Privacy Policy

Last Updated: 17 May 2026

This Privacy Policy (“Policy”) explains how ElthianLabs, a division of Elthian LLC, a Delaware limited liability company (“ElthianLabs”, “we”, “us”, or “our”), collects, uses, discloses, and protects information in connection with the ElthianLabs website at elthianlabs.com, the ElthianLabs API at api.elthian.com, and any plugin or software product distributed by ElthianLabs, including Elthian AI Licensing Lite and Elthian AI Licensing Pro (collectively, the “Service”). This Policy forms part of the ElthianLabs Terms of Service.

1. Company and Contact

2. Scope of This Policy

This Policy applies to information processed by ElthianLabs in connection with the Service. It does not apply to (i) the operation of your own WordPress installation or other website on which our Software is installed (which remains under your control as the site operator), (ii) third-party websites linked to from the Service, or (iii) third-party AI systems, crawlers, or platforms that read the policy declarations published by our Software on your website.

Where you install our Software on a website you operate, you are the controller of the personal information you collect from your own site visitors and customers. This Policy describes how we process information that flows to our Service or to our own websites, not how you must handle information on your site.

3. What We Collect and Why

We collect different categories of information depending on how you interact with the Service. The categories below describe what we collect, where it comes from, and why we collect it.

3.1 Information you provide directly

  • Account and purchase information. When you purchase a Pro Plugin license, register for an account, or contact us, we collect information such as your name, email address, billing address, business name (if any), and information about your transaction. This is used to provide the Service, fulfill purchases, issue invoices and License Keys, provide support, and communicate with you about your account.
  • Payment information. Payments are processed by our third-party payment processor(s). We do not store full payment card numbers on our servers. We receive limited transaction information from the payment processor, such as the last four digits of the card, card brand, transaction status, and billing address, which we use for accounting, fraud prevention, refunds, and dispute handling.
  • Communications. When you contact support, sales, or legal, we collect the contents of your communication and any attachments, so we can respond and maintain records of the interaction.

3.2 Information collected automatically by the Service

When you or our Software interacts with the Service, we automatically collect:

  • Declaration sync data. Where a site administrator has enabled Registry Sync in the Software, or manually initiated a sync, the Software transmits the following to the Service: site identifier (a hash that uniquely identifies the Customer Site), site URL, the selected AI licensing policy, policy scopes and URL overrides, a timestamp, a policy hash or policy identifier, the plugin version, the WordPress version, the PHP version, the site timezone, and a count of published content items. Post content, page content, comments, user accounts, and end-user customer data are not sent to the Service as part of policy sync.
  • License and verification data. Where you activate a Pro Plugin license, the Service receives the License Key, the domain you are licensing, and any domain verification artifacts (such as a verification token shown on your site or submitted via DNS). This information is used to authenticate the Pro Plugin installation, verify ownership of the licensed domain, and enable signing of declaration snapshots.
  • Signing and certificate data. Where a Pro Plugin installation is eligible for signing, the Service generates a Signature and an associated public Certificate over the relevant Snapshot. Certificate records are published at public URLs and may be downloaded as PDFs by anyone. These records are intended to be publicly verifiable.
  • Request metadata. When the Service receives a request from your Software, browser, or another client, we automatically collect the request IP address, user-agent string, request timestamp, request path, HTTP status, and other standard request metadata. This is used to operate the Service, enforce rate limits, detect abuse, and maintain security and integrity logs.
  • Website analytics. The ElthianLabs website may use analytics technologies that collect information such as page views, referrer, approximate location derived from IP address, device and browser characteristics, and similar non-content information, to understand how the website is used and improve it.
  • Cookies and similar technologies. The ElthianLabs website and certain Service interfaces use cookies and similar technologies for essential session functionality, security, analytics, and (where applicable) shopping cart and checkout. Where required by applicable law, we will obtain consent for non-essential cookies and offer controls to manage them.

3.3 Information from third parties

We may receive information about you from third parties, such as our payment processors (transaction information), our hosting and infrastructure providers (security and operational signals), and third-party services you authorize to integrate with the Service.

4. How We Use Information

We use the information we collect to:

  • provide, operate, maintain, secure, and improve the Service;
  • process purchases, issue and validate License Keys, manage subscriptions, and provide receipts and invoices;
  • verify domain ownership and authenticate Pro Plugin installations;
  • generate, store, and publish Snapshots, Signatures, and Certificates;
  • operate registry endpoints and policy resolution endpoints used by AI systems, crawlers, and integrators;
  • communicate with you about your account, transactions, security, updates, and material changes to the Service;
  • provide support and respond to your enquiries;
  • detect, prevent, investigate, and respond to fraud, abuse, security incidents, and violations of our Terms;
  • comply with applicable legal and regulatory obligations and respond to lawful requests from public authorities;
  • enforce our agreements and protect the rights, property, or safety of ElthianLabs, our users, or others;
  • with your consent, send you product news, marketing, and similar communications, which you can opt out of at any time.

5. Legal Bases for Processing (Users in the European Economic Area, United Kingdom, and Similar Jurisdictions)

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with similar requirements, we process personal information on the following legal bases:

  • Contract. Processing necessary to perform our agreement with you, including providing the Service, processing purchases, and supporting your account.
  • Legitimate interests. Processing necessary for our legitimate interests in operating, securing, and improving the Service, preventing fraud and abuse, and communicating with our users, balanced against your rights and interests.
  • Legal obligation. Processing necessary to comply with applicable law.
  • Consent. Where we rely on consent (such as for non-essential cookies or marketing emails), you may withdraw consent at any time.

6. How We Share Information

We do not sell personal information for monetary or other valuable consideration. We share information only as set out below.

