1. Information we collect
This Privacy Policy explains how GoScript collects, uses, stores, and protects personal information when you use our website, Customer Portal, software products, licensing services, trials, purchases, downloads, documentation, and support services.
We collect information reasonably necessary to provide, secure, support, and improve GoScript products and services.
Account information
When you create or set up a GoScript account, we may process your name, email address, account status, password information in hashed form, account creation and activity timestamps, and password-reset or account-setup information. Passwords are not stored in plaintext. The Customer Portal currently allows customers to change their password but does not provide self-service editing of account name or email address.
Purchase, license, and trial information
When you purchase or renew a license, we may receive and store the email address used at checkout, product purchased, purchase or renewal type, purchase date, amount and currency, associated customer account and license, payment and fulfillment status, and Stripe-related transaction identifiers needed to verify and process the purchase. GoScript does not collect or store payment-card details.
To issue and manage licenses, we may process license type and status, start and expiry dates, activation limits and usage, the associated product and customer, WordPress site host information used for activation, installation and activation identifiers, protected activation credentials, and license verification or deactivation events. Full license keys are protected and are only revealed to the authenticated account owner through the Customer Portal.
If you start a free trial, we may process your customer account, the product being trialed, trial start and expiry dates, activation limit and activation information, whether a trial has already been claimed, and host-use information needed to prevent repeated trial use on the same product/site combination.
Downloads, support, and technical information
When you download a plugin, we may process the information needed to confirm that you are signed in, the account owns the license, the license has download entitlement, and which product and current release is being downloaded. Downloads are delivered privately through the authenticated Customer Portal rather than public download links.
If you contact Support, we may receive information you choose to provide, including your name or email address, plugin and license details, WordPress or WooCommerce versions, website URL, screenshots, technical details, a description of the issue, and correspondence between you and GoScript. Please avoid sending passwords, payment-card details, or other sensitive information unless specifically required and appropriate.
When you access GoScript websites or services, we may automatically process limited technical and security information such as IP address, browser and device information, request timestamps, session information, security-related request data, and login, recovery, and rate-limit events. Some of this information may be processed temporarily rather than retained indefinitely.
2. How we use personal information
We may use personal information to create and manage customer accounts; authenticate customers; process account setup and password recovery; fulfill purchases and renewals; issue, activate, verify, and deactivate licenses; provide downloads; manage trials; send transactional emails; provide support; prevent fraud, abuse, unauthorized access, and license misuse; maintain the security and reliability of our systems; comply with legal, accounting, and regulatory obligations; enforce our Terms of Service; investigate disputes or technical issues; and improve our products and customer experience.
We do not use customer wishlist, recommendation, or purchase-analytics data from GoScript plugins for GoScript marketing analytics unless explicitly stated otherwise.
3. Legal bases for processing
If you are located in the European Economic Area, United Kingdom, or another jurisdiction that requires a legal basis for processing, GoScript may rely on one or more of the following.
Contract
We process information where necessary to provide products or services you have requested, including customer accounts, purchases, licenses, trials, downloads, renewals, and support.
Legitimate interests
We may process limited information where necessary for legitimate business purposes, including fraud prevention, security, abuse prevention, service reliability, customer support, maintaining licensing systems, and defending legal claims. We balance these interests against your privacy rights.
Legal obligations and consent
We may process and retain information where required to comply with tax, accounting, legal, regulatory, or other obligations. Where required by law, we may rely on your consent for specific processing activities. You may withdraw consent where processing is based on consent, without affecting processing already carried out lawfully.
4. Payments and Stripe
GoScript uses Stripe to process payments. When you purchase or renew a license, payment information is submitted directly to Stripe through Stripe-hosted payment flows. GoScript does not store your full payment-card details.
Stripe may process personal information according to its own privacy policy and legal obligations. GoScript receives only the information necessary to verify payment, associate the purchase with the appropriate account or license, and record purchase history. Stripe, not GoScript, issues payment receipts and invoices.
5. Customer Portal accounts
The GoScript Customer Portal stores information needed to provide account access and customer services. This may include account email, optional name, password hash, account status and timestamps, associated licenses, purchase history, downloads, trial status, and activation usage.
Account recovery is designed not to reveal whether a particular email address belongs to a GoScript account. For active accounts, recovery may send a password-reset message. For accounts awaiting setup after a purchase, recovery may send new account-setup instructions.
6. License activation data
GoScript plugins communicate with the GoScript licensing service when activating, checking, or deactivating a license. This communication may include product identifier, site URL or normalized host, installation identifier, license credentials, activation identifier, and technical status information required to evaluate the license.
The licensing service uses this information to verify whether a license is valid, enforce activation limits, determine runtime entitlement, manage activation and deactivation, and prevent trial abuse. The plugin does not need to continuously send the full license key after successful activation.
7. Plugin analytics and customer data
Some GoScript plugins process analytics or customer-related information inside the customer’s own WordPress installation. This plugin-level data is generally processed locally on the merchant’s website and is separate from the GoScript Customer Portal and licensing platform.
Depending on the plugin, local data may include recommendation activity, attributed purchases, wishlist activity, wishlist demand, reporting summaries, and local customer-product relationships. GoScript plugins are designed so that recommendation, reporting, wishlist, and related merchant analytics data are not sent to GoScript merely because the plugin is licensed. Licensing requests remain separate and transmit only the information needed for licensing functionality.
8. Transactional emails
GoScript may send transactional emails related to your use of the service, including account setup, password reset, purchase confirmation or license issuance, license renewal, trial start, trial-expiry reminders, trial expiration, and account or license-related notices. These emails are operational rather than marketing messages.
