Privacy Policy

1. Who We Are

The data controller responsible for your personal data is:

Nahnu Fitness LLC
Washington State, United States
Contact: wplinkcanvas.com/support

We operate wplinkcanvas.com and publish the WP LinkCanvas WordPress plugin under the Nahnu Plugins brand.

2. Information We Collect

We collect information in the following ways:

Information you provide directly

• Purchase information - When you buy a license, SureCart collects your name, email address, billing address, and payment details on our behalf. We receive your name and email address and a record of your purchase. Your full payment card details are not stored by us.
• Newsletter sign-up - If you subscribe to our newsletter, we collect your email address and optionally your name. This data is stored in MailerPress, our self-hosted email platform, and emails are delivered via Postmark.
• Support requests - When you submit a support request through our contact form, we collect your name, email address, and the content of your message including any details you share about your WordPress environment or license.

Information collected automatically

• Analytics data - We use Matomo, a self-hosted analytics platform, to collect anonymized data about how visitors use this website. This includes pages visited, time on page, referring URLs, browser type, device type, and approximate geographic location derived from your IP address. Matomo is configured to anonymize IP addresses before storage. This data is stored on our own servers and is not shared with third parties.
• Log data - Our web server may automatically record standard log information including your IP address, browser type, pages requested, and the date and time of your visit. This data is used for security monitoring and server administration.

3. Cookies

We use only functional and analytics cookies on this website. We do not use advertising cookies, tracking pixels, or any third-party marketing cookies.

• Matomo analytics cookies - Matomo sets a first-party cookie to distinguish returning visitors and measure session activity. This cookie does not contain personally identifiable information and is not shared with any third party. Matomo is configured to respect the Do Not Track browser setting.
• Session and functional cookies - WordPress and SureCart may set session cookies necessary for the checkout process and account functionality to work correctly. These cookies expire when your browser session ends or shortly after.

You can control cookies through your browser settings. Disabling cookies may affect the functionality of the checkout process. Our Cookie Policy contains further detail on the specific cookies we use and how to manage them.

4. How We Use Your Information

We use the information we collect for the following purposes:

• To process your purchase, issue your license key, and manage your account through SureCart
• To deliver plugin updates and support during your active support period
• To send you transactional emails related to your purchase, license, or support request via Postmark
• To send you our newsletter if you have subscribed, via MailerPress and Postmark
• To respond to your support requests and improve the plugin based on reported issues
• To analyze how visitors use this website using anonymized Matomo analytics, so we can improve its content and performance
• To detect, investigate, and prevent fraudulent or unauthorized activity
• To comply with our legal obligations

For EU/EEA visitors, our legal bases for processing are: contract performance (processing your purchase), legitimate interests (analytics, security, improving the plugin), legal obligation (compliance), and consent (newsletter subscription).

5. Email Communications

We send two types of email:

• Transactional emails - Order confirmations, license keys, support responses, and renewal reminders. These are sent via Postmark and are necessary to fulfill your purchase or support request. You cannot opt out of transactional emails while you hold an active license.
• Newsletter - Updates about WP LinkCanvas, new features, and Nahnu Plugins products. You receive these only if you have explicitly subscribed. You can unsubscribe at any time using the unsubscribe link in any newsletter email or by contacting us through the form at wplinkcanvas.com/support.

All emails are sent through Postmark, a transactional email service. Postmark processes your email address on our behalf as a data processor. Newsletter subscriber data is stored in MailerPress, a self-hosted email platform running on our own infrastructure. Your email address is not sold to or shared with third-party marketing platforms.

6. Analytics

We use Matomo Analytics, a self-hosted open-source analytics platform. Unlike Google Analytics or other cloud-based analytics tools, Matomo stores all data on our own servers. Your browsing data is not sent to or processed by any third-party analytics provider.

Matomo collects anonymized data only. IP addresses are truncated before storage. We do not use Matomo to build individual user profiles or to track you across other websites. Analytics data is used solely to understand aggregate site usage patterns and improve this website.

If your browser sends a Do Not Track signal, Matomo respects it and does not track your visit.

7. Third-Party Service Providers

We share personal data with the following third-party service providers who process data on our behalf:

• SureCart - Payment processing and license management. SureCart collects and processes your payment and billing information. Their privacy policy governs how they handle that data.
• Postmark (ActiveCampaign, Inc.) - Transactional and newsletter email delivery. Postmark processes your email address to deliver emails on our behalf.
• Stripe - Payment processing via SureCart. Stripe handles card authorization and fraud prevention. Their privacy policy governs card data handling.

We do not sell your personal data to any third party. We do not share your data with advertisers, data brokers, or social media platforms.

We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe disclosure is necessary to protect the rights, property, or safety of Nahnu Fitness LLC, our customers, or others.

8. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law.

• Purchase and license records - Retained indefinitely to validate your license and provide support. You may request deletion at any time, subject to our legal obligation to retain records for tax and accounting purposes.
• Newsletter subscribers - Retained until you unsubscribe or request deletion.
• Support communications - Retained to maintain a record of reported issues and resolutions. You may request deletion of your support history at any time.
• Analytics data - Anonymized Matomo data is retained for up to 24 months then purged.
• Server logs - Retained for up to 90 days for security monitoring purposes.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data. EU/EEA residents have these rights under the GDPR. Washington State residents may have similar rights under the Washington My Health MY Data Act and other applicable state law.

• Right to access - Request a copy of the personal data we hold about you
• Right to rectification - Request correction of inaccurate or incomplete data
• Right to erasure - Request deletion of your personal data, subject to our legal obligations
• Right to restrict processing - Request that we limit how we use your data in certain circumstances
• Right to data portability - Request your data in a structured, commonly used, machine-readable format
• Right to object - Object to processing based on legitimate interests, including for direct marketing
• Right to withdraw consent - Where processing is based on consent (such as newsletter subscription), withdraw consent at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact us through the form at wplinkcanvas.com/support. We will respond within 30 days. EU/EEA residents also have the right to lodge a complaint with their local data protection authority.

10. International Data Transfers

Nahnu Fitness LLC is based in the United States. If you are located in the EU or EEA, your personal data will be transferred to and processed in the United States, which may not provide the same level of data protection as your home country.

Where we transfer data to third-party processors in the US (such as SureCart and Postmark), we rely on standard contractual clauses or other appropriate safeguards recognized under the GDPR to protect your data.

11. Data Security

We take reasonable technical and organizational measures to protect your personal data against unauthorized access, loss, or destruction. These include encrypted connections (HTTPS), access controls on systems that hold personal data, and use of reputable third-party processors with their own security practices.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. If you believe your data has been compromised, contact us immediately through the form at wplinkcanvas.com/support.

12. Children's Privacy

This website is not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. If we make material changes that affect how we use your personal data, we will make reasonable efforts to notify you, which may include a notice on this website.

Your continued use of this website after changes are posted constitutes your acceptance of the revised policy. We encourage you to review this page periodically.

14. Contact and Complaints

If you have questions about this Privacy Policy or how we handle your personal data, or if you wish to exercise any of your rights, please contact us through the form at wplinkcanvas.com/support.

EU/EEA residents who believe their data protection rights have been violated may also contact their national data protection authority. A list of EU data protection authorities is available at edpb.europa.eu.

Nahnu Fitness LLC
Washington State, United States