1. Information We Collect
When you register an account or purchase software, we collect your name, email address, billing country, and IP address for transaction verification. Payment card numbers are processed directly by our PCI-DSS Level 1 certified processors (Paddle Billing or Stripe) and are never stored on UniteElements servers.
2. Software License Telemetry Principles
When an installed software codebase activates a license key or checks for updates, it transmits limited telemetry to /wp-json/uniteelements/v1/license/validate. This payload contains only:
- SHA-256 hash of your license key
- Active deployment domain name (e.g. yoursite.com)
- Software version and platform environment (e.g. PHP 8.2, WordPress 6.5)
What We NEVER Collect: We never access, transmit, or inspect your website database, customer records, visitor analytics, passwords, or transaction data. Your deployment data remains strictly sovereign to your server.
3. Data Security & Storage Architecture
All data in transit is encrypted using TLS 1.3. License keys and sensitive credentials are encrypted at rest using AES-256 encryption. We enforce least-privilege administrative access and continuous database vulnerability auditing.
4. Your Privacy Rights (GDPR & CCPA)
Regardless of your location, you have the right to access, rectify, export, or request the erasure of your personal data. To submit a data deletion or portability request, open a ticket via our Priority Support Desk. Account deletion anonymizes your order history while maintaining cryptographic validation for any perpetual licenses you hold.
