Privacy Policy & Terms of Service

Part I — Privacy Policy

1. Scope and privacy roles

This Privacy Policy applies to wpchef.app, WPChef WordPress plugins, WPChef mobile applications, api.wpchef.app, licensing and activation systems, cloud connectors, documentation, support, and related services (collectively, the "Services"). It does not govern third-party websites or services that have their own privacy policies.

For account, purchase, license, website, and direct support information, WPChef generally acts as the business or data controller. When a Customer uses our Services to process End User information—such as attendance records, form submissions, messages, files, or employee data—the Customer determines why and how that information is processed and is generally the business or controller. WPChef acts only as a service provider or processor to the extent the information reaches WPChef-hosted systems.

Many WPChef plugin records remain in the Customer's own WordPress database and hosting environment. The Customer controls those records and must respond to End User requests. WPChef may assist a Customer when required by law or contract, but WPChef cannot directly access or delete information that exists only on the Customer's website.

2. Information we process

The information processed depends on the Services and features you choose:

• Account and contact information: name, business name, email address, telephone number, billing contact, account role, support correspondence, and authentication information.
• License and installation information: license key and status, plan, Agency ID or account identifier, domain or site URL, product name, plugin/app version, WordPress and PHP versions, feature limits, activation history, and basic diagnostic information.
• Payment and transaction information: purchased product, subscription term, amount, currency, invoices, tax information, and payment status. Full payment-card details are ordinarily handled by our payment processor, not stored by WPChef.
• Website and technical information: IP address, browser, device type, operating system, referring page, pages or features used, approximate location derived from IP, timestamps, cookie identifiers, security logs, and error or performance data.
• Support information: messages, screenshots, files, diagnostic reports, temporary access details you voluntarily provide, and actions taken to resolve a request. Please remove personal, confidential, or regulated data that is not needed for support.
• Customer Content: form configurations and submissions, uploaded files, generated documents, exports, integration mappings, directory or spreadsheet selections, messages, and other information a Customer or End User chooses to process through a WPChef product.
• Attendance and workforce information: employee or WordPress user ID, name, department, role, shift, clock-in/out and break times, notes, adjustments, attendance status, IP address, device/browser evidence, and related reports. Depending on the product and settings, this may also include GPS coordinates, readable addresses, route data, selfie images, face-verification templates or match results, and workplace messages.
• Connected-account information: OAuth tokens, provider account identifiers, account email, authorized permissions, selected file/folder/spreadsheet identifiers, connection status, and the data needed to perform a Customer-requested transfer or synchronization through Google or Dropbox.

We receive information directly from Customers and End Users, automatically from devices and Services, from a Customer's WordPress installation, from connected providers at the user's direction, and from vendors that support payment, hosting, security, analytics, communications, or customer support.

3. Categories of personal information

The following table also serves as our U.S. state privacy disclosure for categories processed during the preceding 12 months. Actual processing varies by product and configuration.

4. How and why we use information

We use information to provide and authenticate the Services; activate and enforce licenses, plans, and quotas; perform Customer-requested integrations; process purchases and renewals; provide updates and support; communicate service and security notices; prevent fraud, misuse, and unauthorized access; troubleshoot and improve reliability; comply with law; enforce agreements; and protect WPChef, Customers, End Users, and the public.

Where applicable law requires a legal basis, we rely on performance of a contract, legitimate interests in operating and securing the Services, compliance with legal obligations, and consent for optional processing such as nonessential cookies, precise location, biometric processing, or connected-account access. A Customer may rely on a different legal basis for its processing of End User data and is responsible for identifying and documenting that basis.

5. Google user data and Google APIs

When you connect a Google account, WPChef requests only the permissions reasonably needed for the feature you select. Depending on the feature, WPChef may access Google account identifiers, email address, Drive or spreadsheet metadata, selected spreadsheet or folder identifiers, and data necessary to create, list, select, or write to the Google Sheet or Drive location you authorize. WPChef may securely store access and refresh tokens so the connection can continue to operate until it is disconnected or revoked.

