Privacy Policy

AtoZ INFOWAY INC · Last updated: June 29, 2026

This Privacy Policy explains how AtoZ INFOWAY INC ("AtoZ", "we") collects, uses, and shares information when you use AI-RoleGuard, wp.aiappstore.in, and our licensing & update services.

This policy works together with our Terms of Service and Software License Agreement.

1. Important distinction — your site data vs our service data

Lead and customer data (form submissions, messages, bookings, notes, etc.) is stored in your WordPress database on your hosting. AtoZ does not receive or store that data unless you voluntarily send it to us in a support request.

You are responsible for privacy compliance for your website visitors and leads (e.g. GDPR, CCPA, consent banners, retention, export/erase requests). AI-RoleGuard includes tools to help you export or erase personal data via WordPress privacy features, but configuring and using them correctly is your responsibility.

For website operators — securing inquiry form data

If you use AI-RoleGuard on your WordPress site, your visitors’ inquiries are stored only on your server. Recommended steps:

• Run the site on HTTPS;
• Enable Cloudflare Turnstile or reCAPTCHA under AI-RoleGuard → Settings → Form security;
• Grant AI-RoleGuard admin access only to trusted staff;
• Use a host that provides encrypted database storage and regular backups;
• Use WordPress Export / Erase Personal Data tools for visitor requests.

Technical details: Data security guide for site owners (also in the plugin docs).

2. Connecting cloud storage for off-site backups (OAuth)

AI-RoleGuard's optional Backup feature can upload your site's backup file to your own Google Drive, Microsoft OneDrive, or Dropbox account. The authorization is completed by the AtoZ OAuth broker at connect.wp.aiappstore.in (the same broker AI-MailBridge uses for its one-click email connections), which holds the OAuth application's client secret so your site never has to.

• Scopes we request — least-privilege file storage only. Google: https://www.googleapis.com/auth/drive.file, which only lets the app see and write files it creates (your existing Drive files and folders are never visible to it) — this is a non-restricted Google scope. Microsoft: Files.ReadWrite, scoped to an "AI-RoleGuard Backups" folder. Dropbox: an app-folder-scoped app that only sees its own "AI-RoleGuard Backups" folder. We do not request access to read your email, contacts, calendar, or any other files.
• Where tokens live. After you approve, the access and refresh tokens are returned to your own WordPress site and stored there. The broker keeps only short-lived (a few minutes) handshake records and does not persist your tokens or access your files.
• What gets uploaded. Only the backup archive your site generates (leads, conversations, tasks, bookings, pipelines, forms, automations, contacts, campaigns and settings) — nothing is uploaded unless you connect a destination and enable off-site copies.

Google API Services — Limited Use. AI-RoleGuard's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Data obtained through Google APIs is (a) used only to provide the off-site backup feature you enabled; (b) never transferred or sold to third parties, except as necessary to provide the feature, for security, or to comply with law; (c) never used for advertising; (d) never used to train generalized artificial-intelligence or machine-learning models; and (e) never read by humans unless we have your explicit consent, it is necessary for security or to comply with law, or the data is aggregated and anonymized.

3. Information we collect

2.1 License activation (Free)

• Email address, name (optional), site URL;
• Email verification status and time you accepted the Terms;
• Optional newsletter opt-in;
• License key, plan (Free/Pro), activation timestamps, and last-seen date.

2.2 Pro subscription & billing

• Billing is processed by our merchant of record (e.g. Lemon Squeezy). Payment card details are handled by them, not stored on our servers;
• Tax (VAT, GST, sales tax) is calculated from your billing country and shown at checkout;
• We receive subscription events via webhook: customer email, subscription status, variant/plan, renewal dates;
• We store encrypted billing API credentials in our admin systems (not your data).

2.3 Updates & license checks

• When your site checks for updates or validates a license, we may receive: product slug, license key, site URL, plugin version, and timestamps.

2.4 Website & support

• Information you send to supports@atozinfoway.ca or through account lookup forms;
• Standard server logs (IP address, browser type, pages visited) on wp.aiappstore.in.

4. How we use information

• Issue and validate license keys;
• Deliver plugin updates;
• Process subscriptions, upgrades, and downgrades;
• Send verification codes, license keys, and service-related emails;
• Provide support and prevent abuse;
• Send optional product newsletters (only if you opted in);
• Improve reliability and security of our licensing infrastructure.

5. Legal bases (EEA/UK)

Where GDPR applies, we rely on: contract (to provide the Service you requested), legitimate interests (security, fraud prevention, product improvement), and consent (newsletter). You may withdraw consent for marketing at any time.

6. Sharing

We do not sell your personal information. We share data only with:

• Payment/billing partners (merchant of record) to process subscriptions and calculate tax by country;
• Email/infrastructure providers to send transactional messages and operate our servers;
• Authorities when required by law or to protect rights and safety.

When you configure third-party integrations inside AI-RoleGuard (AI, SMS, email, calendars), data flows directly between your site and those providers under their policies.

7. Retention

• License and subscription records: for the life of your account plus a reasonable period for legal and accounting purposes;
• Pending verification codes: deleted after use or expiry (15 minutes);
• Support emails: as long as needed to resolve issues and maintain records.

Data on your WordPress site is retained until you delete it or uninstall the plugin.

8. Security

We use industry-standard measures for our licensing service (HTTPS, encrypted secrets, access controls). No method is 100% secure. You are responsible for securing your WordPress admin, hosting credentials, and backups.

9. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, or port personal data we hold about you, and to object to certain processing.

Contact supports@atozinfoway.ca with subject "Privacy request". We may need to verify your identity. For lead data stored on your site, use WordPress privacy tools or your site admin — we cannot erase data we do not hold.

10. International transfers

We may process data in countries other than yours. Where required, we use appropriate safeguards for cross-border transfers.

11. Children

The Service is for businesses and website operators. It is not directed at children under 16.

12. Changes

We may update this policy. The "Last updated" date will change. Continued use after changes constitutes acceptance of the updated policy.

13. Contact

AtoZ INFOWAY INC — Privacy
Email: supports@atozinfoway.ca

← Back to AI-RoleGuard