Start a project

Legal

Privacy Policy

What we collect, why we collect it, who processes it for us, and how to have it deleted. We collect as little as we can, and we never sell personal data.

Last updated

Who we are

ThinkMatic (“ThinkMatic”, “we”, “us”) is a product engineering company. We build software for clients and publish products of our own, including the WordPress plugins Wow Chat for Woo and Schedopia.

This policy covers personal data we handle through:

  • our website, thinkmatic.net, and its forms;
  • our products and their documentation sites (for example, wowchat.thinkmatic.net);
  • our pages on social networks, including Facebook, LinkedIn, X and GitHub;
  • the apps we register with Meta to manage our Facebook Page and our advertising.

For the personal data described here, ThinkMatic is the data controller. You can reach us at info@thinkmatic.net.

The short version

  • We only get personal data you send us yourself, plus anonymous usage statistics from Google Analytics.
  • We do not sell or rent personal data, and we never will.
  • Our WordPress plugins run on your own server. Your store's and customers' data stays there; we never receive it.
  • Our Meta app manages our own Facebook Page and ad accounts. It does not offer “Log in with Facebook” and does not read your personal profile.
  • To have your data deleted, email info@thinkmatic.net. The details are in Data deletion instructions.

Information we collect

Information you give us

  • Contact form. Your name and email address, your company if you add it, and your message.
  • Early-access waitlists. Your first name and email address, for example when you join the Wow Chat for Woo Pro waitlist. We only add you after you confirm by email (double opt-in).
  • Email and project conversations. Anything you include when you email us or work with us, such as contact details and project information.

Information collected automatically

  • Analytics. On thinkmatic.net, Google Analytics records which pages you view, how you arrived, how long you stay, your browser and device type, and your approximate location (country or city), which it estimates from your IP address. We use this in aggregate and do not try to identify individual visitors.
  • Server logs. Like every web server, ours records technical details of each request: IP address, browser user agent, the page requested, and the time. Our hosting provider uses these logs for security and troubleshooting.

Information from Facebook, Meta and other social platforms

  • Interactions with our pages. When you comment on, react to, message or follow one of our social media pages, we see your public profile name and photo plus whatever you send us.
  • Page and ad insights. Meta gives us statistics about our Facebook Page and our ads, such as reach, engagement and audience breakdowns by age range or region. These statistics are aggregated and do not identify individuals.
  • Lead forms. If we run a lead ad and you submit its form on Facebook or Instagram, we receive the details you enter, typically your name and email address.

We do not collect sensitive personal data, such as health, biometric or financial account information, and we ask you not to send it.

Our WordPress plugins

Wow Chat for Woo and Schedopia are self-hosted. They run on the website where you install them and keep their data in that site's database. Wow Chat for Woo handles product searches and recommendations. Schedopia handles bookings, customer details and appointment emails. None of this data is sent to ThinkMatic, and the plugins do not report usage back to us.

If you run a site that uses one of our plugins, you are the controller of the data your visitors and customers enter on it. Your own privacy policy should cover that data. WordPress itself checks for plugin updates through WordPress.org, and those checks fall under the WordPress.org privacy policy.

How we use information

  • To answer your enquiries and to scope, deliver and support projects.
  • To send early-access and launch emails you signed up for. Every email includes an unsubscribe link.
  • To understand which pages are useful and to improve the website.
  • To manage our Facebook Page and other social profiles, reply to messages and comments, and measure how our posts and ads perform.
  • To keep our systems secure and prevent spam and abuse.
  • To meet legal, tax and accounting obligations.

We do not use your data for automated decision-making that has legal or similarly significant effects on you.

If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on the following legal bases:

  • Contract: to respond to project enquiries and deliver work you asked for.
  • Consent: for waitlist and marketing emails, and for analytics cookies where the law requires consent. You can withdraw consent at any time.
  • Legitimate interests: to run and secure the website, understand how it is used, and manage our social media presence. We balance these interests against your rights.
  • Legal obligation: where the law requires us to keep certain records.

Cookies and local storage

thinkmatic.net sets no first-party cookies for advertising. The only cookies are the Google Analytics ones below. We also keep your light/dark theme choice in your browser.

Name Set by Purpose Duration
_ga Google Analytics Tells visits apart so that visitors are counted correctly 2 years
_ga_* Google Analytics Keeps track of the current session 2 years
theme (local storage) thinkmatic.net Remembers whether you chose the light or dark theme Until you clear it

You can block or delete cookies in your browser settings, or turn off Google Analytics on every site with Google's opt-out browser add-on. Blocking these cookies does not stop the site from working. Google explains how it uses data from sites like ours at How Google uses information from sites that use its services.

