The short version: Echozat collects only the data it needs to operate its platform and products. We do not sell your personal information. We use standard security practices to protect it, and you can ask us to update, export, or delete it at any time.
Overview
Echozat ("Echozat", "we", "us", or "our") operates the website at echozat.com and distributes a curated ecosystem of digital tools including WordPress plugins, Shopify apps, Chrome extensions, and Google Apps Script utilities (collectively, the "Platform").
This Privacy Policy explains how we collect, use, store, share, and protect information about visitors to our website and users of our products ("you"). It applies to all interactions with Echozat, whether you are browsing our website, installing one of our free plugins, or purchasing a premium product.
By using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please discontinue use of the Platform.
This policy should be read alongside our Terms and Conditions.
Information We Collect
We collect information in two ways: information you provide directly to us, and information collected automatically when you use the Platform.
Information You Provide
- Account registration: Name, email address, and password when you create an account on echozat.com.
- Purchase information: Billing name, email address, and payment details when you buy a product. Payment card data is processed directly by our payment processors and is never stored on our servers.
- Support requests: Any information you share when you contact us by email or through a contact form, including your name, email, and the content of your message.
- Newsletter subscription: Email address if you subscribe to product updates or our newsletter.
- Survey or feedback responses: Any data you voluntarily submit in response to our surveys or feedback requests.
Information Collected Automatically
- Usage data: Pages visited, time spent, referring URLs, and navigation paths on echozat.com.
- Device & browser data: Browser type, operating system, screen resolution, and IP address.
- Cookies & similar technologies: Session cookies, preference cookies, and analytics identifiers. See Section 6 for full details.
- Log data: Server logs that record access requests, including IP address, request timestamp, HTTP status code, and bytes transferred.
Information from Third Parties
- Payment processors: After a transaction, we receive a transaction confirmation and a masked identifier (e.g. last four digits) — never full card data.
- Analytics providers: Aggregated and pseudonymised data from tools like Google Analytics about how visitors interact with our website.
Note on our free WordPress plugins: Our free plugins listed on WordPress.org do not collect, store, or transmit any personal data from your WordPress installation or your visitors unless explicitly documented in that plugin's readme. Any such data collection will always require your active configuration.
How We Use Your Data
We use the information we collect for the following purposes:
| Purpose | Data Used |
|---|---|
| Providing and operating the Platform | Account details, purchase history, licence keys |
| Processing payments and managing licences | Billing name, email, transaction confirmation |
| Delivering product updates and release notes | Email address, product purchase records |
| Responding to support requests | Email, name, support message content |
| Sending newsletters (with consent) | Email address, subscription preference |
| Improving our products and website | Anonymised usage data, analytics data |
| Preventing fraud and ensuring security | IP address, log data, device data |
| Complying with legal obligations | Any data necessary for regulatory compliance |
We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects on you.
Legal Basis for Processing
Where applicable data protection laws (such as the EU General Data Protection Regulation or India's Digital Personal Data Protection Act) require a legal basis for processing, we rely on the following:
- Contract performance: Processing necessary to deliver a product or service you have purchased or signed up for.
- Legitimate interests: Processing necessary for our legitimate business interests, such as improving our products, preventing fraud, and maintaining platform security — where these interests are not overridden by your rights.
- Consent: Where you have given clear, informed consent, such as subscribing to our newsletter. You can withdraw consent at any time.
- Legal obligation: Processing required to comply with applicable laws and regulations.
How We Share Data
We do not sell, rent, or trade your personal data. We share data only in the limited circumstances described below.
Service Providers
We use a small number of trusted third-party services that process data on our behalf. These providers are contractually bound to use your data only to perform services for us and to protect it in accordance with this policy. They include:
- Payment processors (e.g. Stripe, Razorpay) — to handle transactions securely.
- Email service providers — to send transactional emails and newsletters.
- Analytics providers (e.g. Google Analytics) — to understand website usage through anonymised data.
- Hosting and infrastructure providers — to store and serve the Platform.
Legal Requirements
We may disclose your data if required to do so by law, regulation, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Echozat, our users, or the public.
Business Transfers
If Echozat is involved in a merger, acquisition, asset sale, or similar transaction, your data may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.
We never sell your data. Your personal information is not and will never be sold to advertisers, data brokers, or any third party for commercial purposes.
Cookies & Tracking Technologies
We use cookies and similar technologies to operate the Platform and improve your experience. A cookie is a small text file stored on your device by your browser.
Types of Cookies We Use
| Category | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Required for the website to function — session management, security tokens, and shopping cart state. | No — essential for operation |
| Functional | Remember your preferences such as language, region, or login state. | Yes |
| Analytics | Understand how visitors use the site using anonymised data (e.g. Google Analytics). | Yes |
| Marketing | Currently not used. We do not run retargeting or behavioural advertising campaigns. | N/A |
Managing Cookies
You can control cookies through your browser settings. Most browsers allow you to view, delete, and block cookies. Please note that disabling certain cookies may affect the functionality of the Platform. Refer to your browser's help documentation for guidance:
- Chrome: Settings → Privacy and security → Cookies and other site data
- Firefox: Preferences → Privacy & Security → Cookies and Site Data
- Safari: Preferences → Privacy → Manage Website Data
To opt out of Google Analytics tracking, you can install the Google Analytics Opt-out Browser Add-on.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.