  • Service providers. We share information with third-party service providers that perform services on our behalf, including hosting, infrastructure, payment processing, email delivery, customer support, analytics, error monitoring, and security. These providers are authorized to use personal information only as necessary to provide services to us and are subject to confidentiality and security obligations.
  • Public Service artifacts. Declarations, Snapshots, Certificates, and other registry artifacts produced by the Service are intended to be publicly verifiable and may be displayed or made accessible to anyone on the internet. You should treat anything submitted as Declaration content as public.
  • Business transfers. If ElthianLabs is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred to the relevant counter party as part of that transaction, subject to standard confidentiality protections.
  • Legal and safety disclosures. We may disclose information where we believe in good faith that disclosure is required by law, legal process, or government request, or is necessary to enforce our agreements, prevent fraud or abuse, or protect the rights, property, or safety of ElthianLabs, our users, or others.
  • With your direction. We may share information with third parties at your direction or with your consent.

7. International Data Transfers

ElthianLabs is based in the United States, and our infrastructure and service providers may be located in the United States and other countries. If you access the Service from outside the United States, your information will be transferred to, processed in, and stored in jurisdictions whose data protection laws may differ from those of your jurisdiction.

Where required by applicable law, we will implement appropriate safeguards for international transfers, such as standard contractual clauses or transfer mechanisms recognized under applicable law.

8. Retention

We retain personal information for as long as necessary to provide the Service, comply with our legal obligations, resolve disputes, prevent abuse, and enforce our agreements. The actual retention period depends on the type of information and the purpose for which it was collected.

Because the Service is, in part, a public registry of AI policy declarations and signed snapshots, certain Declarations, Snapshots, Certificates, and historical site URLs may be retained on a long-term basis to preserve the integrity and public verifiability of past declarations, even after a related account or subscription is closed. Account contact details, billing records, and operational logs are retained according to retention schedules set by reference to legal, accounting, security, and operational requirements.

We may retain anonymized or aggregated information indefinitely.

9. Security

We implement reasonable technical and organizational measures designed to protect personal information against loss, misuse, unauthorized access, disclosure, alteration, or destruction. These measures include encryption in transit, access controls, logging, environment isolation, and regular review of administrative practices. No system is completely secure, and we cannot guarantee absolute security. You are responsible for safeguarding your account credentials and your License Key, and for notifying us promptly of any suspected unauthorized use at security@elthianlabs.com.

10. Your Rights

10.1 Rights generally

Depending on where you are located and the applicable law, you may have some or all of the following rights with respect to your personal information:

  • to request access to the personal information we hold about you;
  • to request correction of inaccurate or incomplete personal information;
  • to request deletion of personal information, subject to our legal and operational retention needs;
  • to request restriction of processing in certain circumstances;
  • to object to processing based on legitimate interests;
  • to request portability of personal information you have provided to us, in a structured, commonly used, machine-readable format;
  • to withdraw consent where processing is based on consent;
  • to lodge a complaint with a supervisory authority.

To exercise these rights, contact us at privacy@elthianlabs.com. We will respond within the time required by applicable law. We may need to verify your identity before fulfilling certain requests, and we may decline requests where required or permitted by law, such as where a request is manifestly unfounded, excessive, or would require us to violate the rights of others.

10.2 Notice for California residents

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”), provides you with specific rights regarding your personal information, including the right to know what personal information we have collected about you, the right to request deletion or correction, the right to opt out of “sales” or “sharing” of personal information as those terms are defined under the CCPA/CPRA, and the right to limit the use of certain sensitive personal information. We do not sell personal information for money, and we do not knowingly “share” personal information for cross-context behavioral advertising as defined under the CCPA/CPRA. To exercise your rights, contact privacy@elthianlabs.com. We will not discriminate against you for exercising your rights.

10.3 Notice for residents of Virginia, Colorado, Connecticut, Utah, and other U.S. states with comprehensive privacy laws

If you are a resident of a U.S. state with a comprehensive consumer privacy law, you may have rights similar to those described in Sections 10.1 and 10.2, including the right to access, correct, delete, and obtain a copy of your personal information, and to opt out of certain processing such as targeted advertising, sale, or profiling that produces legal or similarly significant effects. To exercise these rights, contact privacy@elthianlabs.com.

10.4 Notice for users in the European Economic Area and the United Kingdom

If you are located in the European Economic Area or the United Kingdom, you have the rights described in Section 10.1 under the EU and UK General Data Protection Regulation. You also have the right to lodge a complaint with the data protection authority in your country.

11. Children

The Service is intended for businesses, developers, and adult website operators. The Service is not directed to children under the age of sixteen (16), and we do not knowingly collect personal information from children under sixteen. If you believe a child has provided personal information to us, contact privacy@elthianlabs.com and we will take appropriate steps to delete it.

12. Third-Party Services and Links

The Service may contain links to, or interoperate with, third-party websites, AI platforms, crawlers, and services not operated by ElthianLabs. This Policy does not apply to those third parties. We encourage you to review the privacy notices of any third-party service before providing them with personal information.

13. Do Not Track

Our websites do not currently respond to browser “Do Not Track” signals in any specific way, given the lack of an industry standard on how such signals should be interpreted. We do honor applicable consent and opt-out signals as required by law.

14. Changes to This Policy

We may update this Policy from time to time to reflect changes in the Service, our practices, or applicable law. When we make material changes, we will update the “Last Updated” date and, where appropriate, provide additional notice (such as by email or in-Service notification). Your continued use of the Service after the update takes effect constitutes acceptance of the updated Policy.

15. How to Contact Us

For privacy queries, complaints, or requests, contact:

Privacy contact: privacy@elthianlabs.com
Postal: Elthian LLC, 8 The Green, 7971, Dover, Delaware. 19901

Shopping Cart
Scroll to Top