1. Who We Are
Malware Shield WP provides WordPress security software, licensing, monitoring and support services. The business identity and privacy contact are shown at the bottom of this page.
2. Information You Provide
We may collect your name, email address, account credentials, business details, license information, package selection, website/domain details, support messages, migration requests and information you choose to send through forms or support conversations.
3. Website and Plugin Telemetry
When a licensed website connects to the SaaS platform, we may receive its site URL and domain, plugin/WordPress/PHP versions, license key or license identifier, site fingerprint, IP address, heartbeat time, security score, finding counts and enabled protection status.
Routine monitoring is designed to receive summary telemetry, not the contents of website files or databases. Content may be shared only when you intentionally include it in a support request or authorised service engagement.
4. Technical and Usage Data
Our servers may record IP address, browser information, requested pages, timestamps, session activity, authentication events, API requests and error/security logs. We use this information to operate, secure, diagnose and improve the service.
5. How We Use Information
- Create and authenticate accounts.
- Activate, validate and manage licenses and site limits.
- Provide monitoring, updates, support, migrations and security services.
- Send service, security, ticket, billing and account communications.
- Detect abuse, fraud, unauthorised access and technical faults.
- Meet legal obligations and enforce service terms.
- Improve reliability, usability and product security.
6. Legal Reasons for Processing
Depending on your location and the context, we process information to perform our contract with you, pursue legitimate interests in operating and securing the service, comply with legal obligations, protect users and systems, or act with your consent where consent is required.
7. Payments
We may store package, billing-cycle and payment-status metadata. If a third-party payment provider is used, that provider processes payment credentials under its own privacy terms. We do not intend to store full card numbers in the Malware Shield WP database.
8. Sharing and Service Providers
We may share information with hosting, infrastructure, email, payment, backup, analytics or professional service providers only as reasonably necessary to operate the service. We may also disclose information when required by law, to protect rights and security, or as part of a business transfer.
We do not sell personal information.
9. International Processing
Service providers or customers may operate in different countries. Where information is transferred internationally, we use reasonable contractual, technical and organisational safeguards appropriate to the service and applicable requirements.
10. Retention
We retain account and license records while the account or commercial relationship remains active and for a reasonable period afterward for support, security, tax, dispute and legal purposes. Monitoring snapshots and technical logs may be retained for shorter operational periods. Support records may be retained while needed to document and resolve service issues.
11. Security
We use access controls, password hashing, transport security, logging, limited administrative access and other reasonable safeguards. No online service can guarantee absolute security. You are responsible for protecting your account credentials and promptly reporting suspected compromise.
12. Cookies and Sessions
The admin and client portals use essential session cookies or similar storage to keep users authenticated, protect forms and remember interface preferences such as theme mode. Additional analytics or marketing cookies should be disclosed and, where required, offered with consent before being enabled.
13. Your Privacy Choices and Rights
Subject to applicable law, you may ask to access, correct, delete, restrict or receive a copy of personal information, object to certain processing, withdraw consent, or complain to a relevant privacy authority. Some records may need to be retained for security, contractual or legal reasons.
14. Children
The service is intended for website owners, developers, agencies and businesses, not children. We do not knowingly collect personal information from children through customer account registration.
15. Policy Changes and Contact
We may update this policy when the service, providers or legal requirements change. The latest effective date appears at the top. Privacy questions and rights requests can be sent to the contact email shown below.