We use Google user data only to provide or improve the user-facing integration you requested—for example, listing available spreadsheets, allowing an authorized administrator to select a destination, or writing submitted data to that destination. We do not use Google user data for advertising, credit decisions, surveillance, or sale to data brokers. We do not permit human access to Google user data except with the user's affirmative permission for support, when necessary to investigate abuse or a security incident, when required by law, or when data has been aggregated and de-identified for permitted internal operations.

You may disconnect Google from the applicable WPChef settings and may also revoke access through your Google Account permissions. Disconnecting stops future access but does not automatically remove data already written to your Google files or retained in your WordPress database. Contact us to request deletion of tokens or Google-derived data held by WPChef.

6. Dropbox user data

When you connect Dropbox, WPChef may receive and securely store OAuth tokens, account identifiers, account email, authorized permissions, selected folder or file metadata, and content necessary to upload, retrieve, organize, or synchronize files as directed by you. WPChef accesses, stores, transfers, and processes Dropbox data only according to the user's instructions and only as needed for the enabled feature.

We do not sell Dropbox user data or use it for advertising. You may disconnect Dropbox in the applicable WPChef settings or revoke the app through Dropbox. Disconnecting does not delete files already placed in Dropbox or data retained on your WordPress site. Dropbox's own handling of data is governed by the Dropbox Privacy Policy.

7. Biometric, selfie, and precise location notice

Some WPChef products may offer optional face verification, selfie evidence, browser GPS evidence, geofencing, or route tracking. These features are disabled unless configured by the Customer and may be subject to biometric, surveillance, employment, labor, or location-privacy laws.

• Face data is used only to support the Customer-requested verification feature, prevent attendance fraud, and secure the applicable account or workflow.
• Precise location is used only for the Customer-enabled attendance, workplace, geofencing, route, or evidence function.
• WPChef does not sell biometric information or precise location, use it for targeted advertising, or use it to make employment decisions.
• Any match score or automated verification result is evidence for the Customer to review; WPChef does not make a final hiring, firing, payroll, disciplinary, or other legally significant decision about an End User.

Before enabling these features, the Customer must provide all required notices, obtain valid prior consent or written release, offer any legally required alternative, limit access, establish a compliant retention and destruction schedule, and ensure that use is lawful in each applicable jurisdiction. If WPChef-hosted systems process this data, WPChef processes it only on the Customer's documented instructions and deletes or de-identifies it when no longer reasonably necessary, when the Customer validly requests deletion, or when required by law, subject to limited security backups and legal obligations.

8. How we disclose information

We may disclose information to:

• vendors that provide hosting, infrastructure, security, analytics, error monitoring, email, support, payment, tax, or professional services, under obligations appropriate to their role;
• Google, Dropbox, mapping providers, or another integration selected and authorized by the Customer;
• the Customer and its authorized administrators or users;
• government authorities or other parties when reasonably necessary to comply with law, legal process, protect rights and safety, investigate fraud or abuse, or enforce our agreements; and
• a successor in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, subject to applicable notice or consent requirements.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising, and we do not process personal information for targeted advertising. We do not knowingly sell or share personal information of anyone under 16. We do not use or disclose sensitive personal information for purposes unrelated to providing, securing, or supporting the Services selected by the Customer.

9. Retention and deletion

We keep personal information only as long as reasonably necessary for the purposes described here, including active accounts and connections, licensing, support, security, fraud prevention, tax, accounting, dispute resolution, and legal compliance. Retention depends on the type of data, the Customer's configuration, contract requirements, legal limitation periods, and whether the information is stored by WPChef or only on the Customer's systems.

• WordPress data: Deactivation generally does not delete plugin data. Deletion on uninstall depends on the plugin's uninstall setting and documentation. The Customer is responsible for exports, backups, retention settings, and deletion from its own database.
• OAuth connections: Access and refresh tokens are retained while needed to maintain an authorized connection and are deleted or rendered unusable after disconnection, revocation, account closure, or a valid deletion request, subject to limited backup retention and legal requirements.
• License and transaction records: These may be retained after termination when needed for tax, accounting, fraud prevention, enforcement, or legal compliance.
• Backups and security logs: Residual copies may remain for a limited period in protected backups or logs and are isolated from ordinary use until overwritten or deleted.

10. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information, which may include HTTPS/TLS, access controls, token protection, hashed credentials or session tokens, secure development practices, logging, and restricted administrative access. No system is completely secure, and we cannot guarantee that unauthorized access, loss, or misuse will never occur.

