Privacy Policy

Effective date: 12 October 2026 (live chat added; previous version 25 September 2026). This policy replaces our privacy notice of May 2023.

This policy explains what personal information Sales Igniter collects, why we collect it and what you can do about it. It covers rentalbookingsoftware.com, our live demos (demo.rentalbookingsoftware.com and demo2.rentalbookingsoftware.com), our client portal at clients.rentalbookingsoftware.com, and the license and update checks our WordPress plugins and Magento extensions make to this site.

Contents: 1. Who we are · 2. What we collect and why · 3. Our software on your site · 4. Cookies and similar technologies · 5. International transfers · 6. Security · 7. Your rights · 8. Children · 9. Changes to this policy · 10. Contact us

1. Who we are

Sales Igniter makes rental and booking software: Rentals & Bookings for WooCommerce, rental extensions for Magento 2 and, soon, apps for Shopify. For the personal information described in this policy we are the “controller”, which means we decide how it is used and are responsible for it.

• Business: I.T. Web Experts, doing business as Sales Igniter
• Address: 1130 E Clark Ave, STE 150-252, Santa Maria, CA 93455, USA
• Email: [email protected]
• Phone: (805) 242-1135

2. What we collect and why

Buying a license

When you buy from our store, we collect your name, email address and billing address, plus the IP address your order came from. We use them to process the order, deliver your downloads and license keys, send receipts, invoices and renewal reminders, run subscriptions and monthly licenses, and keep the accounting and tax records the law requires. Each order is linked to a customer account where you can download files, manage your license activations and open support tickets. If you set a password, we store only a scrambled (hashed) version of it.

Card and PayPal details go directly to Stripe or PayPal. We get confirmation of the payment and a transaction reference; we never see or store your full card number. When you download a file, we log the date, the file, your IP address and your browser, which helps us spot license abuse.

Your license and the sites it runs on

Each license key is tied to your account. When you activate a license, we record the address (URL) of the site you activated it on, so you can see and manage activations in My Account. Section 3 lists exactly what our software sends.

Support tickets

Support runs through the help desk in My Account. A ticket holds your name, email address, your messages and any files you attach, plus the IP address, browser and operating system you used to open it. If you reply to a ticket notification by email, your reply is added to the ticket. We link tickets to your purchases and licenses so we can see what you own.

If you give us login details for your site in a ticket’s “private credentials” field, we store them encrypted and only our support staff can see them. Please change those passwords once we’re done.

When we log in to your site to help, we may see data about your own customers. We look only at what we need to solve the problem you asked about and we don’t use it for anything else.

Live chat

When you use the chat on this site we keep what you write, the files you send, the name and email address you give us, and the time of each message, so our team can answer you and pick the conversation up later, in the chat or by email. If you are logged in, the chat is linked to your account.

The chat sets a cookie (silc_vid) that recognises this browser for up to 12 months, so your conversations are still there on your next visit. It is needed for the chat to work. It is set when you start a chat or, if the chat may note your visit (see below), on your first page view. The cookie holds only a random code.

The chat also notes the pages you visit, the site that sent you and your approximate location (country and city, worked out from your IP address on our own server and rounded to about 10 km), so our team can see where you need help. It does so when you agree to analytics cookies, where no consent is needed and you have not said no, or when you start a chat: the chat says “By chatting you agree to our chat terms”, with a link to read them. If you declined cookies, starting a chat does not change that; you can still click Agree in the chat terms. Global Privacy Control counts as a no until you agree or start a chat. You can withdraw in the chat terms at any time. Your answer is kept in a cookie (silc_terms) for up to 12 months. Without consent none of this is recorded, and your IP address itself is never stored.

If you leave before we answer, our reply is sent to the email address you gave us. Every email has a link to stop further emails about that conversation. Our emails have no tracking pixels.

An AI assistant may answer first. Your messages are then sent to an AI provider (OpenRouter and the company hosting the model) to write the answer. We ask them not to keep or train on your data. You can ask for a person at any time.

We keep page views for 30 days, visits for 90 days and conversations for 24 months after the last message, then delete them. Raw emails are deleted after 30 days.

You can ask for a copy of everything the chat holds about you, or for all of it to be deleted, with the contact details on this page.

Contact, custom project, affiliate and feature request forms

• Contact form: name, email, phone, company and your message, plus an optional newsletter box that stays unticked unless you tick it.
• Custom project form: the same, plus your website, country and state, budget, the features you need and any file you upload.
• Affiliate application: name, email, company and where you plan to promote us. Referrals are tracked with a referral link that stores a cookie in the visitor’s browser, so a purchase can be credited to the affiliate who sent them.
• Feature requests: name, email, platform and your idea. If we approve a request, we publish it on our roadmap page with your first name only. Customers who are signed in and hold a license can vote on requests.

