01Who we are and what this covers
In short WBAMS runs wbams.com. This policy covers the website, your account, the store, the help center and support desk, and the license and update services that WBAMS software contacts.
WBAMS ("WBAMS", "we", "us"), 3817 Davis Ave, Charlotte, NC 28208, United States, operates wbams.com and the services described here, and is responsible for the personal information collected through them.
When you install WBAMS on your own server, the information you keep in it, such as your clients, invoices, tickets and files, stays in your installation. You decide what it holds and how it is used, and this policy does not apply to it. Routine license checks are not designed to send us any of it.
02Information we collect
In short What you give us, what is created when you buy and use our services, and a small amount collected automatically.
What you give us
- Account and contact details: your name, organization, email address, postal address and phone number, and a tax ID if you add one.
- Sign-in details: your password, which is stored only as a bcrypt hash and never in readable form, and your two-factor settings if you turn two-factor sign-in on.
- Support and messages: the tickets, replies and attachments you send us, and messages sent through our contact form.
- Newsletter: your email address, if you subscribe. Nothing is sent until you confirm the address from the email we send you.
What is created when you use our services
- Orders and billing: the plans you order, invoices, payments, credits and refunds, and the payment method used. Card payments are processed by Stripe, our payment provider. If you save a card, we keep a reference to it, such as the card type, last four digits and expiry date, not the full card number.
- Emails we send you: copies of account emails, such as invoices and ticket replies, are kept with your account.
- License and update data: when a WBAMS installation checks its license or looks for updates, it sends the license key or a hash of it, the licensed domain, the server's network address, an installation fingerprint and a hash of its folder, the WBAMS and PHP versions, and the time and result of the check.
What is collected automatically
- Security records: sign-in times and IP addresses, failed sign-in attempts, and a log of changes made to your account.
- Visit statistics: for each page viewed, our own statistics record the page, the website you came from, the country and city our server reports, your browser's language, the browser, operating system and type of device, your browser's identification text (user agent) and a one-way hash of your IP address. The IP address itself is not stored, and these statistics stay on our server rather than going to an analytics company.
03How we use it
In short To provide and bill for what you order, to help you, to keep accounts secure and to meet legal duties. News only with your consent.
| Why we use it | Legal basis |
|---|---|
| Create your account, take orders, issue licenses and invoices, and deliver updates | Our contract with you |
| Answer your tickets and messages | Our contract with you, or our legitimate interest in replying |
| Verify licenses and prevent unlicensed or duplicated use | Our contract with you, and our legitimate interest in protecting our software |
| Keep the site and accounts secure, and detect fraud and abuse | Our legitimate interests, and yours |
| Keep accounting and tax records | Legal obligations |
| Understand how the website is used, so we can improve it | Our legitimate interests |
| Send the newsletter and marketing emails | Your consent, which you can withdraw at any time |
We do not sell personal information, we do not share it for targeted advertising, and we do not use it to make decisions about you by automated means alone.
04Cookies and similar technologies
In short Only the cookies the site needs to work, plus referral cookies when you arrive through a referral link. No advertising or third-party tracking cookies.
| Cookie | What it does | How long |
|---|---|---|
| Session (WBAMS followed by an identifier) | Keeps you signed in and remembers your cart as you move between pages | Until you close your browser |
| Remember me (WBAMSUser, WBAMSlogin_auth_tk) | Keeps you signed in on this device, only when you choose "Remember me" | Up to one year |
| Referral (WBAMSAffiliateID, WBAMSLinkID) | Credits a partner or a campaign link when you arrive through one | Three months |
| Preferences (for example WBAMSItemsPerPage) | Remembers how you like lists displayed in your account | Until you close your browser |
Your choice of light or dark mode is kept in your browser's own storage and is not sent to us.
Our pages load their fonts from Google Fonts, so your browser connects to Google, which receives your IP address and browser details as described in Google's privacy policy. When you pay, Stripe's payment pages may set cookies of their own, for example to prevent fraud.
