Privacy Policy

Your privacy matters to us. Learn how we collect, use, and protect your data.

Last updated: January 3, 2026

Company Information

Company Name: Croma Ideas SL

Tax ID (CIF): ESB22498083

Address: C/ Romero 3 - 06207 Aceuchal (Badajoz), España

Email: support@onetapwoo.com

What Data We Collect

When you use OneTap Login for WooCommerce, we collect the following information:

  • Email address (from Google account)
  • Full name and profile picture (from Google account)
  • IP address (for security and analytics)
  • Browser information (user agent)
  • Page URL where registration occurred

Third-Party Services

We use the following third-party services to provide our plugin functionality:

  • Google Identity Services - For authentication (subject to Google Privacy Policy)
  • Freemius - For license management and payments (subject to Freemius Privacy Policy)
  • Google Analytics - For website traffic analysis (can be disabled)
  • Tawk.to - For live chat support (subject to Tawk.to Privacy Policy)

Your Rights (GDPR)

Under GDPR, you have the following rights:

  • Right to access your personal data
  • Right to correct inaccurate data
  • Right to deletion ("right to be forgotten")
  • Right to data portability
  • Right to object to processing

Data Retention

We retain your data for specific periods based on legal and operational requirements:

  • User account data: Retained while your account is active
  • After account deletion: Data permanently removed within 30 days

Security Measures

We implement industry-standard security measures:

  • SSL/TLS encryption for data transmission
  • Restricted access to personal data
  • Regular security audits and monitoring

Contact Us

For privacy-related questions or to exercise your rights, contact us at support@onetapwoo.com

GDPR Compliance

OneTap Login for WooCommerce is fully GDPR compliant. We process data lawfully, fairly, and transparently. Users can request data deletion at any time.

Cookies

Our plugin uses the following cookies:

  • WordPress session cookies (required for functionality)
  • Google One Tap cookies (required for authentication)
  • Google Analytics cookies (optional, can be disabled)

International Data Transfers

Your data may be transferred to and processed in countries outside the EU (e.g., USA for Google services). We ensure adequate protection through Standard Contractual Clauses (SCCs) approved by the EU Commission. Third-party processors like Google and Freemius comply with GDPR requirements for international data transfers.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes via email or a prominent notice on our website.