This policy describes what data SimpleImporter and simpleimporter.com collect, why, and what we do with it. We try to keep it short and accurate. If anything is unclear, email hello@simpleimporter.com.
The SimpleImporter free plugin (from WordPress.org) does not send any data to our servers. There are no tracking pixels, no usage analytics, no license-check pings, no telemetry of any kind.
The only external HTTP requests the free plugin makes are ones you explicitly trigger. For example, when you provide an image URL during an import, the plugin fetches that image. Those requests go to whatever URL you provided, not to us. We can't see them and we don't log them.
The Pro plugin makes a small number of network calls to deliver paid features. We're listing each one so nothing's a surprise.
When you activate Pro on a site, the plugin contacts our license server (run on Cloudflare and Lemon Squeezy) to verify your license key is valid and active for your domain. Periodically after that, the plugin re-checks the license so we can deactivate keys that have been refunded or shared inappropriately. These calls include your license key and the site URL where Pro is installed. They include your server's IP address (any HTTP request does). They do not include the content of your imports, the data in your store, or any browsing behavior.
If you choose to import from Google Sheets, the Pro plugin uses an OAuth bridge we run on Cloudflare Workers (at simpleimporter.com/oauth/google/*) to handle the Google sign-in handshake. The bridge is intentionally stateless. It does not store your Google tokens server-side. Tokens are encrypted, signed, and passed straight back to your WordPress site, which stores them locally in your database.
What the bridge sees during the handshake:
What the bridge does not see or store:
You can disconnect Google Sheets at any time from the Pro admin screen, or revoke our access at myaccount.google.com/permissions.
When you use Pro features that connect to outside services, like FTP, SFTP, Dropbox, Google Drive, or a remote URL, those requests go to the service you chose. We don't route them through our servers and we don't see the data. Those services have their own privacy policies, which apply when you use them.
The marketing site is static HTML hosted on Cloudflare. We do not run Google Analytics, Facebook Pixel, Hotjar, or any similar behavioral-tracking script. We do not set tracking cookies.
Cloudflare, as our hosting and CDN provider, automatically logs basic request metadata for every page load: your IP address, browser type, referring page, and the URL you visited. This is standard infrastructure logging and Cloudflare retains it briefly per their policy. We do not read these logs unless we are investigating a security issue (for example, a denial-of-service attack).
If you submit the support form, the form opens your local email client with the message pre-filled. The form itself does not transmit anything to us until you send the email from your own client.
Pro purchases are handled by Lemon Squeezy (Lemon Squeezy LLC, with an Irish subsidiary that handles EU/UK transactions). Lemon Squeezy collects what's needed to process a payment and handle taxes:
Lemon Squeezy stores this data under their policy: lemonsqueezy.com/privacy.
We receive a notification of the sale along with your name, email, and order details so we can deliver your license. We use your email to:
We do not sell, rent, trade, or share your email with anyone. There is no advertising network involved.
We keep support emails in our inbox for as long as the conversation is active, plus a reasonable archival period (about two years) for reference if you write back later. We don't share these with anyone. If you want yours deleted sooner, email us and ask.
Whether or not you live in the EU, UK, or California, you can ask us to:
Email hello@simpleimporter.com from the address tied to your account. We'll verify it's you and respond within 30 days. There's no form to fill out, just email.
Note that some data is held by our processors (Lemon Squeezy for payment data, Cloudflare for log data). We can pass requests to them, but their retention and deletion policies are their own.
To be explicit:
If we make material changes to this policy, we'll update the date at the top and notify Pro customers via email. Minor wording fixes don't trigger notifications.
Questions about privacy or a data request? Email hello@simpleimporter.com. Tickets get read by a person.
// secure checkout
You're about to be taken to Lemon Squeezy, the secure payment provider that handles SimpleImporter Pro purchases. Your one-time $249 payment and details are processed safely on their checkout.
Opens in a new tab. No subscription, no auto-renewal.
Payments secured by Lemon Squeezy