Privacy Policy

Last updated: July 2026

Information We Collect

When you purchase PlugICT, we collect:

Email address — used to deliver your license key and download link.
Payment information — processed by Stripe or Billplz. We never see or store your full card details.
Transaction reference — stored in our database to verify purchases and issue licenses.
Affiliate analytics, when enabled — a fresh referral landing may send the affiliate code, a browser-generated click ID, the landing path, the referrer hostname, and a browser-generated visitor identifier. The visitor identifier is immediately HMAC-hashed server-side; raw IP addresses, raw user agents, and raw visitor IDs are not stored.

How We Use Your Information

To deliver your product license and updates.
To provide customer support via email.
To verify purchases and prevent fraud.

We do not sell, rent, or share your personal information with third parties except as required to process payments (Stripe, Billplz).

Data Retention

Purchase records (email + transaction ID) are retained for the lifetime of the product for license verification purposes. Affiliate click events, when that preview/production feature is enabled, are retained for up to 90 days and are then removed by a bounded scheduled cleanup. Affiliate unique-visitor counts are approximate browser-derived analytics, not exact people counts. You may request deletion at any time by emailing hermesian0000@gmail.com — deletion will invalidate your license key.

Third-Party Services

Stripe — card payments. See Stripe's Privacy Policy.
Billplz — FPX/DuitNow payments. See Billplz's Privacy Policy.
Cloudflare — Pages hosting/Functions/D1 preview analytics and, only after a separate activation approval, provider-native Web Analytics. See Cloudflare's Privacy Policy.
GitHub — product releases hosted on GitHub Releases. See GitHub's Privacy Statement.

Your Rights

You may request access to, correction of, or deletion of your personal data at any time by emailing hermesian0000@gmail.com. We will respond within 14 days.

Cookies and Local Storage

PlugICT does not use advertising cookies. The affiliate flow may use browser local storage to retain a referral code for checkout attribution and a random browser identifier for approximate referral analytics. The identifier is HMAC-hashed server-side when analytics is enabled. The public affiliate analytics beacon is currently disabled; it is not activated merely by this notice. Third-party payment processors (Stripe, Billplz) may set their own cookies on their checkout pages.

Contact

PlugICT — Kota Bharu, Malaysia.
Email: hermesian0000@gmail.com

PlugICT — Kota Bharu, Malaysia. hermesian0000@gmail.com