Last updated: July 2, 2026
This Privacy Policy explains how Ibexoft (“Ibexoft,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you use ibexoft.com, our WordPress plugins, our web applications, and any other product, service, or solution we make available now or in the future (collectively, the “Services”).
By using any of our Services, you agree to the collection and use of information as described in this policy.
1. Who We Are
Ibexoft is operated by Muhammad Jawaid Shamshad, trading as Ibexoft. For any privacy questions, requests, or concerns, contact us at [email protected].
2. Scope — Products and Services Covered
This is a single policy covering everything we build and sell, present and future, including but not limited to:
- Automotive Inventory Importer — WordPress plugin (Free version via WordPress.org; Pro version via Freemius; also available via CodeCanyon/Envato Market)
- DailyWins — web application (account-based)
- SpendLess — web application (account-based)
- ibexoft.com Blog — content supported by advertising (Google AdSense) and affiliate links
- Awesome Startup Tools — directory (currently listings/content; sponsored placements planned)
- Any future WordPress plugin, web app, SaaS product, digital download, or other solution released under the Ibexoft brand
Where a specific product has data practices that differ from the general rules below, that is called out explicitly in the relevant section.
3. Information We Collect
3.1 Information You Provide Directly
- Account registration (DailyWins, SpendLess, and any future account-based product): name, email address, and a securely hashed password. We never store your password in plain text.
- User-generated content: the data you enter into an account-based product — for example, DailyWins entries/streaks, or SpendLess shopping lists and price comparisons.
- Support and contact requests: anything you send us via email, a contact form, or a support ticket, including your name, email address, and message content.
- Newsletter or email list sign-up: if and when you subscribe to updates from us, we collect your email address and any preferences you set.
3.2 Information Collected Automatically
- Usage and analytics data: pages visited, features used, time on site, referring URLs, browser/device type, and approximate location (derived from IP address), collected via Google Analytics (through Google Site Kit).
- Cookies and similar technologies: see Section 6.
- Server/hosting logs: standard technical logs (IP address, request timestamps, user agent) retained by our hosting provider and CDN for security and performance purposes.
3.3 Information From Purchases
We use third-party Merchants of Record to process all payments (see Section 7). This means:
- We never see or store your full payment card number, bank details, or other sensitive payment credentials. That information is collected and processed directly by Freemius, Inc. or Paddle.com, according to their own privacy policies.
- We do receive limited order information necessary to deliver and support your purchase: the product and plan purchased, license key, purchase email address, and transaction date.
3.4 Plugin Telemetry (Automotive Inventory Importer and future plugins)
Our WordPress plugins use the Freemius SDK. During setup, you are asked to opt in or out of sharing basic diagnostic data — if you opt in, this may include your website URL, WordPress and PHP version, active theme/plugins, and aggregate, non-personal usage statistics (e.g., feature usage counts). This is used to improve the plugin and is never used to identify individual site visitors of your website. You can decline this at any time from the plugin’s opt-in screen.
4. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Services
- Process transactions and deliver license keys, downloads, and receipts
- Provide customer and technical support
- Send transactional emails (purchase confirmations, renewal reminders, product updates)
- Send marketing communications, where you have opted in, with an unsubscribe option in every email
- Monitor and improve performance, security, and usability
- Detect, prevent, and address fraud, abuse, or technical issues
- Comply with legal obligations
5. Legal Basis for Processing (EEA/UK Visitors)
If you are located in the European Economic Area or United Kingdom, we process your personal data on the following legal bases: performance of a contract (e.g., delivering a product you purchased), your consent (e.g., marketing emails, non-essential cookies), our legitimate interests (e.g., site security, service improvement), and compliance with legal obligations.
6. Cookies and Tracking Technologies
We use cookies and similar technologies in these categories:
| Category | Purpose | Examples |
|---|---|---|
| Strictly necessary | Site functionality, security | Session cookies, cookie-consent preference storage |
| Analytics | Understand site usage | Google Analytics (via Google Site Kit) |
| Advertising | Ad delivery and measurement | Google AdSense |
| Affiliate tracking | Attribute referrals for commission | CJ Affiliate, Impact, PartnerStack, and individual program cookies (e.g., Cloudways, Hostinger) — only set when you click an affiliate link |
We use a cookie consent tool to obtain your consent before non-essential cookies are set, where required by law. You can change your preferences at any time via the cookie settings link in the site footer, or by clearing cookies in your browser.
7. How We Share Your Information
We do not sell your personal information. We share information only with the following categories of service providers, each acting under their own privacy obligations:
- Freemius, Inc. — merchant of record and licensing platform for our WordPress plugins
- Paddle.com Market Ltd / Paddle.com Inc. — merchant of record for DailyWins and other non-plugin digital products
- Envato Pty Ltd (CodeCanyon/Envato Market) — only if you purchase through CodeCanyon; that purchase and any data you provide to Envato is governed by Envato’s own privacy policy, not this one
- Google — Analytics, AdSense, and Site Kit infrastructure
- Brevo — email delivery and marketing
- Cloudflare — security and content delivery
- WP Engine — website hosting
- WordPress.org / Gravatar — if you leave a comment on our blog
- Affiliate networks (CJ Affiliate, Impact, PartnerStack, and direct programs like Cloudways/Hostinger) — only in connection with an affiliate link you click
We may also disclose information if required by law, to protect our rights, or in connection with a merger, acquisition, or sale of assets (with notice to you where required).
8. Data Retention
We retain personal data for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Account data (DailyWins, SpendLess) is retained until you delete your account or request deletion. License and transaction records may be retained longer where required for tax or accounting purposes by us or our Merchants of Record.
9. Your Rights
Depending on your location, you may have the right to:
- Access, correct, or delete your personal data
- Object to or restrict certain processing
- Request a copy of your data in a portable format
- Withdraw consent at any time (without affecting prior lawful processing)
- Opt out of marketing emails via the unsubscribe link in any email
- (California residents) Know what personal information is collected and request deletion — we do not sell personal information as defined under the CCPA/CPRA
To exercise any of these rights, contact us at [email protected]. We will respond within a reasonable timeframe and in accordance with applicable law.
10. International Data Transfers
Our Services and service providers may process and store data in countries other than your own, including the United States. Where required, we rely on appropriate safeguards (such as standard contractual clauses used by our providers) for such transfers.
11. Children’s Privacy
Our Services are not directed to children under 16, and we do not knowingly collect personal data from children under that age. If you believe a child has provided us with personal data, contact us and we will delete it.
12. Data Security
We use reasonable administrative, technical, and organizational safeguards to protect your information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
13. Account and Data Deletion
For account-based products (DailyWins, SpendLess, and future products), you may request full account and data deletion at any time by contacting [email protected]. We will process deletion requests within 30 days, except where we are required to retain certain records by law.
14. Third-Party Links and Marketplaces
Our Services may link to third-party websites, including affiliate partners and marketplaces such as CodeCanyon/Envato. This Privacy Policy does not apply to those third-party sites — please review their own privacy policies.
15. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above, and where appropriate, by additional notice.
16. Contact Us
Questions about this Privacy Policy or your data can be sent to:
Muhammad Jawaid Shamshad, operating as Ibexoft Email: [email protected]