Customers are responsible for secure hosting, HTTPS, WordPress and plugin updates, strong credentials, least-privilege roles, backups, endpoint security, and protecting API keys and account access. Customers should not send passwords, private keys, full databases, regulated health information, or sensitive employee data through ordinary support channels unless specifically requested through an approved secure method.

11. Cookies and similar technologies

Our website may use necessary cookies for security, sessions, preferences, forms, and account functions, plus limited analytics technologies to understand performance and use. Where required, nonessential cookies are used only after consent. You may manage cookies through our consent controls, when displayed, and your browser settings. Disabling necessary cookies may prevent parts of the Services from working.

12. Your privacy rights

Depending on where you live and subject to legal exceptions, you may have the right to confirm whether we process your personal information; access or obtain a portable copy; correct inaccuracies; request deletion; restrict or object to processing; withdraw consent; opt out of sale, targeted advertising, or certain profiling; and appeal a denied request. You also have the right not to receive discriminatory treatment for exercising a privacy right.

To submit a request, email support@wpchef.app, use the Contact/Support form on wpchef.app, or write to the postal address in the Contact section. State the right you wish to exercise and provide enough information for us to identify the relevant account or record. We may verify your identity and authority before acting. An authorized agent may submit a request, but we may require proof of authorization and identity. To appeal a decision, reply to our response with the subject "Privacy Appeal." If applicable, you may also complain to your local data protection authority or state attorney general.

If your request concerns information controlled by a WPChef Customer or stored only on that Customer's WordPress site, first contact that Customer. If the Customer asks us for assistance and the data is available to WPChef, we will reasonably assist as required by applicable law or contract.

13. International data transfers

WPChef and its service providers may process information in the United States and other countries where privacy laws may differ. Where required, we use an approved transfer mechanism or other appropriate safeguard. By directing a transfer to Google, Dropbox, or another provider, the Customer acknowledges that the provider may process information in locations described in its own terms and privacy policy.

14. Children

The Services are intended for businesses and authorized adult users, not children under 13, and we do not knowingly collect personal information directly from children under 13. A person under the age of legal majority may use the Services only through an organization that has obtained all legally required parental consent and has confirmed that the use is lawful. Do not use WPChef Google-connected features as a child-directed application. Contact us if you believe a child provided personal information to WPChef without proper authorization.

15. HIPAA and regulated information

WPChef products are not automatically covered by HIPAA, a Business Associate Agreement, or another sector-specific compliance framework merely because they are used by a healthcare organization. Unless WPChef and the Customer have signed a separate applicable agreement, including a Business Associate Agreement where required, the Customer must not transmit protected health information to WPChef-hosted connectors, support systems, or other Services. A separate signed agreement controls if it expressly conflicts with this page.

Part II — Terms of Service

16. Acceptance and authority

By accessing or using the Services, purchasing or activating a license, creating an account, connecting a third-party account, or clicking to accept these Terms, you agree to this combined Privacy Policy and Terms of Service. If you use the Services for an organization, you represent that you have authority to bind it, and "you" includes that organization. If you do not agree, do not use the Services.

You must be at least 18 years old and legally capable of entering a contract. The Services are offered primarily for business use. Additional order forms, product-specific terms, data processing agreements, Business Associate Agreements, or open-source licenses may apply. A signed order form or agreement controls over these Terms for the specific subject it addresses.

17. The Services and third-party platforms

WPChef provides WordPress plugins, mobile applications, licensing and activation, cloud connectors, APIs, updates, documentation, and support. Features may require WordPress, compatible themes or plugins, a supported device, internet access, or an account with Google, Dropbox, a mapping provider, or another third party.

Third-party services are governed by their own terms, privacy policies, quotas, security controls, and availability. WPChef does not control and is not responsible for a third party's service, changes, suspension, data handling, outage, API limit, account decision, or compatibility. Google, Dropbox, WordPress, and other third parties do not sponsor or endorse WPChef unless expressly stated by them.

18. Software licenses, subscriptions, and fees

Open-source components are licensed under the license included with that component, and that license controls the code it covers. A paid WPChef license may separately govern access to updates, support, hosted connectors, mobile features, quotas, premium functionality, or account services. Except for rights expressly granted, WPChef and its licensors retain all rights in the Services.

