Effective date: 15 August 2026
This Privacy & AI Data Addendum describes data processing specifically related to ShasTech SEO Synergy Pro, the ShasTech License Server, Customer Portal, private updater, and optional AI/Google integrations. It supplements the general ShasTech Privacy Policy.
1. License and commerce data
When you purchase or manage Pro, ShasTech may process your name, email address, company name, order/invoice details, plan, payment status, license status, expiry, site-seat usage, customer-portal activity, support communications and transaction references. ShasPay or another payment provider handles the payment flow; ShasTech receives payment status and transaction metadata needed to fulfill and reconcile the order.
2. License activation and update checks
For license activation, status checks and private update entitlement, the Pro plugin sends the license key, WordPress site URL, Pro plugin version, WordPress version and PHP version to licenses.shastech.net. These data are used to validate entitlement, manage site seats, deliver authorized updates and troubleshoot licensing issues.
3. License-key storage
The License Server stores a one-way hash of the license key for validation. Commerce-issued keys may also be retained in encrypted form so an authenticated customer can view the key again in the Customer Portal. Sensitive server secrets and stored SMTP credentials use server-side encryption where supported.
4. AI connectors
AI connectors are optional and disabled until configured by the site administrator. When you request an AI workflow, the content placed into that workflow and the generated system/user prompt are sent from your WordPress site directly to the AI provider you selected (for example OpenAI, Gemini, Anthropic Claude or DeepSeek). The provider processes that request under its own terms and privacy policy. Ollama uses a local loopback endpoint by default and can operate on the same server as WordPress.
User-supplied AI API credentials are stored encrypted in the WordPress database using a key derived from WordPress security salts. ShasTech's License Server does not need or receive those AI provider keys for normal connector operation.
5. Google integrations
If you enable Google Search Console or Google Analytics 4 integrations, OAuth credentials/tokens and requested reporting data are processed between your WordPress site and Google APIs. The connector is optional and governed by Google's applicable terms and privacy policies.
6. Logs and security
We maintain operational, authentication, billing and webhook logs needed for security, fraud prevention, troubleshooting, licensing and auditability. Where practical, the License Server uses hashed identifiers rather than retaining unnecessary raw network identifiers.
7. Email
We use your email address for account verification, password recovery, order/payment notices, license delivery notices, renewal/expiry reminders and support communications related to your purchase.
8. Retention
We retain order, invoice, payment, license and audit records for as long as reasonably needed for contractual, accounting, fraud-prevention, support and legal obligations. Security tokens are time-limited where practical. We may retain records longer when required by law or an active dispute.
9. Your choices
You can avoid AI-provider data transfers by leaving AI connectors disabled. You can disconnect Google integrations, remove site activations, and contact us about customer-account or privacy requests. Some transaction records may need to be retained for legal, accounting or fraud-prevention reasons.
10. International services
Third-party AI, analytics, hosting or payment providers may process information in countries outside Kuwait. Their handling of data is governed by their own policies and applicable law.
11. Contact
Privacy questions can be submitted through shastech.net/contact.