Email delivery may use third-party email infrastructure or SMTP services necessary to deliver the message.
10. Analytics, advertising, and non-essential cookies
GoScript may use analytics, advertising, or similar technologies to understand how visitors use our public website, measure the effectiveness of marketing, and improve our products and website experience. These technologies may include web analytics platforms, advertising conversion tracking, advertising pixels or tags, campaign attribution tools, and similar measurement technologies.
Depending on the services used, they may process pages visited, referring website or campaign, approximate location derived from IP address, browser and device information, interactions with website pages, conversion events such as visiting a product page, starting a trial, or completing a purchase, and advertising or analytics identifiers.
Consent and providers
Where required by applicable law, GoScript will not place or access non-essential analytics or advertising cookies until you have provided the required consent. Where consent controls are available, you may accept or reject non-essential cookies, choose categories, change your preferences later, or withdraw consent previously given. Strictly necessary cookies used for security, authentication, account sessions, or other essential functionality may operate without consent where permitted by law.
If GoScript enables third-party analytics or advertising services, those providers may receive limited technical and usage information necessary to provide their services. They may act as independent controllers, processors, or both depending on the service and circumstances, and their handling of information is also governed by their own privacy policies. If we use services such as Google Analytics, Google Ads, Meta Pixel, or similar technologies, this Policy and, where appropriate, the cookie-consent interface may identify relevant providers and purposes more specifically.
Advertising measurement
Where advertising measurement is enabled, GoScript may use conversion tracking to understand whether an advertisement led to activity such as visiting a product page, starting a trial, beginning or completing a purchase, or other relevant website interactions. This information may be used to measure advertising performance and improve campaign management.
GoScript does not intend to use advertising technologies to expose license keys, passwords, customer-support content, private Customer Portal information, or other sensitive account data to advertising providers.
12. International data transfers
Depending on where GoScript and its service providers operate, personal information may be processed in countries other than the country where you live. Where required by applicable law, we will use appropriate safeguards for international transfers, including contractual protections, recognized adequacy mechanisms, or other lawful transfer mechanisms.
13. Data retention
We keep personal information only for as long as reasonably necessary for the purposes described in this Policy. Retention periods may vary depending on the type of information.
- Account information may be retained while an account remains active and for a reasonable period afterward.
- Purchase and payment records may be retained as required for tax, accounting, fraud-prevention, or legal purposes.
- License information may be retained while required to manage license history, activations, renewals, and entitlement.
- Support communications may be retained where useful for support history, dispute resolution, or legal obligations.
- Expired or superseded password-reset and account-setup tokens are removed or rendered unusable.
- Technical security records may be kept for a limited period appropriate to their purpose.
Some plugin-level analytics data has product-specific retention rules documented within the applicable plugin documentation.
14. Security
GoScript uses technical and organizational measures intended to protect personal information from unauthorized access, loss, misuse, alteration, or disclosure. These measures include, where applicable, encrypted or securely hashed credentials, protected customer sessions, secure cookies, CSRF protection, rate limiting, access controls, private download storage, encrypted license keys, protected activation credentials, Stripe webhook verification, and restricted administrative access.
No internet-based service can guarantee absolute security, but we work to apply reasonable protections appropriate to the information we process.
15. Your privacy rights
Depending on where you live, you may have rights relating to your personal information, including the right to request access, correction, deletion, objection to certain processing, restriction of processing, portability of certain information, withdrawal of consent, or to lodge a complaint with a data-protection authority.
These rights may be subject to legal limitations or exceptions. For example, we may need to retain certain purchase or transaction records to comply with legal, accounting, fraud-prevention, or tax requirements. To make a privacy request, contact us using the details below. We may need to verify your identity before fulfilling certain requests.
16. WordPress privacy tools
Where a GoScript plugin stores customer-related data in a WordPress installation, the plugin may integrate with WordPress personal-data export and erasure functionality. The exact data covered depends on the plugin.
For example, Advanced Wishlist may include wishlist details, saved items, private notes, priority state, saved price information, current wishlist relationships, and associated reconciliation records in WordPress privacy workflows. These operations occur on the merchant’s WordPress site rather than through the GoScript Customer Portal.
17. Children’s privacy
GoScript products and services are intended for businesses and individuals capable of entering into contracts for software products. They are not directed specifically at children. We do not knowingly seek to collect personal information from children below the minimum age required to consent to online services under applicable law. If you believe a child has provided personal information to GoScript improperly, please contact us.
18. Business transfers
If GoScript is involved in a merger, acquisition, reorganization, sale of assets, or similar business transaction, personal information may be transferred as part of that transaction. Where required, we will take reasonable steps to ensure that personal information continues to receive appropriate protection.
19. Third-party websites and services
GoScript websites and documentation may contain links to third-party websites or services. We are not responsible for the privacy practices of third parties, including Stripe, WordPress, WooCommerce, hosting providers, analytics or advertising providers, and external documentation or service websites. You should review the privacy policies of those services before providing information to them.
20. Changes to this Privacy Policy
We may update this Policy from time to time to reflect changes in our products or services, data practices, service providers, legal or regulatory developments, or security and technical changes. When we update the Policy, we will revise the Last updated date at the top of this page. Where a change is material, we may provide additional notice through the website, Customer Portal, or email where appropriate.
21. Contact
GoScript provides premium WordPress and WooCommerce plugins together with related customer-account, licensing, download, and support services. For privacy-related questions or to exercise your privacy rights, you can contact us through the GoScript Support page.
