Privacy Policy
Last Updated: June 2026
1. Introduction & Legal Entity
This Privacy Policy explains how WPCrafters, a division of Tharwa Consulting Private Limited ("we," "us," or "our"), collects, processes, and protects personal data and technical information from visitors to imageoffload.com and users of the Image Offload & Optimize WordPress plugin.
We act as the Data Fiduciary (or Data Controller) under applicable global data protection laws, including the Indian Digital Personal Data Protection (DPDP) Act 2023, the EU/UK General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA).
2. Data We Collect & Process
Because our website operates as a marketing, documentation, and product optimization hub, data collection is strictly tied to operational utility. We divide data collection into three categories:
A. Data Collected Directly via Website
- Waitlist Information: We collect your email address when you voluntarily sign up for product updates or early access.
- Payment Data: When you purchase a license, your name, email, and billing information are collected directly by our third-party merchant of record, Polar.sh. We do not store full credit card details or raw financial data on our servers.
B. Technical Data Processed via the Plugin & API Server
When the Image Offload & Optimize WordPress plugin interacts with our API server, the following backend data is processed:
- API Key & License State: Generated and securely stored on our API server to validate your product subscription.
- Connected Domain: The URL of the WordPress installation utilizing the plugin is registered to enforce license limits.
- Usage Metrics: We monitor plan types and which specific API endpoints are called to optimize server load and manage subscription tiers.
- Transient Image URLs: To perform conversion and optimization, the plugin passes your image URLs to our processing server. This data is entirely transient; images and their originating source URLs are not stored permanently on our optimization infrastructure.
C. Automatically Collected Analytics Data
If you grant explicit consent via our cookie banner, we collect data regarding your device, browser type, and on-site behavior (such as page views and interactions) via automated tools.
3. Third-Party Service Providers (Data Sharing)
We do not sell, rent, or trade your personal data. We share information only with vetted infrastructure partners necessary to execute our core services:
| Service Provider | Purpose | Data Transferred |
|---|---|---|
| Polar.sh | Payment processing, tax compliance, and license billing management. | Name, email address, billing address, and payment confirmation metadata. |
| Resend | Secure routing of transactional updates and waitlist notifications. | Email address and recipient name. |
| Cloudflare R2 | Processing infrastructure used to handle media delivery pipelines. | Transient media assets during active plugin optimization operations. |
| Google Analytics | Aggregated, anonymous monitoring of marketing site traffic. | Anonymized IP addresses, device types, and page interaction paths. |
| Microsoft Clarity | High-fidelity session recording and heatmap visualization to debug documentation formatting. | Mouse movements, click events, and scroll depth (masked for privacy). |
4. Data Retention Limits
We retain your personal data only for the timeframe required to fulfill the operational purposes outlined in this policy:
- Account, License, & Usage Data: Maintained for the active duration of your product subscription, plus a reasonable period after cancellation to resolve billing queries or comply with corporate tax audits under Indian law.
- Waitlist Emails: Retained until you actively unsubscribe via the opt-out link in any email message, or request explicit erasure.
- Analytics Logs: Retained in accordance with the standard expiration windows configured within Google Analytics and Microsoft Clarity settings, as specified in our Cookie Policy.
5. International Data Transfers
Our primary corporate operations are managed out of India, supported by localized cloud storage nodes provided by global infrastructure partners. If you access imageoffload.com from the European Economic Area (EEA), the United Kingdom, or the United States, your personal data may be transferred across international borders. We ensure all data transfers remain compliant with cross-border frameworks by utilizing Standard Contractual Clauses (SCCs) and working exclusively with vendors who maintain rigorous data isolation standards.
6. Your Rights Under Global Regulations & India's DPDP Act 2023
We fully support your digital data rights. Regardless of your location, you may execute the following rights regarding your personal information:
- Right to Access & Summary: Request clear confirmation of whether your data is being processed, alongside a summary of the specific personal data held.
- Right to Correction: Require us to correct, complete, or update inaccurate personal identifiers.
- Right to Erasure (Right to be Forgotten): Request that we permanently delete your email or operational data, subject to overriding statutory tax or transaction preservation requirements.
- Right to Withdraw Consent: Revoke your consent for analytics tracking or email marketing at any time without impacting prior lawful processing.
7. Grievance Redressal & Contact Information
In compliance with the Digital Personal Data Protection Act 2023, we have appointed a dedicated officer to handle data protection inquiries and grievances. If you wish to exercise any of your rights or file a formal complaint regarding data handling, please contact our team. We commit to reviewing and resolving all valid complaints within 30 days.
Legal Entity: Tharwa Consulting Private Limited
Designated Contact Officer: legal@imageoffload.com
Privacy & Legal Email: privacy@imageoffload.com
Registered Office Address: 7th Main Rd, Indira Nagar II Stage, II stage, Indiranagar, Bengaluru, Karnataka 560038