Privacy Policy

1. Who We Are

iPow Core ("we", "us", or "our") is a software brand operated by IPOW HOSTING LLC, a Wyoming Limited Liability Company registered at 30 N Gould St, Ste R, Sheridan, WY 82801, United States. We are the data controller for the personal data described in this policy. This policy explains how information is collected, used, and safeguarded when you visit ipowcore.com, create an account, or purchase a software licence.

You can reach us about any privacy matter at support@ipowcore.com or +1 (917) 764-9437.

2. Information We Collect

• Account data. Your name, email address, and a securely hashed password. If you sign in with Google, we receive your name, email address, and profile picture from Google instead of a password.
• Order data. Your billing name, email address, billing country, tax status, purchased plan, and order or invoice number. We never receive or store your full card number, expiry date, or security code — those are handled entirely by our payment provider.
• Licence and activation data. Your licence key (stored encrypted), the website domains on which you activate the plugin, activation timestamps, and download records. This is how we enforce your plan's site limit and deliver updates.
• Support data. Your name, email address, optional order number, and the content of any message you send through our contact form.
• Technical data. IP address, browser user agent, and timestamps recorded in server and security logs, including rate-limiting records used to prevent brute-force attacks on sign-in.

3. Why We Use It, and Our Legal Basis

• To deliver the software, licence keys, and updates you have paid for, and to provide support — performance of a contract.
• To operate accounts, verify email addresses, and reset passwords — performance of a contract.
• To detect fraud, abuse, and licence-sharing, and to keep the service secure — legitimate interests.
• To keep invoices and tax records — legal obligation.
• To measure aggregate site traffic, where analytics are enabled — legitimate interests, using cookie-less aggregate counts only.

We do not sell or share personal information for cross-context behavioural advertising, and we do not use your data to train machine-learning models.

4. Cookies & Local Storage

We use a small number of cookies and browser storage entries. We do not use advertising or cross-site tracking cookies, so no consent banner is required for the items below.

5. Service Providers (Sub-processors)

We share personal data only with the providers needed to run the service. Each is bound by contract to process data solely on our instructions.

We may also disclose data where required by law, court order, or to establish or defend legal claims. If our business is sold or merged, customer records may transfer to the acquirer under the terms of this policy.

6. How Long We Keep Data

7. International Data Transfers

We are based in the United States and our providers process data in the United States and the European Union. Where personal data of individuals in the European Economic Area, the United Kingdom, or Switzerland is transferred to the United States, that transfer relies on the European Commission's Standard Contractual Clauses (and the UK Addendum where applicable), together with the technical safeguards described in section 9.

8. Your Rights

Depending on where you live, you may have the right to access a copy of your data, correct inaccurate data, delete your data, restrict or object to processing, withdraw consent, receive your data in a portable format, and — for California residents under the CCPA/CPRA — to know what is collected and to opt out of sale or sharing (we do neither). We will not discriminate against you for exercising any of these rights.

You can delete your account and associated personal data at any time from your account settings, or email support@ipowcore.com. We respond to rights requests within 30 days and may ask you to verify your identity first. Invoice records that we must keep for tax purposes are retained even after account deletion.

If you are in the EEA or UK and believe we have handled your data improperly, you may complain to your local supervisory authority.

9. Security

The site is served exclusively over TLS with HSTS enabled. Passwords are stored using a salted one-way hash, licence keys are encrypted at rest, download links are signed and expire within minutes, and administrative actions are recorded in an audit log. Sign-in and password reset endpoints are rate limited. No system is perfectly secure, but we notify affected customers and the relevant authorities without undue delay if a breach affecting personal data occurs.

10. Children

Our products are sold to businesses and are not directed to children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us data, contact us and we will delete it.