Who we are
Smart Loyalty is the trading name of Husnain Khalid, based in Dubai, United Arab Emirates. This policy explains how we handle personal data when you visit this website, buy a licence, or activate and update the plugin. If you have a question about this policy or want to exercise any of the rights below, contact us at
hello@hifidevs.com.
What this policy covers
This policy covers this website (the pages you’re reading now) and the licensing service the plugin talks to when you activate it or check for updates. It does not cover what happens on a store that has installed the plugin: your customers’ points, vouchers and referral data live on that store’s own WordPress database, under that store owner’s privacy policy, and the plugin never sends them to us or to our payment processor. The plugin ships its own WordPress personal-data exporter and eraser so store owners can answer their customers’ privacy requests directly, without contacting us.
Information we collect
- Browsing this site. Standard web server logs (IP address, browser, pages visited, referring page). We don’t load analytics or ad scripts on this site.
- Buying on this site. Purchases are processed by Stripe, which collects your name, email address, billing details and payment details under its own privacy policy, and shares with us your name, email address, the plan you bought and your payment status. We never see or store your full card number.
- Contacting support. Whatever you send us by email: usually your email address, licence key and a description of the problem, including log excerpts if you attach them.
Licence and update checks
When you activate your licence key, the plugin sends our licensing service the licence key, your site address, the name and email address of the admin who activates it, and basic technical details such as the WordPress, PHP and plugin versions and the site language. These are used to validate the licence and deliver updates, and are checked again from time to time and whenever WordPress checks for plugin updates. The service does not receive your customers’ data. Your licence key is stored on your own site, and removing the plugin stops these check-ins.
Cookies
This site uses only the cookies needed to make them work: WooCommerce’s cart and session cookies, and a login cookie if you sign in. We don’t use advertising or cross-site tracking cookies. When you check out, Stripe may set its own cookies to process the payment and prevent fraud, under its own policy.
How we use information
We use the information above to: process and deliver your purchase; validate your licence and offer updates; respond to support requests; send licence, receipt and update-related email; keep the site secure and diagnose problems; and meet our accounting and tax obligations.
We don’t use your data for automated decision-making that has a legal or similarly significant effect on you, and we don’t sell personal data.
How we share information
We share information only where it’s needed to run the business:
- Stripe, which processes payments for purchases on this site.
- Our email provider, to send and receive support email.
- Law enforcement or regulators, only where we’re legally required to.
Everyone above only receives what they need to do their job, under their own confidentiality and security obligations. We don’t sell personal data.
How long we keep it
We keep purchase and licence records for as long as your licence could still need support or a refund, and afterwards for as long as tax and accounting rules require. Stripe keeps its own records of the payments it processes, under its own policies. Support emails are kept long enough to track a problem to resolution, then deleted or anonymised on a routine schedule.
Your rights
Wherever you’re based, you can ask us to: tell you what personal data we hold about you; correct anything inaccurate; delete it, unless we need to keep it for a legal or accounting reason; give you a copy in a portable format; or stop a particular use of it, such as marketing email. Email
hello@hifidevs.com and we’ll respond within a reasonable time. For payment records held by Stripe, you can also contact Stripe directly, and we’ll help pass your request on. If you’re not satisfied with our answer, you can also complain to your local data protection authority, where one exists.
Children’s privacy
This site is for store owners and developers, not children. We don’t knowingly collect personal data from anyone under 16, and we’ll delete it if we learn we have.
International transfers
We and the services we use (Stripe and our email provider) may process data in countries other than your own. Where that happens, we rely on those providers’ own safeguards and standard contractual protections for cross-border transfers.
Security
We use HTTPS everywhere, and payment card details are handled by Stripe, never stored by us. No method of transmission or storage is completely secure, but we take reasonable technical and organisational steps to protect what we hold.
Changes to this policy
We’ll update the date at the top of this page when we make changes, and post a notice on this site if a change is significant.