1 Who We Are

BridgeLink Digital operates OffloadX and offloadx.com. We are based in Nairobi, Kenya. For privacy enquiries, contact us at [email protected].

2 Data We Collect

2.1 Account Data

When you create an account or purchase a license, we collect: your name, email address, billing address, and payment information. Payment details are processed and stored by Paddle — we never store raw card numbers.

2.2 License Verification Data

When OffloadX verifies your license, the plugin sends the following to our license server (offloadx.com):

• Your license key
• Your WordPress site URL (domain only)
• Plugin version number
• WordPress version number
• A timestamp of the verification request

This data is used solely to validate your license and enforce plan limits. We do not collect file names, media content, or any data from your media library.

2.3 Usage Data (offloadx.com)

When you visit offloadx.com, we may collect standard server logs including IP address, browser type, referring URL, and pages visited. This data is used to maintain site security and improve our service.

2.4 Support Communications

If you contact us for support, we collect the content of your messages and any information you voluntarily share to help resolve your issue.

3 How We Use Your Data

• Providing the service — processing payments, issuing license keys, verifying licenses
• Account management — sending receipts, renewal reminders, and account notifications
• Support — responding to tickets and troubleshooting issues
• Security — detecting and preventing fraudulent or abusive use
• Legal compliance — meeting tax, accounting, and legal obligations
• Product improvement — understanding usage patterns to improve OffloadX

We do not sell your personal data. We do not use your data for behavioural advertising.

4 Data Sharing

We share data only with the following categories of third parties, and only as necessary:

• Paddle — our payment processor and merchant of record. Paddle processes payments and handles tax compliance globally.
• Email service providers — for transactional emails (receipts, license keys, support replies).
• Hosting and infrastructure providers — servers that host offloadx.com and the license API.
• Legal authorities — where required by applicable law or valid legal process.

All third-party processors are required to handle data in accordance with applicable privacy laws.

5 Data the Plugin Accesses on Your Site

OffloadX runs on your WordPress installation and accesses the following data on your server:

• WordPress media library metadata (attachment IDs, file paths, URLs)
• Your stored provider credentials (API keys, bucket names) — stored encrypted in your WordPress database
• Your license key and cached license status — stored in WordPress options

None of this data leaves your server except the license verification data described in Section 2.2. Your cloud provider credentials are never sent to our servers.

6 Cookies

offloadx.com uses essential cookies for session management and security. We do not use tracking cookies or third-party advertising cookies. If we add analytics in the future, we will update this policy and provide opt-out options.

7 Data Retention

• Account data — retained while your account is active and for 7 years after closure for legal and accounting purposes
• License verification logs — retained for 90 days, then automatically deleted
• Support communications — retained for 2 years from closure of the support ticket
• Payment records — retained as required by Paddle and applicable tax law (typically 7 years)

8 Your Rights

Depending on your jurisdiction, you may have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion of your data (subject to legal retention requirements)
• Portability — receive your data in a machine-readable format
• Objection — object to processing based on legitimate interests
• Restriction — request that we limit processing of your data

To exercise any of these rights, email [email protected]. We will respond within 30 days.

9 Security

We implement industry-standard security measures including HTTPS encryption for all data in transit, HMAC-signed API requests for license verification, hashed storage of sensitive credentials, and regular security reviews of our codebase and infrastructure.

No system is perfectly secure. If you discover a security vulnerability, please disclose it responsibly to [email protected].

10 Children's Privacy

OffloadX is a developer tool intended for adults. We do not knowingly collect personal data from anyone under the age of 16. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.

11 Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email to registered users at least 14 days before taking effect. The date at the top reflects when the most recent changes were made.

12 Contact

For privacy questions, data requests, or concerns: [email protected]