Privacy Policy

This Privacy Policy explains how Yaxii ECO collects, uses, stores, protects, and shares personal data when you use https://yaxii.dev , create an account, place an order, download products, activate licenses, request support, or use connected Yaxii services.

1. Who we are

Yaxii ECO is operated by:

• Legal entity / trade name: Yaxii Dev
• Tax identification number: 10116600001215061680
• Support email: support@yaxii.dev

For privacy questions, contact:

support@yaxii.dev

2. Scope

This policy applies to:

• website visitors
• customers
• account users
• license holders
• support users
• agency users
• users who activate products on WordPress websites
• users who opt into Yaxii security or reputation features

This policy does not control the privacy practices of third-party services such as payment gateways, banks, Google, Wise, RedotPay, WhatsApp, Firebase, Twilio, hosting providers, analytics tools, shipping providers, or customer websites using Yaxii products.

3. Personal data we collect

We may collect:

Account data

• name
• email address
• password hash
• account ID
• login method
• account status
• language and currency preferences

Order and payment data

• product purchased
• plan and license type
• order number
• amount and currency
• payment method
• payment status
• receipt uploads for manual payments
• transaction references
• invoice information

We do not store full card numbers. Online card payments are processed by payment providers.

License and activation data

• license key
• activated domain
• website URL
• WordPress version
• WooCommerce version
• PHP version
• product version
• activation, deactivation, and update history
• license validation logs
• security and abuse-prevention signals

Support data

• messages
• screenshots
• technical logs
• temporary access details if provided
• website diagnostics
• issue history

Website usage data

• IP address or approximate location
• browser and device information
• pages visited
• referral source
• analytics events
• cookies and similar technologies

Security data

To protect the platform and licenses, we may process:

• IP address
• device/browser signals
• failed login attempts
• suspicious activity
• activation abuse indicators
• download abuse indicators
• receipt verification signals
• anti-piracy signals

4. Why we use personal data

We use personal data to:

• create and manage customer accounts
• process orders and payments
• generate licenses
• deliver downloads
• provide invoices and order records
• activate, validate, and manage licenses
• provide updates and support
• prevent piracy, fraud, abuse, spam, fake receipts, and unauthorized access
• improve products, documentation, and platform experience
• comply with legal, tax, accounting, consumer-protection, and e-commerce obligations
• send service messages such as license delivery, password resets, order updates, security notices, and support replies
• send marketing messages only where permitted and with unsubscribe options

5. Legal basis and consent

Where required, we ask for consent before collecting or using personal data.

Some processing is necessary to create an account, complete a purchase, deliver licenses, provide support, perform a contract, prevent abuse, protect the platform, or comply with legal obligations.

You can withdraw consent where processing depends on consent, but this may affect features that require that data.

6. Data minimization

We aim to collect only data needed to complete transactions, deliver software, manage licenses, provide support, protect the platform, and comply with legal obligations.

7. License validation and server communication

Yaxii products may connect to Yaxii servers to:

• activate licenses
• validate site limits
• check subscription status
• deliver updates
• authorize downloads
• verify product integrity
• prevent piracy and abuse
• enable licensed features

This may involve sending the license key, domain, product version, WordPress/WooCommerce/PHP version, and technical environment information.

8. YSF Shield and reputation features

Future or optional security features may process additional security signals.

The optional Give & Get Reputation Network may allow merchants to share anonymous or pseudonymous security signals such as hashed phone fingerprints, order-risk patterns, security event counts, and abuse indicators.

The network must not include customer names, addresses, website names, merchant identity, or raw customer personal data unless explicitly stated and lawfully processed.

Participation should be optional. Merchants who participate may receive access to reputation intelligence according to the product rules.

See the YSF Shield & Reputation Network Notice for more details.

9. Payment providers and third parties

We may share necessary data with providers that help operate the platform, including:

• payment gateways
• manual payment verification providers
• email delivery providers
• hosting and infrastructure providers
• analytics providers
• authentication providers such as Google login
• support tools
• security and anti-abuse services
• accounting or legal service providers

These providers may process data according to their own policies and applicable laws.

10. International transfers

Some providers may process data outside Algeria. Where required, we rely on consent, contractual necessity, legal necessity, appropriate safeguards, or other lawful mechanisms for transfers.

If a specific feature requires cross-border transfer, the product or service may ask for additional consent or provide a notice.

11. Data retention

We keep data only as long as needed for the purposes described in this policy, including:

• account operation
• license management
• order records
• invoices
• tax/accounting obligations
• support history
• abuse prevention
• legal claims
• security logs

Some data may be retained after account closure where needed for legal, tax, accounting, anti-piracy, fraud prevention, or dispute-resolution purposes.

12. Security

We use reasonable technical and organizational measures to protect personal data, including access controls, authentication, secure server configuration, encrypted transport, backups, logging, and abuse monitoring.

No system is perfectly secure. You are responsible for securing your own email, account password, WordPress website, hosting, and third-party integrations.

13. Your rights

Depending on applicable law, you may have rights to:

• access your personal data
• request correction of inaccurate data
• request deletion where applicable
• object to certain processing
• withdraw consent where processing depends on consent
• unsubscribe from marketing messages
• request information about purposes, categories, and recipients of processing

To exercise your rights, contact support@yaxii.dev

We may need to verify your identity before responding.

14. Marketing messages

We may send service messages necessary for your account, order, license, download, security, or support.

Marketing or promotional messages may be sent only where permitted. Every marketing message should provide a way to unsubscribe.

15. Children

Yaxii products are intended for business users, merchants, agencies, and website operators. They are not intended for children.

We do not knowingly sell software licenses to children.

16. Customer websites using Yaxii products

If you install Yaxii products on your own website, you are responsible for your own customers’ data, privacy notices, consent banners, shipping data, order data, payment data, abandoned checkout data, OTP data, security logs, and any integrations you enable.

Yaxii may provide tools, but you remain responsible for configuring them lawfully on your website.

17. Changes to this policy

We may update this Privacy Policy when our products, platform, laws, or data practices change.

The updated version will be published on the website with a new effective date.

18. Contact

Privacy questions and requests:

support@yaxii.dev