Privacy Policy

1. Information We Collect

We may collect personal information directly from users, automatically through our website, and from third-party service providers involved in operating our store.

Personal Information

When you create an account, purchase a theme, or contact us, we may collect:

• Full name and username.
• Email address.
• Account registration information.
• Billing details you save at checkout (name, company, address, city, postal code, country).
• Order and transaction details.
• Customer support communications and support tickets.
• Other information you voluntarily provide.

Website and Usage Information

When you access our website, we may automatically collect:

• Internet Protocol (IP) address.
• Browser type and version.
• Device type and operating system.
• Pages visited and features accessed.
• Date and time of visits.
• Login and account activity.
• Cart contents and purchase history.
• Diagnostic information, error reports, and security logs.

This information helps us maintain store functionality, improve performance, and protect our Services against misuse.

License Activation Information

When you activate a purchased theme on a website, the theme contacts our activation service and we process:

• Your license key.
• The address (URL) of the website where the theme is activated.
• Activation and verification dates.
• A security token for that website (stored only as a one-way hash).

This information is used to provide up to five website activations per purchase, to show your activated websites in your account, and to prevent misuse of license keys.

2. How We Use Your Information

We may use collected information for the following purposes:

• Creating and managing user accounts.
• Processing purchases and delivering themes, downloads and license keys.
• Managing license activations.
• Providing updates and product support.
• Responding to customer support inquiries.
• Improving website functionality and user experience.
• Monitoring store performance and resolving technical issues.
• Preventing fraud, unauthorized access, and security threats.
• Maintaining business and transaction records.
• Complying with applicable legal and regulatory obligations.
• Sending important account, purchase, security, or service-related communications.

Where required by applicable law, we will obtain consent before sending promotional or marketing communications.

Users may unsubscribe from marketing emails through the instructions included in those messages.

3. Account Information and Security

An account is needed to purchase themes and to access downloads, license keys and support.

We use account information to authenticate users, deliver purchases, manage license activations, and provide customer support.

Users are responsible for maintaining the confidentiality of their login credentials and license keys and notifying us of suspected unauthorized account activity.

We take reasonable administrative, technical, and organizational measures to protect account information against unauthorized access, disclosure, alteration, and loss.

4. Payment and Billing Information

Themezify sells its themes as one-time purchases.

When customers make purchases, payment transactions are handled by our authorized third-party payment service provider.

Paddle.com acts as Merchant of Record for our orders and processes your billing information under its own privacy policy (paddle.com/legal/privacy).

The payment provider collects and processes payment card details, billing addresses, tax details and other information necessary to complete a transaction.

Themezify may receive limited transaction information, including:

• Transaction and order reference numbers.
• Purchase dates and amounts, including tax.
• Purchased themes.
• Payment confirmation and transaction status.
• Your email address and country, needed for customer support and accounting.

We do not collect or store complete payment card numbers or card security codes on our own servers.

Payment service providers handle payment information according to their own privacy and security policies.

5. Cookies and Similar Technologies

Our website uses cookies and similar technologies to support essential functionality, maintain user sessions, keep your cart, and protect forms against misuse.

Cookies may include:

Essential Cookies: Necessary for login sessions, account security and core store functionality.

Cart Cookies: A signed cookie keeps a guest's cart for up to 30 days, and a random session identifier protects cart and checkout forms.

Payment Cookies: The secure checkout provided by our payment provider may set its own cookies.

Analytics Cookies: Used, where implemented, to understand website activity and improve the user experience.

You can manage or disable certain cookies through your browser settings.

Disabling essential cookies may prevent some website features, such as sign-in and the cart, from functioning correctly.

Where legally required, we will request consent before using non-essential cookies or similar tracking technologies.

6. Third-Party Service Providers

Themezify uses independent third-party services to run the store and deliver your purchases.

These may include providers of website hosting, payment processing (Paddle.com), email delivery, theme preview hosting and security services.

Depending on the service, limited information such as your email address, order reference or the website address where a theme is activated may be processed by a provider to complete the requested function.

We aim to share only the information reasonably necessary to provide the relevant service.

Third-party service providers may process information according to their applicable agreements, privacy policies, and legal obligations.

Themezify is an independent business and is not affiliated with, endorsed by, or sponsored by the WordPress Foundation, Automattic, ThemeForest or Envato.

7. Information Sharing and Disclosure

We do not sell personal information in exchange for money.

We may disclose limited personal information to trusted service providers where reasonably necessary to operate our business.

