We build tools for professionals, so we take the protection of your data seriously. This Privacy Policy explains what information we collect, how we use it, and the choices you have across our website, store, waitlist, and plugins.
Who we are
Vareon (we, us, our) develops WordPress plugins and related services. We act as the data controller for information collected through vareon.dev, our documentation portal, support channels, and in-product experiences. We are registered in Norway.
Personal data we collect
Information you provide directly
- Account and licensing. Name, email, organization, and WordPress site details provided when purchasing, activating, or managing licenses.
- Support communications. Messages and attachments sent via our contact form, support email, or help desk.
- Marketing sign-ups. Email and preferences for newsletters or waitlists, including the Pro waitlist. If you join the Pro waitlist, we use your email to send launch updates first and then regular Vareon marketing after release unless you unsubscribe.
- Billing. Payments are processed by our commerce and payment partners, including Freemius and Stripe when used. We do not store complete card details on Vareon servers.
Information we collect automatically
- Site and device diagnostics. In Pro, and only where required or enabled: WP/PHP versions, plugin version, site URL, license key hash, anonymized IP, locale, and error logs to deliver updates and improve stability.
- License checks. Pro periodically requests license status and update information from Freemius.
- Usage analytics. Pages visited, referrers, device type, and approximate region via consented analytics tools on our websites.
- Cookies. See our Cookie Policy for details and choices.
What we do not collect
- Content from your WordPress site (posts, users, orders, and similar content) is not transmitted to us by our plugins unless you deliberately share it in a support ticket.
How we use personal data
- Provide downloads, updates, licensing, and support you request.
- Authenticate license ownership and prevent fraud or abuse.
- Respond to support inquiries and troubleshoot issues.
- Send transactional messages such as receipts and critical security notices.
- Send marketing communications when you opt in, including Pro waitlist emails that start with launch details and may continue as regular Vareon marketing after release unless you unsubscribe.
- Improve performance, usability, accessibility, and security.
- Comply with legal obligations and enforce agreements.
Legal bases for processing (EEA/Norway)
- Contract - to deliver products and services you purchased.
- Legitimate interests - product improvement, security, and anti-abuse, balanced against your rights.
- Consent - analytics cookies, marketing emails, and any optional telemetry where required. You can withdraw consent at any time.
- Legal obligation - tax, audit, and accounting record-keeping.
How we share information
We do not sell personal data. We share data only with:
- Service providers. These currently include our hosting and infrastructure provider, Resend for contact and waitlist delivery, Freemius for licensing and checkout, Stripe when used for payments, and analytics providers on consented pages.
- Professional advisors such as accountants and lawyers when necessary.
- Authorities where required by law or to protect our rights, users, or the public.
- Business transfers such as a merger, acquisition, or asset sale; we will notify you before material changes take effect.
International data transfers
We are based in Norway (EEA) and use providers located in various countries. When data is transferred outside the EEA, we implement appropriate safeguards such as the EU Standard Contractual Clauses (SCCs) or other approved mechanisms.
Data retention
- Account, license, and support records: kept while your account is active and as needed to provide services.
- Billing and transaction records: retained as required by accounting and tax law, typically 5 to 7 years.
- Marketing and waitlist records: kept until you unsubscribe, ask us to delete them, or we no longer need them to operate the list.
- Telemetry and analytics, if enabled: retained only as long as necessary for the stated purposes, then deleted or anonymized.
Your rights
Subject to EEA and Norwegian law, you may:
- Request access to the personal data we hold about you.
- Request correction, deletion, or restriction of processing.
- Object to processing based on legitimate interests.
- Receive your data in a portable format.
- Withdraw consent where processing relies on consent.
- Lodge a complaint with a supervisory authority. In Norway: Datatilsynet (Norwegian Data Protection Authority).
To exercise your rights, contact us using the details below. We will respond within one month, or within the timeframe required by law.
Security
We use industry-standard safeguards, including encryption in transit, access controls, least privilege, and regular reviews. No system is 100% secure, so please use strong, unique passwords and notify us promptly of suspected unauthorized activity. If a breach affects your personal data, we will notify you and the relevant authority within the timeframes required by law.
Children
Our services are not directed to individuals under 16 or the age required in your jurisdiction. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us so we can delete it.
Product-specific details
Vareon Calculator Suite Lite
- The free Lite plugin performs all calculations locally in the visitor's browser.
- Lite does not contact external servers, send telemetry, or transmit site content to us.
- Lite includes an admin-only Pro waitlist tab that links to vareon.dev; the plugin itself does not collect waitlist form data.
Vareon Pro
- Pro contacts Freemius to validate licenses, manage checkout and customer portal access, and deliver updates.
- If Pro includes telemetry, it will be optional, clearly described in the plugin settings, and can be disabled there.
- Pro does not transmit site content unless you deliberately share it with us for support or troubleshooting.
Data Processing Agreement (DPA)
If you require a DPA for your organization, contact us and we will provide one for signature.
Changes to this policy
We will update this policy as our practices or legal requirements change. We will post the revised policy with an updated "Last updated" date and, when appropriate, notify you in-app or via email.
Contact us
Questions or privacy requests? Reach our team at:
Email: legal@vareon.dev
Registered location: Norway
Supervisory authority (Norway): Datatilsynet