1. Overview
This Privacy Policy explains how Clix Suite ("we", "us", "our") collects, uses, and protects personal data when you visit our website at clixsuite.com, purchase or use our commercial plugins, or contact our team.
Clix Suite is operated by Thetechhacker Global Solutions, an independent digital publishing and growth company registered in India. This policy is written to comply with the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and India's Digital Personal Data Protection Act (DPDP Act, 2023).
Plain-English promise. We collect the minimum personal data required to run our business — account details, billing information, and website analytics. We never sell your data, we never share it with advertisers, and our WordPress plugins do not track your visitors on your behalf.
2. Who we are
The data controller responsible for your personal data is:
- Clix Suite — a product of Thetechhacker Global Solutions
- Founder: Rahul Vithala
- Registered address: Visakhapatnam, Andhra Pradesh, India
- Privacy contact:privacy@clixsuite.com
- Data Protection Officer:dpo@clixsuite.com
If you are an EU or UK resident and would like to appoint your national data protection authority to handle a complaint, you may do so at any time — see section 11.
3. Data we collect
We keep the categories of data we collect deliberately narrow. The full list, and why we hold each item, is below.
| Category | What it includes |
|---|---|
| Account data | Name, email address, and, if you check out for Pro, billing address and country. |
| Purchase data | Order history, license keys, invoice numbers. Payment card numbers are handled directly by our payment processor — we never see or store them. |
| License activation data | The website URLs where your paid license is currently active, so we can honour your seat count and issue automatic updates. |
| Support data | Any information you share when you email support — messages, attachments, screenshots. |
| Website analytics | Aggregate, privacy-friendly analytics on clixsuite.com: pages visited, referrer, browser type, country. No cookies, no cross-site tracking, no persistent identifiers. |
| Marketing data | Only if you opt in: email address for our newsletter, and open/click events for emails we send to you. |
We do not collect or process any special-category personal data (health, biometric, political opinion, religious belief, sexual orientation, etc.). Please do not share this kind of information with us.
4. How we collect data
We collect personal data in three ways:
- Directly from you — when you create an account, purchase a license, subscribe to our newsletter, or contact support.
- Automatically — when you visit clixsuite.com, our server logs your IP address for security and abuse-prevention purposes for up to 30 days. Our privacy-friendly analytics also record aggregate page-level metrics.
- From processors on our behalf — our payment processor confirms whether a payment was successful and provides billing metadata; our email provider confirms whether an email was delivered.
5. How we use data
We only use your personal data for defined operational reasons:
- To provide you with your license, issue updates, and manage your account.
- To process payments, send invoices, and handle refunds.
- To respond to support requests and communicate about your account.
- To send you the transactional emails required to run the service (payment receipts, renewal reminders, license expiry notices).
- To send you optional product news, but only if you have opted in.
- To improve the product using aggregate, anonymised usage patterns from our website.
- To detect fraud, security abuse, or breaches of our terms.
- To comply with legal obligations (tax records, lawful requests from authorities).
We will never sell your personal data to advertisers, brokers, or third parties for their own marketing. This commitment applies regardless of jurisdiction and is stronger than what is minimally required by CCPA/CPRA.
6. Legal bases for processing
Under GDPR and equivalent laws, we rely on one of the following legal bases for every processing activity:
| Purpose | Legal basis |
|---|---|
| Providing your license & account | Performance of a contract |
| Processing payments and invoicing | Performance of a contract & legal obligation (tax) |
| Transactional emails | Performance of a contract |
| Newsletter and product marketing | Your explicit consent (revocable at any time) |
| Website analytics (aggregate) | Legitimate interest — improving the product |
| Fraud prevention & security logging | Legitimate interest — protecting the service |
| Legal & regulatory compliance | Legal obligation |
7. Data & the WordPress plugins
This section applies to Clix Cache, Clix Cache Pro, and every future plugin in the Clix Suite.
Free plugins do not send any data to us. When you install Clix Cache from WordPress.org, the plugin makes no outbound calls to Clix Suite. It does not report your site URL, visitor counts, feature usage, or any other information.
Paid plugins send a minimal, defined set of data so we can validate your license and deliver automatic updates. This is limited to:
- Your license key
- The website URL where the license is activated (so we can enforce your seat count)
- The plugin version installed (so we can deliver the right update package)
The Web Vitals monitoring feature in Clix Cache stores anonymous performance numbers (TTFB, LCP, CLS, INP) in your own WordPress database. These metrics are never transmitted to us. They contain no cookies, no IP addresses, and no user identifiers.
