Last updated: September 2026
This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from zorem.com (the “Site”). It also covers information collected through our WordPress plugins installed on your store.
Personal Information We Collect
When you visit the Site, we automatically collect certain information about your device, including your web browser, IP address, time zone, and cookies installed on your device. As you browse the Site, we collect information about the pages or products you view, referring websites or search terms, and how you interact with the Site. We refer to this automatically-collected information as “Device Information.”
We collect Device Information using the following technologies:
- Cookies — data files placed on your device that often include an anonymous unique identifier. For more information, visit http://www.allaboutcookies.org.
- Log files — track actions on the Site, including IP address, browser type, internet service provider, referring/exit pages, and date/time stamps.
- Web beacons, tags, and pixels — electronic files used to record how you browse the Site.
When you make a purchase through the Site, we collect your name, billing address, payment information, email address, and phone number. We refer to this as “Order Information.”
When we talk about “Personal Information” in this Privacy Policy, we mean both Device Information and Order Information.
Plugin Installation — Usage Tracking and Marketing Consent
When you install a Zorem plugin, we show a one-time consent notice with two independent opt-in choices. Both are optional and neither is required to use the plugin. Full details are on our Plugins Usage Tracking page.
1. Usage Tracking (opt-in) — If you opt in, we collect anonymous technical information about your WordPress environment to help us improve our products. Data is collected on activation and sent to our servers every 24 hours while the plugin is active. You can disable this at any time in the plugin settings.
2. Marketing Newsletter (opt-in) — If you opt in, we add your WordPress admin email address to our newsletter list to send you product updates, feature announcements, and Zorem promotions. You can unsubscribe at any time via any email we send.
WordPress Environment Information We Collect
When usage tracking is enabled, we collect the following technical environment data. We do not collect any personally identifiable information (PII) from you or your store’s customers — no customer names, emails, addresses, or payment details.
- Zorem plugin(s) active state, version, and high-level settings
- Site URL
- WordPress admin name and email address
- WordPress locale (country and language)
- WordPress version
- PHP version
- MySQL version
- HTTP server type
- Active theme name and version
- List of installed plugins and their versions
The admin email address is the only personal data collected through the plugin. It is used to contact you about security updates, critical product notices, and (if opted in) our marketing newsletter. It is never shared with third parties.
License and Plugin Usage Data
When you activate a license key, we record the license status, associated site URL, and activation date. This data is used to validate your license, deliver automatic updates, and enforce license terms. If a license expires and is not renewed, plugin functionality will be suspended until the license is renewed. We retain license records for the duration of the license period and for a reasonable period thereafter for accounting and support purposes.
AI Features and Data Handling
Several Zorem plugins include optional AI-powered features. All AI features require you to supply your own API key from the relevant AI provider. Zorem does not store or proxy your API keys. Your use of these features is also governed by the privacy policy of the AI provider you configure.
- Sales by Country — AI Insights: Aggregate store metrics (revenue, order counts, country breakdowns) are sent to your chosen AI provider using your own API key. No customer PII is transmitted.
- Subscription Analytics — AI Insights and Cancellation Themes: Aggregate subscription metrics and anonymized cancellation themes are processed. Free-text cancellation answers are redacted before leaving your server. No customer PII is transmitted.
- Customer Info — AI Customer Summary: A PII-light summary is generated on demand. Customer email, phone, and address are excluded before sending to your AI provider. Summaries are cached on your server.
- CEV PRO — AI Risk Scoring and Temp-Mail Matching: Risk scoring and disposable-email detection run entirely on your server. No data is sent to external AI services.
- Zorem Returns — AI Assistant: Only return-related workflow data is shared with the AI provider using your own API key. No unnecessary PII is transmitted.
MCP Server Endpoints
Certain plugins (currently Customer Info v1.3.1+) expose a read-only MCP (Model Context Protocol) server endpoint at /wp-json/customer-info-mcp/v1/mcp. This endpoint is secured by built-in OAuth 2.1 and is read-only by design. No customer data is transmitted to Zorem through this endpoint — it is accessed directly from your WordPress installation by your configured AI tools.
How Do We Use Your Personal Information?
We use Order Information to:
- Fulfill purchases (process payment, deliver license keys, provide order confirmations)
- Communicate with you about your purchase and account
- Screen for potential fraud or risk
- Send product and service communications in line with your preferences
We use Device Information to:
- Screen for fraud and risk (including IP address)
- Improve and optimize the Site through analytics
- Assess the success of our marketing campaigns
Sharing Your Personal Information
We share your Personal Information with the following categories of third parties:
- Payment processors: Paddle processes all payments on our behalf and is subject to their own privacy policy. We do not store full payment card details.
- Analytics providers: We use Google Analytics to understand how customers use the Site. You can read Google’s privacy policy at https://www.google.com/intl/en/policies/privacy/ and opt out at https://tools.google.com/dlpage/gaoptout.
- Legal compliance: We may share Personal Information to comply with applicable laws, respond to a subpoena or lawful request, or protect our rights.
We do not sell your Personal Information to third parties.
Behavioral Advertising
We may use your Personal Information to provide targeted advertisements or marketing communications we believe may be of interest to you. You can learn more about targeted advertising at networkadvertising.org and opt out via the Digital Advertising Alliance at optout.aboutads.info.
Do Not Track
We do not alter our data collection or use practices in response to a Do Not Track signal from your browser.
Your Rights
If you are a resident of the European Economic Area (EEA), the United Kingdom, or California (under CCPA), you have rights regarding your personal information, including the right to access, correct, update, or request deletion of your data. To exercise any of these rights, please contact us using the details below.
We process your information to fulfill contracts with you (e.g., processing your order) and to pursue our legitimate business interests as described above. Your information may be transferred outside of Europe, including to the United States, where Zorem Tech, Inc. is incorporated.
Data Retention
We retain Order Information and license records for as long as necessary to fulfill the purposes described in this policy, or as required by applicable law. You may request deletion of your personal data by contacting us, subject to retention obligations required for legal, accounting, or fraud-prevention purposes.
Changes
We may update this Privacy Policy from time to time to reflect changes in our practices, product features, or applicable law. When we make material changes, we will update the “Last updated” date at the top of this page.
Contact Us
For questions about this Privacy Policy, to exercise your data rights, or to make a complaint, please contact us. You may also wish to review our Terms & Conditions and our Plugins Usage Tracking page.
Zorem Tech, Inc.
600 N Broad Street, Suite 5 #544
Middletown, DE 19709, USA
Tel: +1 302 724 6970