Privacy Policy

1. Overview

ArvoPeak ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to it. It applies to:

• The ArvoPeak website (arvopeak.com)
• ArvoPeak Shopify Apps (e.g. RankPilot: AI SEO Optimizer)
• ArvoPeak Chrome Extensions (free versions)
• ArvoPeak WordPress Plugins (free and premium)
• AI & SEO tools available via CachePlex.com
• Any associated support or communication channels

Please read this policy carefully. By using any of our products or services, you acknowledge the practices described here.

2. Who We Are

ArvoPeak is an independent software company. We build Shopify apps, WordPress plugins, Chrome extensions, and AI-powered web tools for individuals, businesses, and digital professionals. If you have any questions about this policy or how we handle your data, see Section 15 for contact details.

3. Data We Collect on Our Website

When you visit arvopeak.com or purchase a product, we may collect:

4. Chrome Extensions — Data Practices

4.1 Free Extensions (Dead Link Detector, Page SEO Analyzer)

Our free Chrome extensions are built with a strict local-only architecture:

• No data leaves your browser. All scanning and analysis runs entirely within your browser using JavaScript. No page content, URLs, or scan results are transmitted to our servers.
• No account required. We do not collect email addresses or any identifying information from free extension users.
• No tracking. We do not use analytics, advertising SDKs, or any tracking technology within the extension itself.
• Permissions used: Extensions request only the browser permissions necessary for their core function (e.g., access to the active tab to read page content). Permissions are described in the Chrome Web Store listing for each extension.

4.2 Pro Extensions

Pro extensions require an account for license verification. In addition to the local-only analysis described above, Pro extensions may:

• Connect to ArvoPeak servers to verify your license key. This verification request includes your license key and a non-identifiable device token. No browsing data or page content is included.
• Store historical scan scores locally in your browser's storage. If you opt into cloud sync (where available), this data is encrypted in transit and stored securely on our servers, linked to your account.

5. WordPress Plugins — Data Practices

5.1 Free Plugins (WordPress.org)

Free plugins distributed through WordPress.org do not collect any data by default. Any data processing (for example, storing plugin settings) occurs entirely within your own WordPress installation and database — under your control.

5.2 Premium Plugins

Premium WordPress plugins sold via arvopeak.com may include a license verification system. When your WordPress site checks for updates or validates a license, it sends a request to our update server that includes:

• Your license key
• Your site URL (to enforce per-site license limits)
• Plugin version and WordPress version (for compatibility checks)

We do not collect any visitor data from your WordPress site, and no data about your site's users is transmitted to us.

6. How We Use Your Data

We use the data we collect exclusively for the following purposes:

• Delivering the products and services you purchased
• Sending license keys, order confirmations, and invoices
• Providing customer support
• Sending product update notifications and security advisories
• Notifying waitlist members of product launches (with your consent)
• Fraud detection and prevention
• Meeting our legal and tax obligations
• Improving our products based on aggregate, anonymized usage patterns

We will not use your data for advertising, profiling, or selling to third parties.

7. Data Sharing

We do not sell, rent, or trade your personal data. We share your data only in the following limited circumstances:

• Payment processors (e.g., Stripe, Paddle) to handle transactions securely. They are bound by their own privacy policies and PCI-DSS compliance obligations.
• Email service providers used to send transactional emails (order confirmations, license keys, support replies). These providers process email addresses only to deliver messages.
• Legal compliance — if required by law, court order, or governmental authority, we may disclose data as legally required.
• Business transfers — if ArvoPeak is acquired or merged, your data may be transferred as part of that transaction. You will be notified via email and/or a notice on our website.

8. Cookies & Tracking

Our website uses the following types of cookies:

• Strictly necessary cookies — session management, security (CSRF tokens), and shopping cart state. These cannot be disabled as they are required for the site to function.
• Functional cookies — remember your preferences (e.g., currency, language). These are optional.
• Analytics cookies — we use privacy-first analytics (such as self-hosted Matomo or Plausible, where applicable) that do not track individuals across sites and do not share data with advertising networks. Where we use Google Analytics, it is configured with IP anonymization enabled.

You can control cookie preferences through your browser settings. Disabling cookies may affect some site functionality.

9. Third-Party Services

Our website and products may link to or integrate with third-party services. These services have their own privacy policies and we are not responsible for their practices. Relevant third parties include:

• Google Chrome Web Store — for extension distribution. Subject to Google's Privacy Policy.
• WordPress.org — for free plugin distribution. Subject to WordPress.org's Privacy Policy.
• Payment processors — Stripe, Paddle, or PayPal (where applicable).
• Support desk software — if we use a helpdesk tool to manage support tickets.

10. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes described in this policy, or as required by law:

• Customer records (name, email, order history) — retained for 7 years for tax and accounting compliance.
• Support correspondence — retained for 2 years after your last interaction.
• License keys and activation records — retained for the lifetime of your license plus 2 years.
• Waitlist sign-ups — retained until you unsubscribe or the relevant product launches, whichever comes first.

When data is no longer needed, we securely delete or anonymize it.

11. Security

We implement industry-standard technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include HTTPS encryption, access controls, and secure server configuration.

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach that is likely to affect your rights and freedoms, we will notify you as required by applicable law.

12. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you.
• Correction — request that we correct inaccurate or incomplete data.
• Deletion — request that we delete your personal data ("right to be forgotten"), subject to legal retention obligations.
• Portability — request your data in a machine-readable format.
• Objection / Restriction — object to or request restriction of processing in certain circumstances.
• Withdraw consent — where processing is based on consent (e.g., waitlist emails), you may withdraw it at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. We may need to verify your identity before fulfilling your request.

If you are in the EEA or UK and believe we have not handled your data lawfully, you have the right to lodge a complaint with your local data protection authority.

13. Children's Privacy

Our products and services are not directed at children under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify you via email (if we hold your email address) or a prominent notice on our website. Your continued use of our products after any update constitutes acceptance of the revised policy.

15. Contact Us

If you have any questions, requests, or concerns about this Privacy Policy or how we handle your data, please contact us:

• Email: [email protected]
• Website: https://www.arvopeak.com/contact