You can block or delete cookies in your browser's settings. Without the session cookie you can still read the website, but you cannot sign in or order.
05Who we share it with
In short Only with the services that help us run WBAMS, and when the law requires it.
- Stripe, our payment provider, to take card payments, issue refunds and prevent fraud, as described in Stripe's privacy policy.
- Email delivery, to send account emails, ticket replies and the newsletter.
- Hosting and infrastructure, which runs wbams.com and stores its data.
- Professional advisers, such as accountants and lawyers, who are bound to keep it confidential.
- Authorities, when the law requires it, or when it is needed to protect the rights, property or safety of our customers, our users or WBAMS.
- A successor, if WBAMS is reorganized or sold, who must continue to protect your information as this policy describes.
Each provider may use your information only to provide its service to us.
06Where it is kept
In short In the United States, on the server that runs wbams.com. Providers we use may also process it elsewhere, under safeguards the law requires.
WBAMS is based in the United States, and your information is kept on the server that runs wbams.com there. If you use our services from outside the United States, your information is transferred to the United States and processed there, and some of the providers listed above may process it in other countries. Where data protection law requires it, those transfers are covered by appropriate safeguards, such as standard contractual clauses.
07How long we keep it
In short For as long as your account is open, and afterwards only as long as the law or a legitimate need requires.
- Your account and support history: while your account is open. After it is closed, we delete or anonymize it within a reasonable time, unless we must keep part of it for the reasons below.
- Invoices, payments and other accounting records: for as long as tax and accounting law requires, usually six years or more.
- License records: for the life of the license, and afterwards as long as needed to deal with disputes or misuse.
- Newsletter: until you unsubscribe.
- Visit statistics: kept to show how the site is used over time. They contain no IP address.
08How we protect it
In short HTTPS everywhere, hashed passwords, optional two-factor sign-in, limits on sign-in attempts and access only for the people who need it.
- Every page is served over an encrypted HTTPS connection.
- Passwords are stored as bcrypt hashes and never in readable form.
- You can turn on two-factor sign-in for your account.
- Repeated failed sign-ins and password-reset requests are limited, and an address that keeps trying is blocked for a while.
- Staff access is limited by role, and changes are logged.
No system is perfectly secure. If a breach affects your information, we will tell you and the authorities as the law requires.
09Your choices and rights
In short Correct your details in your account, unsubscribe at any time, and ask us for a copy, a correction or deletion.
- Your details: you can see and correct your contact details in the client portal at any time.
- Emails: every newsletter and marketing email has an unsubscribe link, and you can change your preferences in your account. Account emails, such as invoices, are part of the service.
- Your rights: depending on where you live, including California and the other US states with privacy laws, the European Union and the United Kingdom, you can ask to see the information we hold about you, to correct or delete it, to receive it in a portable form, to restrict or object to how we use it, and to withdraw consent. Where state law gives you the right to opt out of the sale or sharing of personal information, there is nothing to opt out of: we do not sell it or share it for advertising.
To use any of these rights, write to us through the contact page or open a ticket from your account. We may need to confirm who you are first, and we will answer within the time the law sets, usually one month.
If you are unhappy with how we handle your information, tell us and we will put it right where we can. If you live in the European Union or the United Kingdom, you can also complain to your data protection authority.
10Children
In short WBAMS is a business product and is not meant for children.
Our services are not directed at children under 16, and we do not knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it.
11Changes to this policy
In short We will post changes here with a new date, and tell you about important ones.
When we change this policy, we will update the date at the top. If a change is significant, we will tell you by email or with a notice on the website before it takes effect. Using our services, buying plans and licensing are covered by our Terms of Use.
12Contact us
In short Write to us through the contact page, or open a ticket from your account.
Questions about this policy or your information are welcome. Write to us through the contact page, or open a ticket from your account in the support desk.
By post: WBAMS, 3817 Davis Ave, Charlotte, NC 28208, United States.