LEGAL

Privacy Policy

Last updated: July 2, 2026

1. Who We Are

WooLens AI ("we", "our", "us") is a WordPress plugin and web service that generates product content using AI. Our website is woolensai.site. If you have any questions about this policy, contact us at woolensai.site@gmail.com.

2. Information We Collect

We collect the following information when you use WooLens AI:

  • Account information: Your name, email address, and password (stored as a bcrypt hash — we never store your plain password).
  • Payment information: Your payment screenshot uploaded during Pro plan purchase. We do not collect or store credit card numbers.
  • Site information: The URL of your WooCommerce store when you activate the plugin.
  • Usage data: Number of AI generations per day for rate limiting purposes.
  • Plugin feedback: If you submit a deactivation reason when uninstalling the plugin, we receive that message by email.

3. How We Use Your Information

  • To provide and operate the WooLens AI service.
  • To verify your Pro plan license and enforce site limits.
  • To send transactional emails (OTP verification, payment approval/rejection, password reset).
  • To improve the plugin based on deactivation feedback.
  • We do not sell your personal data to any third party.

4. Product Images and AI Processing

When you use the Generate feature, your product image is sent to the Google Gemini AI API for processing. The image is used solely to generate product content and is not stored by us. Please review Google's Privacy Policy for how they handle API requests.

5. Payment Screenshots

Payment screenshots uploaded during Pro plan purchase are stored securely on Cloudinary. They are used only for manual payment verification by our team and are not shared with anyone else.

6. Cookies

We use a single httpOnly cookie named wl_token to keep you logged in. This cookie is required for the service to function. We do not use advertising or tracking cookies.

7. Data Retention

  • Your account data is retained as long as your account exists.
  • OTP tokens are deleted after 5 minutes (or upon use).
  • Password reset tokens are deleted after 15 minutes (or upon use).
  • You may request account deletion at any time by emailing us at woolensai.site@gmail.com.

8. Third-Party Services

We use the following third-party services:

  • Google Gemini API — AI content generation
  • Cloudinary — Payment screenshot storage
  • Gmail (Nodemailer) — Transactional emails
  • MongoDB Atlas — Database hosting
  • Vercel — Web hosting

9. Security

We take reasonable measures to protect your data, including bcrypt password hashing, httpOnly JWT cookies, IP-based login rate limiting, and HTTPS encryption. However, no system is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

WooLens AI is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date at the top of this page. Continued use of the service after changes means you accept the updated policy.

12. Contact Us

If you have any questions or requests regarding your privacy, please contact us at: woolensai.site@gmail.com