Privacy Policy

Last updated: September 9, 2026

This panel (kicla.com) manages accounts, purchases and license keys for the WordPress plugin eBay Sync for WooCommerce, developed and operated by BullXen (Italian VAT number 04472980160). This policy explains what data we collect through this panel and through the plugin installed on your site, and how we handle it.

Data controller

BullXen — VAT number 04472980160. For any request regarding your personal data: [email protected].

Data we collect

• Panel account — if you register to purchase or manage a license: name, email, password (stored as a hash, never in plain text).
• Daily plugin check-in (Free plan) — if you use the plugin without a license, once a day your site sends us only its domain name and plugin/WordPress/WooCommerce version numbers, so we can see which sites run the free version. No license key (you don't have one), no product, order or customer data.
• Daily plugin check-in (active Pro license) — your license key and domain, to confirm the license is still valid (also on activation/deactivation). If the license is active, we additionally receive usage data for support and analytics: your eBay listing counts by status, number of connected eBay accounts, plugin/WordPress/WooCommerce version numbers, the date of your last successful eBay sync, and — for orders placed since the last check — each order's ID, date, total amount and currency. Never your end customers' names, emails, addresses or other personal data, on either the Free or Pro plan.
• Support requests — the form opened by the plugin (Settings → Support) sends your domain, your email, the message you write, and plugin/WordPress/WooCommerce version numbers, so we can reply by email.
• Payments — handled entirely by Stripe (see below): we never see or store your card details.
• Minimal technical data — IP address and user agent in security logs (e.g. login attempts), to spot abuse or errors.

We don't collect anything else: no tracking or analytics cookies on this panel, no browsing-behavior profiling, and no data about your own store's customers (that stays between WooCommerce, eBay and you — this panel never sees your products or your customers' personal details).

Third-party services we use

• Stripe — processes Pro payments and subscriptions (checkout, renewal, billing, EU VAT via Stripe Tax). Receives the payment and billing data it needs, per Stripe's own privacy policy.
• eBay — if you connect an eBay account from the plugin on your own site, that OAuth connection and the data the plugin exchanges with eBay to publish/sync your listings are described in the plugin's own readme.txt, not by this panel: this panel is not involved in connecting your eBay account.

None of these services receives your data for advertising or profiling purposes.

Where data is stored and how we protect it

Data lives on a private server (VPS) operated by BullXen, in a database we own — not on generic third-party cloud services. Always encrypted connections (HTTPS/TLS), passwords stored only as hashes, database access limited to the application process and the data controller, regular rotated backups.

How long we keep data

For as long as your account or license stays active. If you delete your account, or write to us asking for deletion, the corresponding data is removed from our systems (except what we're required to keep for legal reasons, e.g. accounting/tax records on payments). Check-ins from Free-only domains that never held a license can also be removed on simple request, since they're not tied to an account.

Your rights (GDPR)

As a resident of the European Union (or otherwise protected by EU Regulation 2016/679), you have the right to:

• Access — obtain a copy of the personal data we process about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure ("right to be forgotten") — request deletion of your account or the data concerning you.
• Portability — receive your data in a structured, machine-readable format.
• Withdraw consent — withdraw any previously given consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights (or for any question) write to [email protected]. We reply within 30 days.

Changes to this policy

Any substantial change to how we process your data will be communicated by email, in addition to updating the date at the top of this page. Continuing to use the panel or the plugin after an update counts as acknowledgment of the changes.