Privacy Policy

1. Who We Are

CodeCasa Studios provides the Send Email Today WordPress/WooCommerce SMTP plugin and related services. In this policy, "CodeCasa", "we", "us", and "our" mean CodeCasa Studios.

For questions about this policy or personal data, contact hello@onlinestorenotifications.com.

2. Our Role

For account, website, support, and service administration data, CodeCasa is normally the controller of that data.

For customer data sent from a WooCommerce store through the plugin, the store owner is normally the controller and CodeCasa acts as a processor or service provider. That means the store owner decides why WordPress or WooCommerce emails are sent and is responsible for giving customers appropriate privacy information.

3. Personal Data We Collect

Depending on how you use the service, we may collect and process:

• Account details such as email address, site URL, store name, and verification status.
• WooCommerce store settings, plugin settings, email templates, trigger settings, and authentication tokens.
• Customer email data such as recipient email addresses, email content, order IDs, order status events, form submission details, customer note events, password reset links, account links, and account notification details.
• Email logs such as send time, status, error messages, message IDs, subjects, and event data.
• Support communications and information you send when asking for help.
• Technical data such as IP address, browser or device information, server logs, security logs, and usage diagnostics.

4. How We Use Personal Data

We use personal data to:

• Create, verify, secure, and administer accounts.
• Provide the Send Email Today plugin and related SMTP email service.
• Send WordPress and WooCommerce emails requested by store owners, including order updates, account emails, password reset emails, form emails, admin alerts, plugin notifications, and customer note emails.
• Maintain email logs, status records, templates, and usage records.
• Prevent abuse, investigate security issues, enforce our terms, and protect the service.
• Provide support, fix issues, and improve reliability.
• Comply with legal, tax, accounting, and regulatory obligations.

5. Lawful Bases

Where applicable privacy law requires a lawful basis, those bases may include contract, legitimate interests, legal obligation, and consent where required. Our legitimate interests include operating, securing, improving, and preventing misuse of the service.

For WordPress or WooCommerce emails sent to a store's customers or users, the store owner is responsible for identifying the lawful basis for each message, including any consent needed for marketing emails if the store sends marketing outside the service.

6. Who We Share Data With

We may share personal data with:

• Email infrastructure, hosting, database, monitoring, security, and support providers.
• WordPress, WooCommerce, and related store infrastructure where needed for plugin operation.
• Professional advisers, insurers, regulators, law enforcement, courts, or authorities where legally required or necessary to protect our rights.
• A purchaser or successor if our business, assets, or service are reorganised, sold, or transferred.

We do not sell customer email data.

7. International Transfers

We and our providers may process personal data in the European Economic Area, United States, and other countries. Where required, we rely on appropriate safeguards, such as contractual protections or transfer mechanisms recognised by applicable data protection law.

8. Retention

We keep personal data only for as long as reasonably needed for the purposes described in this policy. Typical retention periods include:

• Account and service data for as long as the account is active, then for a reasonable period needed for support, legal, accounting, and fraud prevention purposes.
• Email logs and event data while the account is active and for up to 24 months afterwards unless a longer period is needed for disputes, security, abuse prevention, or legal compliance.
• Verification codes and temporary authentication data for short periods needed to complete verification or account security flows.
• Backups for a limited period according to our backup and disaster recovery processes.

9. Security

We use technical and organisational measures designed to protect personal data, including access controls, HTTPS transport, authentication, logging, provider security controls, and operational monitoring. No system is completely secure, and you must also keep your WordPress administrator account, plugin access, customer data, and email templates secure.

10. Cookies and Website Data

Our website may use basic technical cookies, server logs, and analytics or security tools to operate, protect, and improve the site. If we add optional analytics or marketing cookies, we will provide any required notice or consent controls.

11. Your Rights

Depending on your location, you may have rights to access, correct, erase, restrict, object to, or transfer your personal data. You may also have rights to withdraw consent and complain to a data protection authority.

To exercise rights relating to your CodeCasa account, contact us. To exercise rights relating to WordPress or WooCommerce emails sent by a store, contact that store first because the store normally controls why those emails were sent.

12. Children's Privacy

The service is for business use by WooCommerce store owners and administrators. It is not intended for children. Store owners must not use the service to knowingly collect or process children's personal data unless they have a lawful basis and all required safeguards.

13. Store Owner Privacy Responsibilities

If you use the plugin in your WooCommerce store, you should update your own privacy policy to explain that customer email addresses, message content, order information, account events, password reset links, form details, plugin notification data, and email logs may be processed by CodeCasa and its providers to send and manage WordPress and WooCommerce email.

14. Changes to This Policy

We may update this policy from time to time. If changes are material, we will take reasonable steps to notify users through the website, plugin, dashboard, email, or another appropriate method. The latest version will be posted on this page.

15. Complaints

If you are unhappy with how we handle personal data, you may contact your local data protection authority or privacy regulator for details.