Privacy Policy
Last updated 29 July 2026
BossMage is operated from the United Kingdom ("we"). This policy covers two things: what the BossMage plugins (BundleBoss and AddOnBoss) do with data on the stores that install them, and what we collect from you as a customer or visitor.
The plugins on your store
The free BossMage plugins do not collect, store or transmit any personal data. In particular:
- They make no external requests, set no cookies, and contain no telemetry, analytics or tracking of any kind.
- Your customers' selections (which products, quantities and options they picked) are stored only as part of their cart and order, which is standard WooCommerce order data under your control. It is removed whenever you erase the order.
- Shareable build links encode choices in the URL itself. Nothing is stored on your server and the links contain no personal information. Like any URL, they may appear in standard server logs.
For data on your store, you are the data controller and the plugin acts entirely within your WordPress installation.
What we collect from you
If you buy a Pro licence, the purchase is processed by Freemius, our reseller and merchant of record. We do not see your payment card details. Freemius shares with us the information needed to provide the licence and support: your name, email address, site URL and licence details. Their privacy policy is at freemius.com/privacy.
If you email support, we keep the correspondence so we can help you over time.
This website is hosted on Cloudflare Pages. We use Cloudflare Web Analytics, which is privacy-first and cookieless: it counts page views and referrers so we can see what is useful, without cookies and without collecting any personal data, so there is no consent banner to click. Cloudflare's standard server logs also apply (see Cloudflare's privacy documentation).
Why we are allowed to use this data
- Contract: providing your licence, updates and support.
- Legitimate interest: keeping support history so we do not ask you the same questions twice.
How long we keep it
Licence and purchase records are kept for the life of the licence plus the period UK accounting law requires. Support emails are kept while they remain useful for supporting you.
Your rights
You can ask us to access, correct, export or delete your personal data, and you can complain to the UK Information Commissioner's Office. Email [email protected] and we will respond within 30 days.
Changes
If this policy changes in a way that matters, we will say so plainly on this page with a new date at the top.