Legal
Privacy Policy
Profit Forge is built so that the data worth protecting never reaches us in the first place. Your order history is analysed inside your own WordPress installation and does not leave it. This policy explains the little that we do handle.
1. Who we are
Profit Forge is a product of Individual Entrepreneur Darya Avakova, Tax ID 534556558, registered at Parkent street 9, apt. 78, Mirzo Ulugbek district, Tashkent, Republic of Uzbekistan. In this policy “we” and “Avakode” mean that entity.
2. What this policy covers
It covers personal data we handle when you visit profit-forge.com, when you install the free Profit Forge plugin, when you buy and activate a Pro licence, and when you contact support. It does not govern data collected by your own WordPress site, which remains under your control and your own privacy policy.
3. What we never collect
This section comes first because it is the point of the product.
- Order data never leaves your store. Orders, customers, line items, refunds, coupons and tax lines are read, reconciled and stored inside your own WordPress database. They are not transmitted to us, and there is no code path that would.
- Findings stay local. The report, the evidence rows and the dollar amounts live in two tables inside your database and are deleted when you uninstall the plugin, unless you tick the box that keeps them.
- Gateway keys stay yours. If you connect Stripe or PayPal read-only keys, they are stored encrypted in your WordPress options and used only from your own server to call the gateway directly. We never see them.
- No advertising trackers. This website loads no analytics, no advertising pixels and no third-party scripts. It sets no cookies.
4. What we do collect
4.1 Licence data. When you activate a Pro licence, the plugin sends your site domain, plugin version, WordPress version and licence key so that we can confirm the licence is valid and deliver updates. This is the only outbound call the paid add-on makes.
4.2 Purchase data. Payments are processed by Freemius. We receive your name, email, billing country and the transaction record. We never receive or store card numbers.
4.3 Support communication. If you write to us, we keep the message, your email address and any attachments you choose to send. If you attach an export from your store, you are choosing to send it; we do not ask for one.
4.4 Optional usage counters. If you opt in, the plugin may report counters — how many scans ran, how many findings each rule produced — with no order identifiers and no amounts. This is off by default and can be switched off at any time.
4.5 Technical data. Our hosting provider records the usual server-side request data: IP address, user agent, requested path and timestamp.
5. Why we handle it
To perform the contract with you (delivering licences, updates and support), on the basis of legitimate interest (keeping the service secure and working), on the basis of your consent where we ask for it (optional counters), and to meet legal obligations (tax and accounting records).
6. Who we share it with
Freemius, for payments and licence delivery. Cloudflare, for hosting this website. We do not sell personal data, and we do not share it with advertising networks. Because order data never reaches us, there is nothing of that kind to share.
7. International transfers
Our providers operate globally, so data may be processed outside your country. Transfers from the EEA rely on Standard Contractual Clauses.
8. How long we keep it
- Purchase and tax records: 7 years, as required by law.
- Licence records: 2 years after the licence lapses.
- Support correspondence: 3 years.
- Server logs: 90 days.
- Optional counters: 2 years.
9. How we protect it
Traffic is encrypted with TLS. Access to systems holding personal data is limited to people who need it. Gateway keys, on the rare occasions they exist, live encrypted on your own server and never in our systems or logs.
10. Your rights
You may ask us for a copy of your data, ask us to correct or delete it, ask us to stop or restrict processing, ask for it in a portable format, or withdraw a consent you previously gave. Write to support@avakode.com and we will answer within 30 days. If you are in the EEA or the UK you may also complain to your national supervisory authority.
11. Children
Profit Forge is a business tool and is not directed at anyone under 16. If we learn that an account belongs to a minor, we delete it.
12. Changes
If we make a material change we will announce it here and, for licence holders, by email at least 30 days before it takes effect.
13. Contact
Email support@avakode.com, or write to Individual Entrepreneur Darya Avakova, Parkent street 9, apt. 78, Mirzo Ulugbek district, Tashkent, Republic of Uzbekistan.