Privacy Policy

Last updated: February 2026

1. Data Controller

This Privacy Policy explains how your personal data is collected, used, and protected when you use the UMIE plugin and related services operated by:

SIA Fici
Registration number: 50203544561
VAT number: LV50203544561
Registered in the Republic of Latvia
Email: info@umie.pro

Throughout this policy, "we", "us", and "our" refer to SIA Fici, and "UMIE" or "the Service" refers to the UMIE WordPress plugin, the umie.pro website, and all related services.

2. Information We Collect

2.1 Account Information

When you create an account on umie.pro, we collect:

  • Email address
  • Name (optional)

2.2 Payment Information

When you purchase a license or credits, payment processing is handled by Stripe. We do not store your credit card details. Stripe provides us with:

  • Transaction identifiers
  • Payment status and amounts
  • Billing country (for VAT purposes)

2.3 License Activation Data

When you activate a license, we collect:

  • Site URL where the plugin is activated
  • WordPress version
  • Plugin version
  • Activation timestamp

2.4 Usage Data

We may collect anonymous, aggregated usage statistics to improve our product, including:

  • Feature usage patterns
  • Error reports
  • Import/export operation counts

2.5 AI Feature Data

When using AI-powered features (field mapping, data extraction, image matching):

  • Field names and sample data are sent to our AI processing service for mapping suggestions
  • Text content is processed for AI extraction features
  • Image metadata and filenames may be processed for matching

We do not retain your actual content data beyond the duration of the processing session. AI processing data is not used to train models.

2.6 Contact Form Data

When you submit our contact form, we collect your name, email address, selected topic, and message content to respond to your inquiry.

2.7 Feedback Data

When you submit feedback through the plugin, we collect your email, domain, feedback type, message, and any attached screenshots.

3. Lawful Basis for Processing

Under Article 6 of the GDPR, we process your personal data on the following legal bases:

  • Contract performance (Art. 6(1)(b)): Processing necessary to provide our services, manage your account, process licenses, and handle payments.
  • Legitimate interest (Art. 6(1)(f)): Processing for fraud prevention, service improvement, and security. Our legitimate interests do not override your fundamental rights and freedoms.
  • Consent (Art. 6(1)(a)): Where you have given explicit consent, such as when submitting a contact form or opting in to communications. You may withdraw consent at any time.
  • Legal obligation (Art. 6(1)(c)): Processing necessary to comply with applicable tax and accounting laws.

4. How We Use Your Information

We use the collected information to:

  • Provide, maintain, and improve our services
  • Process license activations and manage subscriptions
  • Process payments and issue invoices
  • Send transactional emails (license confirmations, password resets, expiry warnings)
  • Respond to support requests and feedback
  • Detect and prevent fraud or abuse of our services
  • Comply with legal obligations (tax records, accounting)

We do not use your personal data for automated decision-making or profiling that produces legal effects concerning you.

5. Data Sharing and Third Parties

We do not sell your personal data. We share data with the following third-party processors, each bound by data processing agreements:

  • Stripe (US): Payment processing. Stripe acts as an independent data controller for payment data. Stripe Privacy Policy
  • Resend (US): Transactional email delivery. Processes email addresses and message content. Resend Privacy Policy
  • Cloudflare (US): Website hosting, CDN, storage, and Turnstile bot protection. Cloudflare Privacy Policy
  • AI Service Providers (DeepSeek, Google Gemini, Groq): AI-powered features. Only field names, sample data, or text snippets necessary for the requested operation are shared. No personal account data is sent to AI providers.

6. International Data Transfers

Some of our third-party processors are located outside the European Economic Area (EEA), primarily in the United States. When transferring personal data outside the EEA, we ensure adequate protection through:

  • European Commission adequacy decisions where applicable
  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Processor certifications under the EU-US Data Privacy Framework where available

7. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy:

  • Account data: Retained for the duration of your active account. Deleted within 30 days of account deletion request.
  • Payment records: Retained for 7 years as required by Latvian tax and accounting law.
  • License activation data: Retained while the license is active. Deleted within 30 days of license expiration or cancellation.
  • AI processing data: Not retained beyond the processing session.
  • Contact form submissions: Retained for up to 12 months, then deleted.
  • Feedback data: Retained for up to 24 months for product improvement purposes.
  • Server logs: Automatically deleted after 30 days.

8. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access (Art. 15): Request a copy of the personal data we hold about you.
  • Right to rectification (Art. 16): Request correction of inaccurate or incomplete data.
  • Right to erasure (Art. 17): Request deletion of your personal data ("right to be forgotten").
  • Right to restriction (Art. 18): Request that we limit how we use your data.
  • Right to data portability (Art. 20): Receive your data in a structured, commonly used, machine-readable format.
  • Right to object (Art. 21): Object to processing based on legitimate interest.
  • Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at info@umie.pro. We will respond within 30 days. If we need to extend this period, we will inform you of the reasons.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Latvian supervisory authority:

Data State Inspectorate (Datu valsts inspekcija)
Elijas iela 17, Riga, LV-1050, Latvia
Website: www.dvi.gov.lv
Email: pasts@dvi.gov.lv

9. Cookies

We use only essential cookies that are strictly necessary for the functioning of our services:

  • Session cookies: Used for authentication and maintaining your login session. These are automatically deleted when your session expires.
  • Security cookies: Used for bot protection (Cloudflare Turnstile) on forms.

We do not use tracking cookies, advertising cookies, or analytics cookies. No consent is required for strictly necessary cookies under the ePrivacy Directive.

10. Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that a child under 16 has provided us with personal data, we will take steps to delete such information.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by email or through a prominent notice on our website at least 30 days before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

SIA Fici
Email: info@umie.pro
Registration number: 50203544561
VAT number: LV50203544561
Republic of Latvia