Privacy policy

What ReefWP collects, why, and what it never does. The short version is that our plugins run on your own website and keep your data there.

Last updated October 26, 2026

Who we are

ReefWP makes plugins for WordPress: ReefCRM, Pulse Bookings, Echo Forms, Spout SMTP and Sonar SEO. This policy covers this website, reefwp.com, and anything our plugins send to us. Questions about it go to support@reefwp.com.

The short version

Our plugins run on your own website. What you and your customers enter stays in your site’s own database, and we cannot see it.
The free plugins do not report back to us. There is no usage tracking. A Signature add-on checks its license key with this website, and sends only what that check needs.
We do not sell personal information, and this website carries no advertising trackers.

What our plugins send to us

On their own, nothing. Three things reach us, and only when you choose them:

A license key. When you enter a Signature key, your site checks it with this website, then again about twice a day and whenever it looks for updates. Each check sends the key, your site’s address, whether it is a live or a test site, and the versions of WordPress, PHP and the plugin. Nothing about your content, your visitors or your customers is sent. We keep the site’s address and versions with your license, so your account can show where the key is used.

A support request. When you send the Help and feedback form inside a plugin, your site sends our support desk on this website what you wrote, your name and reply address, your site’s address, and which plugin and edition you are using. If this website cannot be reached, your site emails it to us instead. Files you attach come with it. If you tick the box for a system report, that comes too: your WordPress and PHP versions, your theme and active plugins, and the plugin settings that help us find a fault.
A help link. With Extra help switched on, a question mark beside part of a screen opens the matching page of our documentation in your browser. The address it opens carries the plugin’s name, the part of the screen you asked about and the plugin’s version, so we can show the right guide.

We use a support request to answer you and to fix what you found. We do not add you to a mailing list because you asked for help.

Services your site connects to

Some features connect your site to a service you pick, such as a payment provider, a calendar, a text message service or an AI model. Each connection is one you set up yourself, with your own account at that service. The data goes from your site straight to them, under their terms and their privacy policy. We are not in the middle and we receive none of it.

This website

Server logs. Like every website, ours runs on servers that record each request: the IP address, the browser, the page asked for and the time. Our host, Hostinger, keeps these to run the site and keep it secure. One of the host’s tools also loads a small script from Hostinger’s own servers on each page.
Support chat and the contact form. When you chat with us or send the contact form, we keep what you wrote, your name and email address, any files you attach, and the conversation that follows, so we can answer and you can read it again from the private link we email you. The chat keeps a random code in your browser’s local storage so it can find your conversation again; it sets no cookie. Your IP address is used briefly to stop floods of messages and is not stored with the conversation.
Free downloads. To download a free plugin you give an email address, because the download link and the setup steps are sent to it. We keep that address, which plugin you downloaded, how many times, and when. A scrambled form of your IP address is kept to stop the download being abused; it cannot be turned back into the address. You only get news from us if you tick the box under the form. When you do, we keep the exact sentence you agreed to and the date, and every news email has a one-click unsubscribe link.
The live demo. To try a Signature plugin you give an email address, because the link back to your demo is sent to it. We make a private copy of the plugin on try.reefwp.com that only you can open, keep your address with it, and delete the copy and everything in it after three days. Emails your demo would send are kept inside the demo and never sent. Here we keep a record of the demo, which plugin, when it started and ended, and whether you later bought, for a year. You only get news from us if you tick the box, as with downloads.
Your account. If you buy a license, or someone gives you one, an account is made for you with your name and email address. Your password is stored scrambled by WordPress, and we cannot read it. The account holds your licenses, the sites that use them, and your invoices.
Forms. When you join the newsletter or ask to be told when a plugin is ready, we keep the email address you typed. The form tool records the date, the page, your IP address and your browser with each entry. We use the address only to send what you asked for, and you can ask us to remove it at any time.
Cookies. We set no advertising or analytics cookies. WordPress sets cookies only for people who sign in to the site: us, and customers signed in to their account.
Fonts and pictures. They are served from this website, not from a third party.

Buying a plugin

Payments are taken by Stripe, on Stripe’s own checkout page. Your card details go to Stripe and never reach us. Stripe tells us your name, your email address, the plan you chose, whether each payment went through, and the invoices it made, so we can make your license and renew it. Stripe keeps the payment records under its own privacy policy.

How long we keep things

Support requests: for as long as we need them to answer you and to keep a record of the fix. Ask and we will delete yours.
Newsletter, notify and download addresses: until you ask us to remove them. Unsubscribing stops the news at once.
Live demos: the demo copy and everything in it for three days; the record that you tried it for a year.
Licenses, your account and invoices: while you have a license, and afterwards for as long as tax law asks us to keep a record of a sale.
Server logs: on our host’s own schedule.

Your choices

You can ask what we hold about you, have it corrected, have it deleted, or stop any email from us. Write to support@reefwp.com and we will answer within 30 days. That applies wherever you live, including the rights that people in the European Union, the United Kingdom and California have by law.

Children

This website and our plugins are for people running a business website. They are not aimed at children under 16, and we do not knowingly collect a child’s information.

Changes to this policy

When this policy changes, the date at the top changes with it. If a change affects what we collect or how we use it, we will say so on this page before it takes effect.