Service providers

We use a small number of trusted providers. Each one processes personal data only to provide its service to us:

  • Google Analytics (Google LLC): website analytics. Privacy policy
  • Web3Forms: delivers contact form submissions to our inbox. Privacy policy
  • Brevo (Sendinblue SAS): waitlist sign-ups and the emails that follow. Privacy policy
  • Hostinger: website hosting and server logs. Privacy policy
  • Meta Platforms: our Facebook Page, advertising and the related APIs. Privacy policy

Apart from these providers, we share personal data only when the law requires it, to protect our rights or the safety of others, or as part of a merger or acquisition. In that last case, this policy would continue to apply to your data.

Facebook and Meta platform data

We register apps on the Meta for Developers platform for one purpose: running our own business presence on Facebook and Instagram. Through Meta's APIs (including the Pages API and the Marketing API), these apps:

  • publish and schedule posts, and read the comments and messages people send to our Page so that we can reply;
  • create and manage ad campaigns in our own ad accounts;
  • read aggregated performance insights for our Page and ads;
  • receive lead-form submissions from our lead ads, if we run any.

Our Meta apps do not:

  • offer Facebook Login or ask you to connect your Facebook account;
  • read your friends list, private profile information or activity outside our own Page and ads;
  • sell, license or share Meta platform data with data brokers;
  • use Meta platform data to make decisions about eligibility for credit, housing, employment or insurance.

We use Meta platform data only as allowed by the Meta Platform Terms and this policy. We delete it when we no longer need it, or when you or Meta ask us to.

How long we keep data

  • Enquiries and emails: as long as the conversation is active, then up to 24 months unless it turns into a project.
  • Client project records: for the length of the engagement and afterwards as long as tax, accounting or contract law requires.
  • Waitlist sign-ups: until you unsubscribe or the waitlist closes, whichever comes first.
  • Analytics data: no longer than 14 months. After that, Google Analytics keeps only aggregated reports.
  • Server logs: a short period set by our hosting provider, for security and troubleshooting.
  • Meta platform data: only as long as we need it to manage our Page and ads, and never longer than Meta's terms allow.

Your rights

Depending on where you live, you may have the right to:

  • access the personal data we hold about you and get a copy;
  • have inaccurate data corrected;
  • have your data deleted;
  • restrict or object to how we process it;
  • receive your data in a portable format;
  • withdraw consent at any time, without affecting earlier processing;
  • lodge a complaint with your local data protection authority.

California residents: under the CCPA/CPRA, you can ask what personal information we have collected about you, ask us to delete or correct it, and use these rights without being treated differently. We do not sell personal information. We do not “share” it for cross-context behavioral advertising either.

To use any of these rights, email info@thinkmatic.net. We reply within 30 days and may need to confirm your identity first. Exercising your rights is free.

Data deletion instructions

You can ask us to delete the personal data we hold about you at any time, including any data we received through Facebook, Instagram or another Meta product.

  1. Email info@thinkmatic.net with the subject line “Data deletion request”.
  2. Send it from the email address you used with us, or include the name of your Facebook or Instagram profile or Page so that we can find the right records.
  3. We delete the data from our systems and ask our service providers to do the same. We confirm by email within 30 days. If the law requires us to keep some records, such as invoices, we tell you which ones and why.

You can also stop sharing data with our Meta apps yourself. On Facebook, go to Settings & privacy → Settings → Business integrations (open Business integrations), select the ThinkMatic app and choose Remove. To unsubscribe from our emails, click the link at the bottom of any of them.

Security

We protect personal data with HTTPS everywhere, access limited to the people who need it, strong authentication on the accounts that hold it, and providers chosen for their security record. No system is completely secure. If a breach affects your data, we will notify you and the authorities as the law requires.

International transfers

We work with clients worldwide, and our providers may process data in countries other than yours, including the United States and the European Union. Where data leaves the EEA or the UK, we rely on safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.

Children's privacy

Our website and services are for businesses and are not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, contact us and we will delete it.

Do Not Track and Global Privacy Control

We do not sell or share personal data for advertising. The opt-out that a Global Privacy Control (GPC) signal asks for is therefore already in place. Browsers do not implement “Do Not Track” consistently, so we do not respond to it differently. You can block analytics using the options in Cookies and local storage.

Changes to this policy

We will update this policy when our services or the law change. The “Last updated” date at the top always shows the latest revision. If a change materially affects how we use your data, we will say so clearly on this page, and by email if we have your address.

Contact us

Questions about this policy or your personal data? Email info@thinkmatic.net or use our contact page. A person on our team will reply.