License limits may apply by site, domain, installation, account, agency, connected account, mobile user, transaction, submission, API call, storage amount, or plan. You may not bypass, disable, falsify, or interfere with license validation, quotas, rate limits, usage reporting, access controls, or security mechanisms. Unless the product expressly allows it, a license may not be shared between unrelated organizations or resold.

Prices, billing cycles, included usage, overages, renewal terms, and taxes are shown at checkout, in an order form, or in your account. Recurring plans automatically renew for the stated billing period until canceled. You authorize the applicable charges and are responsible for taxes other than taxes on WPChef's income. Cancellation prevents a future renewal but does not ordinarily produce a prorated refund. Fees are non-refundable except as stated in a product-specific refund policy, order form, or applicable law. If a checkout or signed order contains different payment or refund terms, those terms control.

19. Accounts and authorized access

You must provide accurate information, keep credentials and license keys confidential, promptly remove access for unauthorized users, and notify us of suspected misuse or compromise. You are responsible for activities performed through your accounts and installations, except to the extent directly caused by WPChef's breach of these Terms. WPChef may require verification before changing account ownership, connected accounts, billing details, or administrative access.

20. Customer Content and instructions

You retain ownership of Customer Content. You grant WPChef a limited, nonexclusive right to host, transmit, copy, transform, and otherwise process Customer Content only as needed to provide, secure, support, and maintain the Services, comply with your instructions, and meet legal obligations.

You represent that you have all rights, notices, consents, authorizations, and lawful bases needed for Customer Content and for any instruction you give WPChef. You are responsible for the accuracy, quality, legality, retention, backup, and use of Customer Content and for responding to End Users. WPChef is not responsible for a Customer's employment, payroll, disciplinary, healthcare, eligibility, legal, or other business decision.

21. Customer privacy and compliance responsibilities

You must use the Services in compliance with applicable privacy, biometric, employment, wage-and-hour, workplace monitoring, accessibility, consumer protection, records-retention, export, and other laws. In particular, you are responsible for:

• providing a clear privacy notice to employees, contractors, form respondents, and other End Users;
• obtaining prior consent or a written release for precise location, facial recognition, biometric identifiers, selfies, monitoring, messages, and other sensitive processing whenever required;
• configuring lawful retention, access, deletion, and review procedures;
• providing any required non-biometric or non-location alternative;
• reviewing attendance calculations, time zones, shifts, overtime, exceptions, exports, and automated outputs before relying on them for payroll or employment action; and
• executing a separate data-processing agreement or Business Associate Agreement when legally required before transmitting regulated data to WPChef-hosted Services.

22. Connected accounts, quotas, and automated transfers

You authorize WPChef to act on your instructions when you connect Google, Dropbox, or another provider. This may include listing permitted files or folders, creating a destination, or writing, uploading, retrieving, or synchronizing selected Customer Content. A WordPress installation may be limited to one connected account per provider unless the applicable product states otherwise.

Transfers may be delayed, queued, retried, rate-limited, or rejected because of plan limits, central or third-party quotas, provider outages, invalid permissions, expired tokens, file changes, or security controls. You are responsible for confirming that each transfer completed and that the correct destination and permissions are configured. WPChef does not guarantee uninterrupted third-party capacity or immediate delivery.

23. Updates, compatibility, and support

We may add, modify, deprecate, or discontinue features; release security, compatibility, or maintenance updates; and change supported software requirements. We will provide notice of a material reduction to a paid Service when reasonably practicable. You are responsible for testing updates in a suitable environment, maintaining backups, and using supported versions of WordPress, PHP, browsers, mobile operating systems, dependencies, and third-party APIs.

Support scope and response targets depend on the applicable plan or order. Support does not include custom development, third-party debugging, data restoration, legal advice, or guaranteed resolution unless expressly included in writing.

24. Acceptable use

You may not use the Services to violate law or another person's rights; process data without authority; introduce malware; send spam; harass, discriminate, surveil, or deceive; access another account or system without permission; probe or disrupt security; overload the Services; evade quotas or license controls; scrape or reverse engineer hosted Services except where law expressly permits; or use Google, Dropbox, biometric, location, or other data for an undisclosed or incompatible purpose.

