--- title: "Privacy Policy" id: "27724" type: "page" slug: "privacy-policy" published_at: "2025-12-08T17:14:33+00:00" modified_at: "2026-08-10T13:28:00+00:00" url: "https://purethemes.net/privacy-policy/" markdown_url: "https://purethemes.net/privacy-policy.md" excerpt: "This privacy policy describes how your personal information is collected, used, and shared when you visit or make a purchase from https://purethemes.net (“the site”, “we”, “us”, or “PureThemes”). Last Updated: August 2026 Who we are We’re a WordPress theme and..." --- This privacy policy describes how your personal information is collected, used, and shared when you visit or make a purchase from [https://purethemes.net](https://purethemes.net) (“the site”, “we”, “us”, or “PureThemes”). **Last Updated: August 2026** ## Who we are We’re a WordPress theme and plugin business. Our website address is [https://purethemes.net](https://purethemes.net) . We develop and sell WordPress themes (Listeo, WorkScout) and plugins (PurioChat Pro, Listing Data Importer, Listeo Booking Plus, Listeo Monetization Plus). ## What personal data we collect and why we collect it ### Contact forms When visitors contact us via our contact forms, we collect the data shown in the form to reply to your enquiry or provide support for our products. Support tickets are stored in HelpScout, a third-party help desk service. We do not share this information with other third parties or use it for marketing purposes. ### **Trial Requests** When you request a product trial via our trial request form, we collect your email address and website domain. This data is used to generate and track temporary trial licenses (valid for 3 days). We store this information to enforce our one-trial-per-email policy and to follow up regarding your trial experience. Trial request data is retained indefinitely to prevent duplicate trial requests. ### AI Chatbot on this site We use PurioChat Pro on this website. Messages and relevant chat context are sent to the configured AI provider to generate a response. Chat history and related technical data, including the page URL and IP address, are stored on this WordPress site. The configured retention period is 90 days, with deletion performed by scheduled WordPress cleanup. We do not add account or license identifiers to model requests, but submitted content may itself contain personal data. ### Purio Cloud “No API Key” access When a WordPress administrator enables Purio Cloud (“No API Key” access), PureThemes processes the administrator’s email address, website domain, license/account identifiers, plan, usage, credit and billing records, related timestamps, and technical request data. We use this information to authenticate and provide the service, manage credits and payments, enforce limits, secure the service, and prevent abuse. We do not use it for marketing. Prompts, chat context, tool results, and text submitted for embeddings are sent over HTTPS through [Cloudflare](https://www.cloudflare.com/privacypolicy/) and Cloudflare AI Gateway to [OpenRouter](https://openrouter.ai/privacy/) and the underlying AI model provider. The gateway does not forward the administrator’s email, website domain, account ID, or license key as provider metadata. Request content may nevertheless contain personal or website data supplied by visitors, the site owner, or connected tools. The gateway does not centrally store raw prompts or embeddings. It stores account, usage, credit, billing and technical records, cryptographic request hashes and, for Trial and Pro chat requests, a temporary response cache for safe retries and duplicate-charge prevention. Cloudflare AI Gateway payload logging is disabled, although technical metadata may still be logged. OpenRouter and model providers process requests according to their privacy and retention policies. The customer website owner decides what visitor content is submitted and is responsible for informing visitors and establishing an appropriate legal basis. PureThemes processes that content to provide Purio Cloud and separately manages its account, billing, security and abuse-prevention records. Managed access can be disabled in the plugin. Privacy requests can be sent to [[email protected]](/cdn-cgi/l/email-protection#13606663637c61675363666176677b767e76603d7d7667) ; records required for legal, billing or fraud-prevention purposes may still be retained. ### Sensitive data in Purio Cloud Purio Cloud is not designed to process passwords, payment card details, government identifiers, health or biometric data, or other special-category personal data. Do not submit such data unless the processing has been expressly agreed and appropriate legal and security safeguards are in place. ### Cookies We use cookies for: - Essential site functionality - Analytics (see Analytics section below) - Language preferences ### Embedded third-party content Articles on this site may include embedded content (videos, images, etc.). Embedded content from other websites behaves as if you visited that website directly. These websites may collect data about you, use cookies, and monitor your interaction with the embedded content. ### Analytics We use Google Analytics and Plausible to understand how visitors use our site. This service collects anonymous information including time of visit, pages visited, browser type, and device information. This data cannot be traced back to you personally. ### Order information When you purchase a product, your payment is processed by Dodo Payments, Polar, Paddle, or Envato, depending on the product purchased. We do not store your payment card or bank account details. **In our licensing system, we store:** - Purchase ID - Customer name - Email address - License key We use this information to verify purchases, issue and manage licenses, deliver products, prevent fraud, and provide customer support. Please review the relevant payment provider’s privacy policy for information about how it processes your payment data. **We do not store your complete payment details. Payment processing is handled by third-party providers:** - [Dodo Payments](https://dodopayments.com/privacy-policy) - [Polar.sh](https://polar.sh/) - [Paddle](https://www.paddle.com/legal/privacy) - [Envato Pty Ltd](https://www.envato.com/privacy/) **The processor used depends on the product purchased.