You control what your plugin collects. The privacy-relevant features in Clix Cache can be disabled independently in the plugin dashboard. Uninstall cleanly removes all cached files, plugin tables, and stored settings from your database.
10. How long we keep data
We keep personal data only as long as we need it for the purpose it was collected — or as long as the law requires us to retain it.
| Data | Retention |
|---|---|
| Active account & license data | For as long as your account is active |
| After account deletion | Deleted within 30 days, except billing records |
| Billing & tax records | 7 years (statutory retention under Indian tax law) |
| Support conversations | 2 years after the last message |
| Server access logs | 30 days, then anonymised |
| Newsletter subscription | Until you unsubscribe |
11. Your rights
You have the following rights over your personal data, regardless of where you live. If you are in the EU, UK, California, or India, these rights are additionally guaranteed by law.
Your data rights at a glance
- Access — a copy of the personal data we hold on you.
- Correction — fix anything that's inaccurate or incomplete.
- Deletion — ask us to erase your account and data.
- Portability — receive your data in a machine-readable format.
- Restriction — limit how we use your data.
- Objection — object to processing based on legitimate interest.
- Withdraw consent — for anything you opted into.
- Complain — to a supervisory authority in your country.
To exercise any of these rights, email privacy@clixsuite.com. We respond within 30 days, which is the maximum permitted under GDPR and DPDP. There is no charge for a reasonable request; we may charge a small fee for repeated or manifestly excessive requests.
If you are in the EU/EEA, you may also lodge a complaint with your national Data Protection Authority. Residents of the UK may complain to the Information Commissioner's Office (ICO). California residents may contact the California Privacy Protection Agency. Indian residents may reach the Data Protection Board of India once it is operational.
12. International transfers
Clix Suite is operated from India. When you use our services, your personal data is processed in India and — via our sub-processors — in the United States and the European Union.
For every transfer outside your home jurisdiction, we rely on one of the following safeguards:
- The European Commission's Standard Contractual Clauses (SCCs), where transfers involve EU data subjects.
- The UK International Data Transfer Addendum, where UK data is involved.
- Adequacy decisions, where they apply.
- Contractual protections aligned with the Indian DPDP Act.
Copies of the specific safeguards used with any sub-processor are available on written request.
13. Data security
We take security seriously and design our systems around defence-in-depth principles:
- All traffic to clixsuite.com is encrypted with TLS 1.2 or higher.
- Passwords are hashed with industry-standard algorithms (bcrypt/argon2). We never store, log, or transmit passwords in plain text.
- Access to production databases is restricted to a small, named list of engineers.
- API tokens and credentials are stored in a managed secrets vault.
- Backups are encrypted at rest and stored in a separate region.
- Our infrastructure is scanned regularly for vulnerabilities and patched to a defined SLA.
In the unlikely event of a personal-data breach that presents a risk to affected users, we will notify the relevant supervisory authorities within 72 hours as required by GDPR, and notify affected individuals directly without undue delay.
14. Children's privacy
Clix Suite is a business-to-business product intended for website owners and developers. We do not knowingly collect personal data from anyone under the age of 16 (or the equivalent age of digital consent in your country).
If we learn that we have inadvertently collected such data, we will delete it promptly. If you are a parent or guardian and believe your child has provided personal data to us, please contact privacy@clixsuite.com.
15. Changes to this policy
We may update this Privacy Policy from time to time — for example, when we launch new products, add new sub-processors, or when the law changes. When we do:
- The "Last updated" date at the top of this page will change.
- The version number will increment.
- For material changes, we will notify active account holders by email at least 30 days before the new policy takes effect.
Continued use of our services after the effective date of a revised policy constitutes acceptance of the changes.
16. Contact & Data Protection Officer
For anything privacy-related — questions, rights requests, complaints, or a lawful information request — please contact us:
- Privacy & rights requests:privacy@clixsuite.com
- Data Protection Officer:dpo@clixsuite.com
- Security disclosures:security@clixsuite.com
- Postal address: Clix Suite, Visakhapatnam, Andhra Pradesh, India
We aim to acknowledge every privacy request within one working day and provide a full response within the statutory timeframes.