Privacy Policy
Last updated:
1. Introduction
Thank you for visiting the official CMSMasters website! We are a Cyprus-based company, creating products to enhance your website building experience. Please read our Terms of Use and this Privacy Policy: you need to consent to both documents in order to use our services. By using our products you confirm that you agree to the terms listed in this Privacy Policy and in the Terms of Use. You are welcome to contact us should you have any questions regarding these.
This policy sets out how we handle your personal information if you’re a CMSMasters buyer, user or visitor to our Sites. It applies across https://cmsmasters.studio/, https://cmsmasters.net/ and the subdomains (the “Sites”), as well as affiliated sites and projects, listed on our website.
2. Definitions
Throughout this Agreement, we may use certain words or phrases, and it is important that you understand the meaning of each. The list is not all-encompassing and no definition should be considered binding to the point that it renders this Agreement nonsensical:
“Agreement” refers to this Privacy Policy and Terms of Use.
“Service” refers to the services that we provide, including but not limited to: our WordPress themes (whether obtained from us via ThemeForest.net, Envato Elements Marketplace, our Site, directly via e-mail, support system or otherwise) and our Site itself.
“Site” refers to our website, https://cmsmasters.studio/, https://cmsmasters.net/ and subdomains.
“CMSMasters” refers to our company; our Site; our Service; or a combination of all or some of the preceding definitions, depending on the context in which the word is used.
“User” refers to anyone who uses our Service, including general visitors to our Site.
“You” refers to you, the person who is entering into this Agreement with CMSMasters.
3. Data Collected
Data storage location
We are a Cyprus-based company. Our Sites consist of two platforms: our WordPress website, and our new theme website together with the customer dashboard (https://dashboard.cmsmasters.studio/).
Our WordPress website and its data are hosted by Hetzner on servers in Germany and Finland: https://www.hetzner.com/.
The data of our new website and customer dashboard, including your account, licenses and support requests, is stored in a Supabase database hosted in the EU (Ireland). The new website runs on Vercel and Cloudflare, and our WordPress website is delivered through Cloudflare. Some of these providers are based in the United States; see International Data Transfers below.
Registration data
If you register on our website, we store your chosen username and your email address and any additional personal information added to your user profile. You can see, edit, or delete your personal information at any time (except changing your username). Website administrators can also see and edit this information.
If you register your theme copy when activating the theme, or change this data after activation in the License Data tab, we also store the personal information you provide. To receive a copy of your stored data or have it erased, see Your Data Rights.
Purchase data
To activate the product and receive support, you have to enter the Envato purchase code for each product (WordPress theme) on your website. These purchase codes will be stored together with support expiration dates and your user data. This is required for us to provide you with downloads, product support and other customer services.
When activating the product, you can also enter your name and email (optional), which will be stored along with the purchase data. It may be used to send updates to our users with important information about news/changes, marketing materials and promotions.
Support data
If you have a CMSMasters account with a registered theme license, you can submit support tickets from your customer dashboard. When you submit a ticket, we send the information you enter (the theme, subject and message) together with your name and email address to our Zendesk ticketing system, where our support team answers it. The ticket is delivered to Zendesk by email through our email provider Resend. You can see Zendesk’s privacy policy here: https://www.zendesk.com/company/agreements-and-terms/privacy-notice/
Comments
When you leave comments on our WordPress website, we collect the data shown in the comments form, and also the IP address and browser user agent string.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Contact form
Messages sent through the contact form on our WordPress website are delivered to our company email, hosted by Gmail, and the form is protected from spam by Google reCAPTCHA. Messages sent through the contact form on our new website are delivered by our email provider Resend to our Zendesk ticketing system, and the form is protected from spam by Cloudflare Turnstile. Both spam protection services process technical data such as your IP address and browser information. If you tick the newsletter option in the contact form, your email address is also added to our Sender mailing list. You can find Google’s privacy policy here: https://policies.google.com/privacy.
Google Analytics
We use Google Analytics on our WordPress website for anonymous reporting of site usage. No personally identifiable data is stored.
Cases for using the data
We use your personal information in the following cases:
- Verification/identification of the user during website usage;
- Providing Technical Assistance;
- Sending our users updates with important information about news and changes;
- Checking the accounts’ activity in order to prevent fraudulent transactions and ensure the security of our customers’ personal information;
- Customizing the website to make your experience more personal and engaging;
- Ensuring that overall performance and administrative functions run smoothly.
6. Who Has Access To Your Data
If you are not a registered client of our site, we only hold the information you send us yourself, for example through the contact form, a comment or a newsletter sign-up.
If you are a client with a registered account, your personal information can be accessed by:
- Our system administrators.
- Our support team, when they need information about client accounts and access in order to provide support.
7. Third Party Access To Your Data
We don’t share your data with third parties in a way that would reveal any of your personal information, such as your email or name. The only exceptions to that rule are for partners we have to share limited data with in order to provide the services you expect from us. Please see below:
Envato Pty Ltd
For the purpose of validating and getting your purchase information regarding licenses for our themes, we send your provided tokens and purchase keys to Envato Pty Ltd and use the response from their API to register your validated support data. See the Envato privacy policy here: https://www.envato.com/privacy/.