These providers may include:

• Website hosting and cloud infrastructure providers.
• Payment processing services (Paddle.com).
• Email delivery and communication providers.
• Website analytics and performance monitoring services.
• Customer support and security services.
• Professional advisers and regulatory authorities where legally required.

We may also disclose information when necessary to comply with applicable laws, respond to lawful requests, investigate fraudulent activity, or protect the rights and security of our business and users.

In connection with a sale or transfer of the business, information may be transferred subject to applicable privacy laws and appropriate safeguards.

We do not authorize service providers to use personal information for unrelated purposes except as permitted by applicable law or their independent legal obligations.

8. Data Storage and Retention

We retain personal information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, including maintaining user accounts, providing purchased services, handling support requests, complying with legal obligations, and resolving disputes.

Retention periods may vary depending on the type of information and the reason for processing.

For example:

• Account information may be retained while an account remains active.
• Purchase and transaction records may be retained as required for accounting, tax, and legal compliance.
• License activation records are kept while the license is in use, so your activated websites keep working.
• Technical logs may be retained for security, troubleshooting, and system maintenance.
• Customer support records may be retained to resolve inquiries and maintain appropriate business records.

You can remove items from your cart at any time, and ask us to delete or correct saved billing details.

When information is no longer required, we will take reasonable steps to delete, anonymize, or securely dispose of it.

Certain information may be retained after account closure where required by law or necessary for legitimate legal and security purposes.

9. Data Security

We take the security of user information seriously.

We use reasonable technical and organizational safeguards intended to protect personal data from unauthorized access, alteration, disclosure, destruction, or misuse.

These measures include encrypted connections (HTTPS), password hashing, verified email accounts, restricted administrative access, protected private downloads, software updates, and security monitoring.

However, no online service, electronic transmission, or data storage system can be guaranteed to be completely secure.

We encourage users to create strong passwords and avoid sharing account credentials or license keys.

If you suspect unauthorized access to your account, please contact [email protected].

10. International Data Transfers

Themezify is based in Bangladesh and provides Services to customers in different countries.

Depending on our infrastructure and service providers, personal information may be processed or stored in Bangladesh, the United States, the United Kingdom, the European Union or other jurisdictions.

Where applicable privacy laws require additional safeguards for international data transfers, we will implement appropriate measures to protect personal information.

Privacy and data protection laws may differ between jurisdictions.

11. Your Privacy Rights

Depending on your location and applicable data protection laws, you may have the right to:

• Request access to personal information we maintain about you.
• Request corrections to inaccurate or incomplete information.
• Request deletion of eligible personal information.
• Request a copy of certain personal information.
• Object to or request restrictions on certain processing activities.
• Withdraw consent where processing is based on consent.
• Opt out of certain marketing communications.
• Exercise additional rights provided by applicable privacy laws.

Some requests may be subject to legal exceptions, identity verification, or record-retention obligations.

To exercise an applicable privacy right, contact us at:

[email protected]

We will review your request and respond within the timeframe required by applicable law.

We will not unlawfully discriminate against users for exercising their privacy rights.

12. Children's Privacy

Themezify is intended for individuals and businesses building WordPress websites.

Our Services are not directed toward children under the age of 13, and we do not knowingly collect personal information from children under that age.

If we become aware that we have collected personal information from a child under 13 without appropriate authorization, we will take reasonable steps to delete the information as required by law.

Parents or guardians who believe their child has provided personal information may contact us at [email protected].

13. Third-Party Websites and External Links

Our website may contain links to third-party websites, resources, and online services, including theme previews and documentation resources.

These external websites operate independently and may have their own privacy policies, terms, and data collection practices.

Themezify is not responsible for the privacy practices or content of websites that we do not control.

We encourage users to review the privacy policies of third-party services before providing personal information.

14. Automated Processing and Analytics

Themezify uses automated systems to deliver purchases, create license keys, check license activations and protect the store against fraud and abuse.

These systems are not used to make decisions about individuals that produce legal or similarly significant effects.

15. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our products, business operations, data practices, or applicable legal requirements.

When changes are made, the revised policy will be published on this page with an updated "Last updated" date.

Where required by applicable law, we will provide additional notice or obtain consent before implementing material changes.

We encourage users to review this Privacy Policy periodically.

16. Contact Information

If you have questions about this Privacy Policy, how we process personal information, or your privacy rights, please contact us.

Data controller: Tanvir Ahmed (Individual / sole proprietor), trading as Themezify

Address: 252, Senpara Parbata, Mirpur, Dhaka-1216, Bangladesh.

Email: [email protected]

Contact Page: https://themezify.com/contact-us/