You may not use the Services for high-risk activities where failure could reasonably lead to death, serious bodily injury, or substantial physical or environmental damage. You may not represent an automated result as professional legal, medical, tax, payroll, or employment advice.

25. Intellectual property and feedback

WPChef names, logos, designs, documentation, hosted software, APIs, and non-open-source materials are protected by intellectual property laws. These Terms do not grant permission to use WPChef branding or imply endorsement. If you provide feedback, you grant WPChef a worldwide, perpetual, irrevocable, royalty-free right to use it without restriction or compensation, provided we do not publicly identify you as its source without permission.

26. Suspension and termination

You may stop using the Services and cancel a recurring plan through the available account or support process. We may suspend or terminate access for nonpayment, security risk, unlawful use, material breach, harm to the Services or others, third-party platform requirements, or legal obligations. Where reasonable, we will provide notice and an opportunity to cure.

After termination, hosted functionality, updates, support, connectors, mobile access, or license-dependent features may stop. You should export Customer Content before termination. Locally stored WordPress data may remain until the Customer deletes it under the plugin settings and documentation. Sections that by their nature should survive—including ownership, payment obligations, disclaimers, liability limits, indemnity, disputes, and lawful retention—will survive.

27. Disclaimers

To the fullest extent permitted by law, the Services are provided "as is" and "as available." WPChef disclaims implied warranties of merchantability, fitness for a particular purpose, title, non-infringement, and any warranty arising from course of dealing or usage of trade. We do not warrant that the Services will be uninterrupted, error-free, completely secure, compatible with every environment, or that every transfer, calculation, verification, report, or third-party integration will be accurate or successful.

You are responsible for reviewing outputs, maintaining independent backups, and determining whether the Services meet your legal, technical, and operational requirements. Some jurisdictions do not allow certain warranty exclusions, so some exclusions may not apply to you.

28. Limitation of liability

To the fullest extent permitted by law, WPChef, FLICKERTECH, and their owners, officers, employees, contractors, affiliates, and licensors will not be liable for indirect, incidental, special, exemplary, punitive, or consequential damages, or for loss of profits, revenue, goodwill, business opportunity, data, or use, arising from or related to the Services, even if advised that such damages were possible.

To the fullest extent permitted by law, their total aggregate liability arising from or related to the Services will not exceed the greater of (a) the amount you paid WPChef for the affected Service during the 12 months before the event giving rise to the claim or (b) US $100. These limits do not apply where liability cannot legally be limited.

29. Indemnification

To the extent permitted by law, you will defend, indemnify, and hold harmless WPChef, and their owners, officers, employees, contractors, affiliates, and licensors from third-party claims, damages, penalties, losses, and reasonable costs arising from Customer Content, your instructions, your End Users, your violation of law or these Terms, or your failure to obtain required notices, permissions, consents, or agreements. WPChef will promptly notify you of a covered claim and reasonably cooperate at your expense. You may not settle a claim in a way that admits fault by or imposes an obligation on WPChef without our prior written consent.

30. Governing law and disputes

Before filing a formal claim, each party will give the other written notice describing the dispute and requested resolution and will attempt in good faith to resolve it for at least 30 days. These Terms are governed by the laws of the State of Texas, without regard to conflict-of-law rules. Unless applicable consumer law requires otherwise, the state and federal courts having jurisdiction over Mission, Texas will have exclusive jurisdiction, and each party consents to personal jurisdiction and venue there.

31. Changes and general terms

We may update this page to reflect changes in law, the Services, or our practices. We will change the "Last updated" date and provide additional notice when required. If a change materially expands our use of Google user data or other sensitive information, we will request any consent required before applying the new use. Continued use after revised Terms become effective constitutes acceptance where permitted by law.

These Terms, together with applicable product terms and signed agreements, are the entire agreement about the Services. If a provision is unenforceable, it will be modified to the minimum extent necessary and the remaining provisions will continue. Failure to enforce a provision is not a waiver. You may not assign these Terms without our consent; WPChef may assign them in connection with a reorganization, merger, acquisition, or sale of assets, subject to applicable privacy obligations. The parties are independent contractors, and no third party is a beneficiary.

Contact us