Zendesk
Zendesk provides the support ticketing platform we use to handle support requests. The data they receive is limited to the data you explicitly provide and consent to being sent when you create a support ticket. You can see Zendesk’s privacy policy here: https://www.zendesk.com/company/agreements-and-terms/privacy-notice/.
MailChimp
If you sign up to our newsletter using the newsletter form on our WordPress website, which is hosted by MailChimp, your email address and the marketing topics you agreed to be contacted about will be stored by MailChimp. You have to give explicit consent to all marketing means you want us to use to contact you. For more information on MailChimp’s privacy policy, please see here: https://mailchimp.com/legal/privacy/
Sender
If you sign up to our newsletter on our new website (through the newsletter form or the newsletter option in the contact form), your email address will be stored by Sender. For more information on Sender’s privacy policy, please see here: https://www.sender.net/privacy-policy/
Resend
We use Resend to deliver emails from our new website and customer dashboard, including contact form messages and support tickets sent to our Zendesk system. Resend processes the content of these emails and the email addresses in them. See Resend’s privacy policy here: https://resend.com/legal/privacy-policy.
Hosting and Infrastructure Providers
Our new website and customer dashboard store data with Supabase (database hosted in the EU, Ireland) and run on Vercel and Cloudflare. Cloudflare also delivers our WordPress website and protects the contact form on our new website from spam with Cloudflare Turnstile. These providers process technical data such as your IP address, and Supabase stores the data of your account. See their privacy policies here: https://supabase.com/privacy, https://vercel.com/legal/privacy-notice, https://www.cloudflare.com/privacypolicy/.
International Data Transfers
Some of the providers listed in this Privacy Policy, such as Zendesk, Google, MailChimp, Resend, Supabase, Vercel and Cloudflare, are based in the United States or may process personal data outside the European Economic Area. Where personal data is transferred outside the European Economic Area, the transfer is based on the EU-U.S. Data Privacy Framework, where the provider is certified under it, or on the Standard Contractual Clauses approved by the European Commission.
8. How Long We Retain Your Data
When you submit a support ticket or a comment, its metadata is retained until you ask us to remove it. We use this data so that we can recognize you and approve your comments automatically instead of holding them for moderation.
The personal information in your user profile and the data you provide when registering your theme copy are kept until you delete them or ask us to erase them (see Your Data Rights).
9. Security Measures
We use the SSL/HTTPS protocol throughout our site. This encrypts our user communications with the servers so that personally identifiable information is not captured/hijacked by third parties without authorization.
In case of a data breach, system administrators will immediately take all needed steps to ensure system integrity, will contact affected users and will attempt to reset passwords if needed.
10. Your Data Rights
If you have a registered account on this site, register your theme copy when activating the theme (enter your name and email) or have left comments or support requests, you can request that we erase any of the personal data we have stored. This does not include any data we are obliged to keep for administrative, legal, or security purposes. In short, we cannot erase data that is vital to you being an active customer (i.e. basic account information like an email address).
If you wish to have all of your data erased, we will no longer be able to offer any support or other product-related services to you.
If you have any questions, want to receive a copy of your stored data or have your data erased, please contact us via our contact form.
11. GDPR Rights
CMSMasters permits residents of the European Union to use its Service. Therefore, it is the intent of CMSMasters to comply with the European General Data Protection Regulation. For more details please see here: https://gdpr.eu/
12. Third Party Websites
CMSMasters may post links to third party websites on this website. These third party websites are not screened for privacy or security compliance by CMSMasters, and you release us from any liability for the conduct of these third party websites.
All social media sharing links, whether displayed as text links or as social media icons, do not connect you to any of the associated third parties, unless you explicitly click on them.
Please be aware that this Privacy Policy, and any other policies in place, in addition to any amendments, does not create rights enforceable by third parties or require disclosure of any personal information relating to members of the Service or Site. CMSMasters bears no responsibility for the information collected or used by any advertiser or third party website. Please review the privacy policy and terms of service for each site you visit through third party links.
13. Release of Your Data For Legal Purposes
At times it may become necessary or desirable to CMSMasters, for legal purposes, to release your information in response to a request from a government agency or a private litigant. You agree that we may disclose your information to a third party where we believe, in good faith, that it is desirable to do so for the purposes of a civil action, criminal investigation, or other legal matter. In the event that we receive a subpoena affecting your privacy, we may elect to notify you to give you an opportunity to file a motion to quash the subpoena, or we may attempt to quash it ourselves, but we are not obligated to do either. We may also proactively report you, and release your information to third parties where we believe that it is prudent to do so for legal reasons, such as our belief that you have engaged in fraudulent activities. You release us from any damages that may arise from or relate to the release of your information to a request from law enforcement agencies or private litigants.
Any passing on of personal data for legal purposes will only be done in compliance with laws of the country you reside in.
14. Amendments
We may amend this Privacy Policy from time to time. When we amend the Privacy Policy, we will update this page accordingly.