- Account data: Retained for the duration of your account and for up to 3 years after account closure, unless you request earlier deletion.
- Purchase and transaction records: Retained for 7 years to comply with financial and tax regulations.
- Support correspondence: Retained for up to 2 years after the support request is resolved.
- Newsletter subscription data: Retained until you unsubscribe, after which it is deleted within 30 days.
- Server log data: Retained for up to 90 days, then automatically deleted.
- Analytics data: Anonymised and aggregated; not retained as personally identifiable information.
When data is no longer required, we securely delete or anonymise it.
Your Rights & Choices
Depending on your location and applicable law, you may have the following rights regarding your personal data:
Access
Request a copy of the personal data we hold about you.
Correction
Ask us to correct inaccurate or incomplete data.
Deletion
Request that we delete your personal data, subject to legal obligations.
Portability
Receive your data in a structured, machine-readable format.
Restriction
Ask us to restrict processing of your data in certain circumstances.
Withdraw Consent
Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, email us at hello@echozat.com with the subject line "Privacy Request". We will respond within 30 days. We may ask you to verify your identity before processing your request.
Opting Out of Marketing Emails
Every marketing email we send includes an unsubscribe link. You can also opt out by emailing us directly. Note that even after opting out, you may still receive transactional emails related to purchases or your account (e.g. receipts, licence keys, security notices).
Data Security
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction. These measures include:
- HTTPS encryption for all data transmitted between your browser and our servers.
- Passwords stored using strong, salted cryptographic hashing.
- Access to personal data restricted to authorised personnel who need it to perform their work.
- Payment data handled exclusively by PCI-DSS compliant payment processors — we never store card numbers.
- Regular review of our data collection and storage practices.
Security incident? If you believe your account has been compromised or you have identified a security vulnerability, please contact us immediately at hello@echozat.com. We will investigate and respond promptly.
No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.
International Data Transfers
Echozat is based in India. If you are accessing the Platform from outside India, your data may be transferred to and processed in India or in the countries where our service providers operate.
Where we transfer data internationally, we ensure that appropriate safeguards are in place, including:
- Using service providers that participate in recognised data transfer frameworks or offer equivalent contractual protections.
- Implementing standard contractual clauses where required by applicable data protection law.
By using the Platform from outside India, you acknowledge that your information may be transferred to and processed in countries that may have different data protection standards than your country of residence.
Children's Privacy
The Platform is not directed at or intended for use by children under the age of 18. We do not knowingly collect personal data from anyone under 18 years of age.
If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us at hello@echozat.com. Upon verification, we will take prompt steps to delete that information from our systems.
Third-Party Links & Services
The Platform may contain links to third-party websites and services, including WordPress.org, Shopify App Store, Chrome Web Store, and other external sites. This Privacy Policy applies only to data collected by Echozat.
We are not responsible for the privacy practices or content of third-party websites. We encourage you to read the privacy policies of any external site you visit before providing any personal information.
Where our products integrate with third-party platforms (e.g. your WordPress installation, your Shopify store), those platforms' own privacy policies and data handling practices apply to data within those environments.
Our WordPress Plugins & Extensions
Echozat distributes free plugins on WordPress.org. Because these plugins run within your WordPress installation, it is important to be clear about data handling:
What Our Free Plugins Do Not Do
- They do not collect personal data from your website visitors.
- They do not transmit data from your WordPress site to Echozat's servers.
- They do not include any tracking, telemetry, or analytics code by default.
- They do not create user accounts on echozat.com or require registration to function.
What Our Free Plugins May Do
- Some plugins may make outbound requests to check for plugin updates via the WordPress.org update API — this is standard WordPress behaviour and is not specific to Echozat.
- Any plugin that does collect data (for example, a plugin with analytics features) will clearly document this in its readme and settings page, and will only do so with your explicit configuration.
Premium Add-ons
Premium add-ons or extensions purchased through echozat.com may require licence validation. In such cases, the plugin sends your licence key and your site's domain to our licence server for verification. No visitor data is collected or transmitted in this process.
Plugin-specific privacy: Each plugin may have additional privacy notes in its WordPress.org readme file under the "Privacy" section. Please review these for plugin-specific details.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page.
- Where appropriate, notify registered users via email or a prominent notice on the Platform.
Your continued use of the Platform after the revised policy is posted constitutes your acceptance of the changes. If you do not agree with the updated policy, please stop using the Platform and contact us to request deletion of your data.
We encourage you to review this policy periodically to stay informed about how we protect your information.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please get in touch. We aim to respond to all privacy-related enquiries within 30 days.
- Email: hello@echozat.com
- Website: echozat.com/contact
- Jurisdiction: India
Questions About Your Data?
Whether you want to access, update, or delete your data — or you simply have a question about how we handle it — our team is here to help. We'll get back to you within one business day.
Contact Echozat