Privacy Policy

SSF Media Manager Pro licensing, checkout and support

Effective 16 October 2026 (Asia/Karachi)

After an administrator explicitly consents, the plugin validates the licence key before creating an activation, then sends the key and a hashed site label to https://api.lemonsqueezy.com/v1/licenses/ for activation. The label derives from the site URL and WordPress site identifier; hashing is not anonymity. Later validation/deactivation send the key and saved instance ID. Guarded activation recovery sends the key and the known instance ID, or the matching ID identified through merchant/support review, to verify and release that site attempt. The service sees ordinary network information. These requests verify activation and update/support eligibility; they do not send media contents, attachment metadata or membership CSV files.

The customer site stores the key, instance, consent, site/configuration binding, licence/order/variant identifiers, status, timestamps and entitlement end date without WordPress option autoloading. The key is not displayed in settings; application-level encryption is not claimed. Successful checks are cached up to one hour; a due/explicit network or validation failure blocks Pro without offline grace until successful retry. Licence deactivation releases the remote instance and removes local state after verified release. Ordinary plugin deactivation does not erase licence state, media or views.

Before a new activation request, Pro 0.2.0 also stores a pending activation record in the customer-site database without autoloading. It contains the key, consent, hashed site/configuration binding, variant/order/licence identifiers, entitlement end and creation time; a returned instance ID is retained when available. An uncertain response blocks another activation so it cannot consume another plan slot. Pending records remain until safely resolved. Recovery verifies the key, product, site label and matching instance before release; it does not create an activation. If no instance can be identified, support must confirm merchant-side state before controlled local repair. Give support the purchase reference and displayed site label, never the licence key, passwords, OTPs or private recovery codes.

Saved views are stored per administrator/site. CSV data is processed on that site; classic CSV previews remain for up to ten minutes and are consumed on apply. Pro 0.2.0 also stores local bulk-metadata previews, collection-parent relationships, bounded change history, larger CSV job plans/progress and exact-duplicate scan reports. Depending on the tool, records can include attachment IDs, titles, captions, descriptions, image alt text, collection states, original/proposed URLs and local paths, file hashes and sizes, administrator/site bindings, timestamps, and before/after values used for guarded undo or recovery. An unfinished operation whose original owner loses administrator access may be recovered by another eligible administrator; the recovering account is recorded.

Filename operations create local renamed copies and retain old originals and related files. Their separate local receipts record copy progress and before/after file metadata for guarded undo/recovery. Undo restores file metadata without deleting the new copies; ordinary plugin deactivation does not erase stored media, collection relationships, saved views or retained history/recovery records. Protect database/file backups and this stored data. Tool-specific access/preview expiry does not promise immediate physical deletion from databases, backups or disk. Unresolved recovery records are not automatically pruned. These media workflows do not send media contents, attachment metadata or CSV files to Lemon Squeezy.

Lemon Squeezy provides checkout, payment, order and download services. We receive necessary order/entitlement information for fulfilment, updates, refunds and support. Messages contain information you choose to send. Necessary records follow the existing retention policy; no fixed deletion deadline or local-only processing guarantee is promised.

Read Lemon Squeezy Privacy, its Buyer Terms and the Pro terms. For applicable information requests contact support@ssfllc.com or Murshid Farm Industries, 9 Km Sheikhupura Road, Opposite Millat Tractor, Lahore 54600, Pakistan. Do not send passwords, OTPs or full card details. VisaFile scope and sensitive-document rules remain unchanged.

SSF Chat Connect — local website data, licensing and support

Effective 19 October 2026 (Asia/Karachi)

SSF Chat Connect Free opens a configured WhatsApp contact link. Pro adds local department/routing and reviewed enquiry workflows. Configured contact numbers are public in their links; choosing a contact opens WhatsApp under its own service/privacy rules. The visitor reviews and sends the message there. A local click/form is not proof of WhatsApp delivery. No native WhatsApp inbox, cloud/shared inbox or AI service is supplied by these plugins.

On a customer website, the enquiry basket stores product/variation identifiers and quantities in the visitor’s browser. Optional enquiry forms and records, manual follow-up status, aggregate reports, email and HTTPS webhooks require the site administrator’s settings and suitable visitor information/consent; storage, reporting and notifications start off. If enabled, submitted enquiries may be stored in that WordPress site or delivered to the explicitly configured email recipient/endpoint. Temporary hashed network identifiers limit abuse; local reports count activity without visitor identifiers. The website owner controls its recipients, retention, privacy export/erasure and backups. These customer-site enquiry datasets are not SSF’s own dataset and are not sent to SSF merely because the plugin is installed. A customer can choose to share redacted diagnostic information with support; do not send unnecessary enquiry contents or credentials.

Licence operations are a separate external service enabled by explicit administrator consent. The plugin validates a purchased key before requesting a new activation. Activation sends the key and a site-derived hashed label to https://api.lemonsqueezy.com/v1/licenses/; later validation and release use the key and saved instance identifier. The label derives from the site URL and WordPress site identifier; hashing does not promise anonymity. The service sees ordinary request/network information. These requests check updates/support entitlement and do not include customer enquiries, baskets, configured contact lists or message contents.

The customer site stores the key, consent, instance, site/configuration binding, licence/order/variant identifiers, plan, status and timestamps in non-autoloaded WordPress options. The key is stored without application-level encryption, is not displayed back in the password-type field and is not included in configuration exports. Database/site administrators and backups must protect it. Configuration exports can still contain contact numbers and notification endpoints and should remain private. Successful service recognition is cached for up to one hour for administrator checks.

Before activation, a durable non-autoloaded pending attempt records the key, consent, site/configuration binding, licence/order/variant information, allowance, entitlement end and creation time; an instance ID is retained when known. An uncertain outcome blocks another activation to avoid another slot allocation. Recovery verifies the product, key, site label and matching instance before release and creates no activation. Pending/allocated proof remains until verified release, including during uninstall; no automatic pending-record deletion deadline is promised. If a matching instance cannot be identified, support must review merchant state rather than the customer guessing an ID or deleting proof.

Ordinary plugin deactivation retains configuration, enquiry records and licence state. Optional explicit uninstall cleanup can remove local configuration/records, but allocated/pending licence proof remains for reconciliation. Uninstall does not contact the licensing service or silently release a remote slot. Explicit verified licence deactivation releases its service instance and clears local licence state; failed release keeps information needed for a safe retry. Tool access/preview expiry does not promise immediate physical deletion from databases, files or backups.

Chat Connect activation manages updates/support services; it never gates the local button, routing, forms or existing enquiries. Configured local tools continue after expiry, licence deactivation or licensing/network failure. New service activation/moves require a current key and available slot. No automatic updater or plugin customer-download endpoint is included. Purchased Pro ZIP and guide delivery is handled separately through the authenticated Lemon Squeezy customer record; Free is obtained separately from the SSF website. These Chat Connect conditions do not change Media Manager’s distinct periodic-check/no-offline-grace terms.

When a customer completes a Chat Connect Pro purchase, SSF receives necessary order/entitlement information for fulfilment, updates, refunds and support through Lemon Squeezy. Support messages contain information the sender chooses to provide. Only necessary records are kept according to the policy’s retention grounds and applicable obligations; no blanket fixed deletion deadline or local-only-processing guarantee is promised. Read Lemon Squeezy Privacy, its Buyer Terms, and the Chat Connect Pro terms. For applicable information requests contact support@ssfllc.com. Do not send keys, passwords, OTPs or card data.