**We store only your email address and license key to deliver your purchase and provide support. Please review the respective privacy policies of these providers for information on how they handle your payment data. ### License activation When you activate a premium product with your license key, we collect: - Your website URL - Your license key - Your email address This data is stored to track activation limits according to your license terms. ## Legal Basis for Processing We process your personal data based on the following legal grounds: - **Contract performance**: Processing necessary to fulfill your purchase, deliver products, provide support, manage your license, and provide Purio Cloud account, credit, and payment services - **Legitimate interests**: Processing necessary to improve and secure our services, meter usage, and prevent fraud and abuse (applies to: analytics, service security, and Purio Cloud usage controls) - **Consent**: Processing based on your explicit consent where applicable (applies to: non-essential cookies) - **Legal obligation**: Processing necessary to comply with legal requirements such as tax and accounting regulations (applies to: transaction records) You may withdraw consent at any time by contacting us at [[email protected]](/cdn-cgi/l/email-protection#acdfd9dcdcc3ded8ecdcd9dec9d8c4c9c1c9df82c2c9d8) or by adjusting your cookie preferences. ## Who we share your data with We do not sell or give away your personal information. We share information only in these circumstances: - **Payment Processors**: Dodo Payments, Paddle, or Envato process your payments. They receive only the information necessary to complete your transaction. - **Support**: HelpScout stores support tickets and related correspondence. - **Infrastructure and AI providers**: Cloudflare processes Purio Cloud gateway traffic, service state, and technical metadata. OpenRouter and the underlying model provider process the content needed to generate responses or embeddings. See our current [Purio Cloud subprocessors](https://purethemes.net/subprocessors/) . - **Legal Requests**: We may disclose information in response to court orders or governmental requests. - **Business Transfers**: In case of merger or acquisition, user information may be transferred, but this Privacy Policy would continue to apply. ## How long we retain your data - Order details: Retained by payment processors (Dodo, Paddle, Envato) according to their retention policies - Account information (email, license key): As long as necessary for license management and support, unless you request deletion - Support tickets: Retained in HelpScout according to their retention policies - Chatbot conversations: 30 days (auto-deleted) - Analytics data: Aggregated and anonymized data retained for analytical purposes - Tax and accounting records: Retained for the period required by applicable law (typically 5-7 years) - **Payment information:** Retained by Dodo Payments, Paddle, or Envato according to the applicable provider’s retention policy. - **Purchase and licensing information (purchase ID, name, email address, and license key):** Retained for as long as necessary to manage the license, verify the purchase, provide support, and meet applicable legal obligations. You may request deletion, subject to information we are legally required to retain. - **Purio Cloud account, usage, and billing records:** Retained while managed access is active and as needed for billing, fraud prevention, support, and legal obligations. - **Purio Cloud response retry cache:** Retained temporarily to handle safe retries and prevent duplicate charges. Expired entries are removed during subsequent account maintenance. ## Your rights over your data Under GDPR and other applicable data protection laws, you have the right to: - **Access**: Request an export of personal data we hold about you - **Rectification**: Correct inaccurate personal data - **Erasure**: Request deletion of your personal data (except data we must retain for legal/accounting purposes) - **Portability**: Receive your data in a portable format - **Object**: Object to processing of your personal data based on legitimate interests - **Withdraw consent**: Withdraw previously given consent at any time - **Lodge a complaint**: File a complaint with your local data protection authority. In Poland, this is the President of the Personal Data Protection Office (UODO) at [uodo.gov.pl](https://uodo.gov.pl) To exercise these rights, contact us at [[email protected]](/cdn-cgi/l/email-protection#43303633332c31370333363126372b262e26306d2d2637) . We will respond to your request within 30 days. ## Cookie Management You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified before a cookie is stored. Please note that disabling cookies may affect website functionality. To manage your cookie preferences on this site, you can adjust settings in your browser or use our cookie consent banner when available. For detailed instructions on managing cookies, refer to your browser’s help documentation. ## Where your data is sent - Payment information: Processed by Dodo Payments, Paddle, or Envato (depending on product) - Support tickets: Stored in HelpScout (USA) - AI content: Processed by Cloudflare, OpenRouter, and the underlying model provider. Processing locations depend on the provider and may be outside the EEA. - Analytics: Google Analytics (USA), Plausible (EU) For transfers outside the EEA, where required, we use or rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses. ## Children’s Privacy Our products and services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you are under 18, please do not provide any personal information through our website. If we learn that we have collected personal data from a child under 18, we will delete that information promptly. ## Third-Party Links Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit. ## Changes to This Policy We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by posting a notice on our website and updating the “Last Updated” date at the top of this policy. We encourage you to review this page periodically. Your continued use of our services after changes constitutes acceptance of the updated policy. ## Contact information For privacy-related questions or to exercise your data protection rights, contact us at [[email protected]](/cdn-cgi/l/email-protection#cab9bfbabaa5b8be8ababfb8afbea2afa7afb9e4a4afbe) .