account connection — when you save your license key or trial email, about once a day, and when your rules are synced (every few hours): your license key or trial email, your website address, the plugin version and your store time zone.
Your discount rules — when you create, edit or delete a rule: the rule settings (discount amount, timing, popup text, schedule, second offer) together with the product or category ID and name it applies to. Your rules are stored in your account so they are safe, work with your plan, and are restored if you reinstall the plugin or move your site.
Discount claims — when a shopper clicks "Claim Discount": the product ID, the product’s category IDs, the rule used, the discount given, the time, and an anonymous shopper code. The shopper code is a one-way scrambled version of the WooCommerce session ID; it cannot be turned back into a name, email or any other personal detail, and is used only to make sure a discount is used by the shopper who claimed it and to prevent abuse.

What we do not receive: your shoppers’ names, email addresses, postal addresses, phone numbers, order contents, order totals or payment details, and your customer lists. Your discount statistics (impressions, claims, purchases and revenue shown in the plugin dashboard) stay in your own WordPress database.

4. Technical information

Like almost every website, our servers automatically record basic technical details for each request — such as IP address, browser type, date and time — in standard server logs. We use these only for security, troubleshooting and preventing abuse.

5. How we use information

To create and manage your account, free trial and Pro license
To activate the plugin on your licensed websites and apply the features of your plan
To store and sync your discount rules
To confirm discounts claimed on your store and protect against misuse
To process payments, provide license keys, invoices and plugin updates
To answer your questions and provide support
To keep our service secure and improve its reliability

We do not use your information for advertising and we do not build shopper profiles.

6. Payments

Payments are processed by Paddle, who acts as our reseller and merchant of record. Paddle collects the payment and billing details needed for your purchase and handles taxes and invoices. Paddle’s own privacy policy applies to the information they process.

7. Who we share information with

We do not sell or rent personal data. We share information only with:

Paddle, to process payments;
our hosting provider, which stores our website and database on our behalf;
authorities, only when we are legally required to.

8. How long we keep information

Account, license and connected websites: while your account is open.
Discount rules: until you delete them or close your account.
Discount claim records: 90 days, then deleted automatically.
Purchase records: as long as tax and accounting laws require (usually several years), even after an account is closed.
Server logs: a short period for security purposes.

9. How we protect information

All communication between your store, your browser and our servers is encrypted. Passwords are stored hashed, access to our systems is restricted, and the rules and discounts sent to your store are digitally signed so they cannot be changed on the way.

10. Your choices and rights

You can see your account, plan and purchases in My Account on our website, and view or change your rules in the plugin.
You can ask us for a copy of your data, or to correct or delete it, by contacting us. Deleting your account also deletes your discount rules and deactivates your license.
If you deactivate or uninstall the plugin, it stops sending information. Uninstalling also removes the plugin’s data from your WordPress database.

Depending on where you live (for example in the EU/UK under the GDPR), you may have additional rights, including the right to object to processing and to complain to your local data protection authority.

11. For store owners: your shoppers

If you use the plugin, you remain responsible for your own store’s privacy policy. We recommend adding a short line such as:

“Our store uses Time-Based Offers for WooCommerce to show limited-time discount offers. When you claim an offer, the product and an anonymous session code are sent to Time-Based Offers for WooCommerce to confirm the discount. No personal details are shared.”

12. Cookies and local storage

Our website uses one strictly necessary, secure session cookie to keep you signed in. It contains only a random code (no personal details), cannot be read by scripts, and expires after 1 day without activity or 7 days after login. We keep the time, IP address and browser type of each sign-in so you and we can spot misuse; this is deleted when the session ends. Paddle may set cookies needed for secure checkout.
The plugin uses the standard WooCommerce session cookie on your store to remember a shopper’s claimed discount and its countdown timer. It does not use tracking or advertising cookies.

13. Children

Our service is intended for businesses and is not directed at children under 16.

14. Changes to this policy

We may update this policy when our service changes. We will change the date below, and for important changes we will let account holders know by email or in the plugin.

15. Contact

For any privacy question or request, contact us through the support form on our website. We aim to reply within 30 days.