Privacy Policy
Last updated: 2 April 2026
Arvanel ("we", "us", "our") operates the website arvanel.dev and develops WordPress plugins including Smart Rate Engine for MPHB. This privacy policy explains what personal data we collect, why we collect it, how we use it, and your rights under the General Data Protection Regulation (GDPR) and the Australian Privacy Act 1988.
1. Data Controller
Arvanel is the data controller for personal data collected through arvanel.dev and our email signup forms. For questions or requests regarding your data, contact us at support@arvanel.dev.
2. What Data We Collect
| Data | When | Purpose | Legal Basis (GDPR) |
|---|---|---|---|
| Email address | When you subscribe to our launch notification list | To notify you when Smart Rate Engine is available and to send occasional product updates | Consent (Art. 6(1)(a)) |
| Email address, licence key, site URL | When you purchase or activate a Pro licence via Freemius | Licence delivery, activation, and support | Contract performance (Art. 6(1)(b)) |
| Server logs (IP address, browser, pages visited) | Automatically when you visit arvanel.dev | Security, abuse prevention, and basic analytics | Legitimate interest (Art. 6(1)(f)) |
We do not collect any data beyond what is listed above. We do not use cookies for tracking or advertising. Smart Rate Engine (the WordPress plugin) does not collect, transmit, or store any data from your website visitors — it operates entirely within the WordPress admin.
3. Third-Party Processors
We use the following third-party services to process data on our behalf:
| Service | Purpose | Data Shared | Privacy Policy |
|---|---|---|---|
| MailerLite | Email list management and delivery | Email address | mailerlite.com/legal/privacy-policy |
| Freemius | Plugin licensing, payments, and updates | Email, site URL, licence key, payment info (processed by payment provider) | freemius.com/privacy |
We do not sell, rent, or share your personal data with any other third parties.
4. Data Retention
Email list subscribers: we retain your email address until you unsubscribe or request deletion. Freemius licence data: retained for the duration of your licence plus 12 months for support purposes. Server logs: automatically deleted after 90 days.
5. Your Rights
Under the GDPR, you have the right to access your personal data, rectify inaccurate data, erase your data ("right to be forgotten"), restrict processing, data portability, object to processing, and withdraw consent at any time. To exercise any of these rights, email [email protected]. We will respond within 30 days.
You can unsubscribe from our email list at any time using the unsubscribe link in every email, or by contacting us directly.
6. International Transfers
Our email processor (MailerLite) and licensing platform (Freemius) may process data outside the European Economic Area. Both services maintain appropriate safeguards including Standard Contractual Clauses as required by the GDPR.
7. Security
We use HTTPS encryption on all pages, secure authentication for all admin access, and choose third-party processors that maintain appropriate technical and organisational security measures.
8. Children
Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children.
9. Changes to This Policy
We may update this policy from time to time. Changes will be posted on this page with an updated "last updated" date. Material changes will be communicated via email to subscribers.