Form entries are saved on our server and emailed to us so we can reply. We don’t add you to a mailing list because you used one of these forms. The one exception is the newsletter box on the contact form: tick it and we email you a confirmation link, as described below.

Newsletter, free plugin and free contract templates

You can join our email lists in five places: the newsletter form at the bottom of every page, the newsletter box on our contact form, the download form for the free Rentals & Bookings Lite plugin, the forms on our free rental contract template pages, and the optional form on the Upgrade screen inside the Lite plugin. Each asks only for your email address, except the contact form, which also passes on the name you typed.

All of them are double opt-in: we email you a confirmation link, and you join the list only when you click it. We keep the list in Brevo, together with where and when you signed up, and Brevo may record whether you open our emails and click their links. You’ll get what you signed up for: the download, how-to guides and tips, product news and offers. Every email has an unsubscribe link, and you can also email us to be removed.

If you buy from us, we may email you about new versions and offers for our other rental products. You can opt out at any time with the link in the email.

To keep bots out, these forms use Cloudflare Turnstile, a hidden honeypot field and a limit on sign-ups from one IP address. For the limit we keep only a hashed version of your IP address, for between one minute and one day. While a sign-up on the free plugin page waits for confirmation (at most 7 days), we also keep your IP address and the page you signed up on with it.

Browsing our site

Like any website, our server and Cloudflare, which delivers our pages, receive your IP address, browser and device type, the pages you request and the page you came from. We use this to deliver the site, keep it fast and block attacks. Our Wordfence firewall checks incoming requests and logs the ones it blocks. We also use analytics and advertising tools, which are described under Cookies.

Our documentation counts page views and “was this helpful?” votes. These statistics stay on our own server, aren’t linked to your name and store IP addresses only in hashed form. Any feedback comment you type is saved with the article.

If you comment on a blog post, we store your name, email address, website (if given), IP address and browser. WordPress sends a hashed version of your email address to Gravatar to show your profile picture, if you have one.

Our live demos

demo.rentalbookingsoftware.com (WooCommerce) and demo2.rentalbookingsoftware.com (Magento 2) are public test stores. The demo links on our site sign you in to a shared demo admin account that every visitor uses. Anything you enter on either demo, such as test orders, customer details or signatures, can be seen by other visitors until the next reset. Every night both demo databases are wiped and restored from a clean copy. Please use made-up details on the demos. Emails are switched off on both demos, so nothing you enter there is emailed to anyone.

The demos don’t use Google Analytics, Google Ads or the Meta Pixel. They set only the cookies a shop needs (sign-in, cart and WooCommerce’s record of how you arrived). The WooCommerce demo loads fonts from Google Fonts and profile pictures from Gravatar. The Magento demo is delivered through Cloudflare, including Cloudflare Web Analytics, which doesn’t use cookies.

Client portal

Our client portal at clients.rentalbookingsoftware.com (“My Account (Alternate)” in the menu) runs on Upmind, a third-party billing platform, which also loads the Sentry error-monitoring service.

Shopify apps

Each of our Shopify apps will have its own privacy policy, published with the app on the Shopify App Store.

3. Our software on your site

Our WordPress plugins and Magento extensions run on your own server. The data they handle about your customers, such as bookings, orders, contracts, signatures, uploaded documents and messages, stays in your own database. You, the store owner, are the controller of that data, and we don’t receive any of it. Features that connect to outside services, such as SMS or WhatsApp messages, cloud photo storage or calendar sync, use your own accounts with those services and send data straight from your site to them, never through us.

Here is everything our software sends to rentalbookingsoftware.com:

• Rentals & Bookings Regular, Pro and paid add-ons (WordPress). Activating, checking or deactivating a license sends the license key, the product, your site’s address and whether WordPress marks the site as production, staging, development or local. Update checks send the license key, the product, the installed version, your site’s address, whether you opted in to beta versions, and your PHP and WordPress versions.
• Rentals & Bookings Lite downloaded from our website. The update check sends the installed version, your PHP and WordPress versions and your site’s language. It sends no license key. Like every request WordPress makes, it also carries your site’s address in its user-agent header. We don’t record these checks beyond our normal server logs.
• Rentals & Bookings Lite from WordPress.org. Updates come from WordPress.org, so the plugin doesn’t contact us at all, unless you choose to use the mailing-list form on its Upgrade screen. That form sends only the email address you type in, and double opt-in applies.
• Magento 2 extensions. If you install or update them with Composer from our package repository, the repository checks your license key before each download, and our server sees the IP address of the machine running Composer. The extension’s License screen also checks your key with our site, sending the key, the product and your store’s address.

We use this information only to deliver updates, check licenses and show your activations in My Account.

