Privacy Policy

At Themes And Plugins ("we", "us", or "our"), we are committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard your data when you visit themesandplugins.xyz.

1. Information We Collect

We collect the following information when you register or use our platform:

• Account information — your username and email address
• Authentication data — Google Authenticator TOTP secret (stored securely, never shared)
• Download logs — records of files you download including timestamps and IP address
• Support tickets — messages and replies you submit through our ticket system
• Reviews — ratings and reviews you submit for products
• Usage data — pages visited, browser type, and referring URLs collected via server logs

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Authenticate your identity using Google Authenticator
• Provide access to downloadable products
• Respond to your support tickets and inquiries
• Send transactional emails (email verification, password reset)
• Improve our platform and product offerings
• Prevent fraud and ensure platform security

3. Data Storage and Security

Your data is stored on secure servers. We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Passwords are not stored — we use Google Authenticator (TOTP) for authentication.

We do not store payment card information. Any payments processed through Razorpay are handled entirely by Razorpay's secure infrastructure and are subject to Razorpay's Privacy Policy.

4. Cookies

We use essential cookies to maintain your session after login. We do not use tracking cookies or third-party advertising cookies. For more details, see our Cookie Policy.

5. Third-Party Services

We use the following third-party services that may process your data:

• Google Fonts — fonts loaded from Google's CDN (subject to Google's privacy policy)
• Razorpay — payment processing (subject to Razorpay's privacy policy)

We do not sell, rent, or trade your personal information to third parties.

6. Data Retention

We retain your account data for as long as your account is active. Download logs are retained for up to 2 years. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Object to processing of your personal data

To exercise any of these rights, please contact us.

8. Children's Privacy

Our platform is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated date. Continued use of our platform after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy, please contact us or email us at noreply@themesandplugins.xyz.