Privacy, briefly

Who’s responsible

VALMO SOFTWARE CONSULTING S.R.L. (“Modulary”, “we”), Str. General Ion Rășcanu nr. 32B, Vaslui, Romania, CUI 46263307. Questions about your data: hello@modulary.dev.

This website

No cookies, no analytics, no trackers, and nothing loaded from anyone else’s server. Like every website, our web host records basic server logs: IP address, time, the page asked for and the browser. We use them only to keep the site running and safe from abuse (our legitimate interest), and they are deleted within 30 days.

When you email us

If you write to us, we get your email address and whatever you put in the message, and use them to answer you: our legitimate interest in answering, or the first step towards a contract if you are asking about buying. We delete conversations within two years of the last message, unless they are part of a purchase record we must keep.

If a message carries your customers’ details (an export, a screenshot of an order), we use them only to answer and delete them once we have. For those we work on your behalf, as the Pro terms explain.

The free plugins

They run on your site and send us nothing. Your orders, customers and exports stay in your store. We never see them, so we are not processing your customers’ data on your behalf.

Modulary Export Pro

• Buying. Pro is sold through Link, Stripe’s checkout. It collects your name, email, billing details and payment, as a separate controller under its own privacy policy. It shares with us your name, email, country and what you bought, so we can give you your licence, updates and support (to perform our contract with you) and keep the records accounting law asks for. Without them we can’t sell you a licence. We keep them while your licence is active, then for as long as accounting law requires.
• Licence and updates. Pro checks its licence with our licence server once or twice a day, even when WordPress’s own update checks are switched off. It sends the licence key, the Pro version and your site address. Never an order, never a customer, nothing else. We use them to offer the right update, to keep each key within the sites it covers, and to pause Pro when its licence is refunded, disputed or published for others to use (to perform our contract with you). The list of sites where a key is active is kept while the key is in use, and deleted within a year of its last check. We keep no IP addresses from these checks.
• Licence emails. Your licence key, and a new-key link if you ask for one, reach you by email through Resend (to perform our contract with you). Resend keeps a copy of each email it sends (your address and the message) for 30 days, then deletes it.
• Lost keys. If you ask for a new key, the email you type goes to our licence server only to find your purchase with Stripe and send you a link (to perform our contract with you). Our licence server doesn’t keep it.
• Your exports. Pro sends files straight from your site to the inboxes and servers you choose. They never pass through us.

The Pro playground

playground.modulary.dev sends you to a pretend store that runs entirely in your browser on WordPress Playground, a WordPress.org service, under WordPress.org’s privacy policy. The store is WordPress and WooCommerce as anyone downloads them, so some of its pages can also load content from WordPress.org and from WooCommerce.com (Automattic, under its privacy policy). The store and anything you type into it stay in your browser and are gone when you close the tab. Our licence server gets only what Pro always sends: the playground’s public demo key, the Pro version and the pretend store’s address. It keeps none of it, and no IP addresses. We keep no logs of visits to the playground address. We process this to let you try Pro (our legitimate interest).

WordPress.org

Downloads, the support forum and reviews happen on WordPress.org, under WordPress.org’s privacy policy.

Who else sees it

Only the companies that help us run this: our web host, our email provider, Cloudflare (which runs our licence server and the playground address), Resend (which sends licence emails), and Stripe (Link), which sells Pro. We never sell data, and we never share it for advertising. Where one of them is outside the EU, the transfer is covered by an EU adequacy decision or the EU’s standard contractual clauses. Ask us and we’ll send you a copy of those safeguards.

Your rights

You can ask us for a copy of your data, to correct it, delete it, restrict or object to how we use it, or to move it elsewhere. Email hello@modulary.dev. The law gives us a month to answer; we aim for a few days. You can also complain to Romania’s data protection authority, ANSPDCP (dataprotection.ro), or the one where you live.

Your right to object. Where we rely on our legitimate interest (server logs, answering emails, the playground), you can object at any time, and we stop unless we have a compelling reason to continue, such as dealing with an attack on the site.

We make no automated decisions about you and do no profiling.

Changes

If this changes, the date at the top changes too. If it changes in a way that matters to Pro customers, we email them first.