4. Cookies and similar technologies

Cookies are small files a website stores in your browser. Some are needed for the site to work. Others help us understand how the site is used or measure our advertising. We use cookies that the site needs to work (sign-in, cart and checkout, bot protection and payments), analytics cookies from Google Analytics, advertising cookies from Google Ads and the Meta Pixel, and a referral cookie when you arrive through an affiliate link.

We use Google Analytics, and advertising services from Google and Meta, to measure how our site and ads perform and to show our ads to people likely to be interested. If you’re a customer or subscriber, we may share your email address with them in hashed (scrambled) form so they can match it to their users. If you visit from the EU, the EEA, the UK or Switzerland, these only load after you accept them in our cookie notice. You can opt out in your browser’s cookie settings or your Google and Meta ad settings, or by emailing us.

Videos. Some pages have YouTube videos. The preview picture comes from YouTube’s servers, and the player loads, along with any YouTube cookies, only when you press play. The video on our home page uses YouTube’s privacy-enhanced (“no cookie”) mode.

Your choices. You can also block or delete cookies in your browser settings, install the Google Analytics opt-out add-on, and adjust your ad settings at Google My Ad Center and in Meta’s ad preferences. If you block cookies that the site needs, sign-in and checkout won’t work.

5. International transfers

We are based in the United States and our server is in the United States. If you are elsewhere, your information will be processed in the US, where privacy law may differ from yours. When you buy from us or ask us for help, sending your information to the US is necessary to give you what you asked for. Where our providers move personal data out of the EEA, the UK or Switzerland, they rely on the EU-US Data Privacy Framework (with its UK and Swiss extensions) or on the European Commission’s Standard Contractual Clauses. Brevo keeps our email lists in the European Union.

6. Security

• Every page is served over HTTPS, and Cloudflare filters traffic to our main site before it reaches our server.
• The Wordfence firewall blocks known attacks and scans the site for malware.
• Stripe and PayPal handle card data, so it never touches our server.
• Passwords are stored hashed. Site logins you share in support tickets are stored encrypted.
• Confirmation links from our free-plugin forms work only once, and our database stores only a hash of each link.
• Only the people who need your information to serve you can see it.

No system is completely secure. If a breach affects your personal information, we will tell you and the authorities as the law requires.

7. Your rights

Wherever you live, you can ask us what personal information we hold about you, ask for a copy, ask us to correct or delete it, and tell us to stop sending you marketing emails. We answer within one month and don’t charge for it.

In the EEA, the UK and Switzerland

Under the GDPR and the UK GDPR you have the right to:

• access your personal information and get a copy;
• rectification: have inaccurate information corrected;
• erasure: have your information deleted, unless we must keep it, for example for tax;
• restriction: ask us to limit how we use it;
• portability: receive the information you gave us in a common machine-readable format;
• objection: object to our use of it based on legitimate interests, and to direct marketing at any time;
• withdraw consent at any time, without affecting what we did before;
• complain to your local data protection authority, or in the UK to the Information Commissioner’s Office. We’d appreciate the chance to fix things first.

In California and other US states

California residents have the right to know what personal information we collect, use and disclose, and to delete it, correct it, and opt out of its “sale” or “sharing”. You also have the right not to be treated differently for using these rights. Residents of Virginia, Colorado, Connecticut, Texas, Oregon and other states with privacy laws have similar rights.

• We don’t sell your personal information for money or anything else of value.
• Sharing for advertising. Our use of Google Ads and the Meta Pixel may count as “sharing” for cross-context behavioral advertising under California law. To opt out, change your browser’s cookie settings or your Google and Meta ad settings, or email us.
• What we collected in the last 12 months: identifiers (name, email address, postal address, IP address, cookie IDs); commercial information (what you bought); internet activity (pages viewed, interactions with our ads); approximate location derived from your IP address; professional information (your company); and files you send us. The sources, purposes and recipients are described in sections 2 to 4.
• Sensitive information: the only sensitive information we hold is account login details (your password, and any site logins you share in a support ticket). We use them only to provide our services.

How to make a request

Email [email protected] from the address we have on file, or tell us which address to look for. We may need to confirm your identity before we act. You can also ask someone to make a request for you (an authorized agent); we will ask them for proof that you gave permission. To leave an email list, the quickest way is the unsubscribe link at the bottom of any of our emails.

8. Children

Our software and website are for businesses. They are not aimed at children, and we don’t knowingly collect personal information from anyone under 16. If you think a child has given us personal information, email us and we will delete it.

9. Changes to this policy

We update this policy when our services or the law change. The effective date at the top shows when it last changed. If a change is significant, we will also email our customers or put a notice on the site.

10. Contact us

Questions, requests or complaints about privacy: email [email protected], call (805) 242-1135, or write to Sales Igniter, 1130 E Clark Ave, STE 150-252, Santa Maria, CA 93455, USA.