Privacy Policy

1. Who We Are

BF Blocks is a WordPress plugin product operated by ByteFlow. Our registered address and contact details are available on our Contact page. When we refer to "BF Blocks", "we", "us", or "our", we mean ByteFlow as the data controller for your personal data.

2. What Data We Collect

We collect the following categories of personal data:

• •Account data: Name, email address, and password hash when you create an account.
• •Billing data: Payment method details are handled by Stripe and never stored on our servers. We retain your billing address and invoice history.
• •Usage data: License activations, plugin version, and WordPress environment data to support license enforcement and improve the product.
• •Communications: Any messages you send us via the contact form or email.
• •Technical data: IP address, browser type, and pages visited, collected via server logs and analytics.

3. How We Use Your Data

• •To fulfil your subscription and provide access to BF Blocks.
• •To send transactional emails (receipts, license keys, renewal reminders).
• •To send product updates and marketing emails (you can opt out at any time).
• •To improve our product based on aggregate usage patterns.
• •To comply with legal obligations.

4. Legal Basis for Processing

We process your data on the following bases: Contract (to deliver the service you paid for), Legitimate Interests (product improvement, fraud prevention, security), Legal Obligation (tax and accounting records), and Consent (marketing emails, which you may withdraw at any time).

5. Third-Party Services

We share data with the following trusted third parties:

• •Stripe — payment processing. Subject to Stripe's privacy policy.
• •Supabase — database and authentication hosting.
• •Vercel / hosting providers — website infrastructure.

We do not sell your data to third parties.

6. Data Retention

We retain account data for as long as your account is active. After account deletion, we retain billing records for 7 years to comply with tax regulations. Anonymised usage data may be retained indefinitely.

7. Your Rights

You have the right to:

• •Access the personal data we hold about you.
• •Rectification of inaccurate data.
• •Erasure ("right to be forgotten") subject to legal retention obligations.
• •Data portability — receive your data in a machine-readable format.
• •Withdraw consent for marketing at any time.
• •Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at our contact page.

8. Cookies

We use essential cookies for authentication (session cookies) and may use analytics cookies to understand how visitors use the site. You can control cookies in your browser settings.

9. Security

We use industry-standard security measures including TLS encryption, hashed passwords, and access controls. No method of transmission over the internet is 100% secure, but we take commercially reasonable precautions.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email or by posting a notice on our website. Continued use of BF Blocks after changes constitutes acceptance.

11. Contact

For any privacy-related enquiries, please contact us.