We take your privacy seriously. This policy explains what data we collect, how we use it, and your rights — in plain language.
Last updated: April 26, 2026
📦 StackOMS is a self-hosted WordPress plugin. All your operational data — tasks, invoices, clients, employees, and financial records — is stored exclusively in your own WordPress database on your own server. Priha Corporation does not have access to, store, or process this data in any way.
Priha Corporation ("we", "our", or "us") develops and distributes StackOMS, a self-hosted WordPress plugin for professional service firms. This Privacy Policy explains what information we collect when you visit stackoms.com, purchase a license, or contact our support team — and how we use it.
This policy does not govern data you enter into your own StackOMS installation (tasks, clients, invoices, staff records, etc.). That data is stored entirely on your own server and is outside our control. You are responsible for its privacy and security.
✅ We do not sell your personal data. We do not use your data for advertising. We have no access to the operational data inside your StackOMS installation.
This Privacy Policy complies with applicable Indian data protection laws including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDPA), as well as GDPR principles where applicable.
Payments are processed by our third-party payment gateway (Razorpay / PayU). We receive only a transaction confirmation and the last 4 digits of the card used. We do not store full card numbers, CVV, or banking credentials.
When your WordPress site checks for plugin updates, a standard WordPress request is sent to our update server. This request may include your WordPress site URL, the installed plugin version, and your WordPress/PHP version. We use this solely to serve the correct update and do not link it to your personal identity or store it beyond server logs (retained 90 days).
Because StackOMS is a self-hosted plugin, the following data never leaves your server and is never transmitted to us:
| Purpose | Legal Basis | Data Used |
|---|---|---|
| Process license purchase & deliver the plugin | Contract performance | Name, email, payment confirmation |
| Send license key, invoices & receipts | Contract performance | Email address |
| Provide customer & technical support | Contract performance | Name, email, support messages |
| Send plugin update notifications | Contract performance | Email address |
| Serve plugin update packages | Contract performance | Site URL, plugin version |
| Improve the plugin & website | Legitimate interest | Log data, support feedback |
| Prevent fraud & abuse | Legitimate interest | IP address, payment signals |
| Send product news & announcements | Consent (opt-in) | Email address |
| Comply with legal obligations | Legal obligation | As required by law |
We do not use your data for targeted advertising. We do not sell personal data to any third party.
We take reasonable measures to protect the personal data we hold on stackoms.com (account info, purchase records, support tickets):
🔒 Your StackOMS installation data is on your own server. Its security depends on your hosting provider, WordPress configuration, database setup, and backup practices — all of which are entirely within your control. We recommend keeping WordPress, your theme, and all plugins updated, and using a reputable managed host.
⚠️ If you discover a security vulnerability in the StackOMS plugin, please report it responsibly to security@stackoms.com. We aim to respond within 24 hours and release a patch within 72 hours of confirmed vulnerabilities.
| Data Category | Retention Period | Reason |
|---|---|---|
| Purchase records & license info | 7 years | Legal obligation (GST / tax records) |
| Account & contact details | Duration of active license + 2 years | Support & warranty |
| Support communications | 3 years from last ticket | Dispute resolution |
| stackoms.com server logs | 90 days | Security monitoring |
| Plugin update server logs (site URL, version) | 90 days | Security & abuse prevention |
You may request deletion of your account data at any time by emailing privacy@stackoms.com. We will process your request within 30 days. Note that purchase records required by tax law cannot be deleted before the legal retention period expires.
You have the following rights regarding the personal data we hold about you on stackoms.com:
| Right | What It Means | How to Exercise |
|---|---|---|
| Access | Obtain a copy of the personal data we hold about you | Email privacy@stackoms.com |
| Rectification | Correct inaccurate or incomplete data | Email privacy@stackoms.com |
| Erasure | Request deletion of your personal data (subject to legal retention) | Email privacy@stackoms.com |
| Restriction | Restrict how we process your data | Email privacy@stackoms.com |
| Portability | Receive your data in a machine-readable format | Email privacy@stackoms.com |
| Objection | Object to processing based on legitimate interest | Email privacy@stackoms.com |
| Withdraw Consent | Opt out of marketing emails at any time | Unsubscribe link in any email |
We respond to all requests within 30 days. Identity verification may be required before we process sensitive requests.
🇮🇳 Indian residents: You have additional rights under the Digital Personal Data Protection Act, 2023 (DPDPA). Contact our representative at dpdpa@stackoms.com for DPDPA-specific requests.
Priha Corporation is based in India and primarily processes data within India. Where data is transferred to service providers outside India (for example, email delivery), we ensure appropriate safeguards are in place, including contractual data protection clauses.
Your StackOMS installation operates entirely on your own server in whatever country you choose to host it. Priha Corporation has no involvement in or liability for cross-border transfers of data within your own installation.
StackOMS and stackoms.com are intended for professional business use by adults (18+). We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted data to us, contact privacy@stackoms.com and we will delete it promptly.
stackoms.com may link to third-party sites (payment gateways, documentation platforms, etc.). We are not responsible for their privacy practices. The StackOMS plugin may integrate with external services you configure (e.g. WhatsApp Business API for reminders). Those integrations are set up by you on your own server — review those providers' privacy policies accordingly.
Because StackOMS is a self-hosted WordPress plugin, you are the data controller for all operational data entered into your installation. Priha Corporation is not a data processor for this data — we have no access to it whatsoever.
As the operator of your StackOMS installation, you are responsible for:
💡 We recommend consulting a legal professional to draft a privacy notice for your own firm's client data management practices within StackOMS.
We may update this Privacy Policy from time to time. Material changes will be communicated by:
Continued use of stackoms.com or the plugin after changes take effect constitutes acceptance of the revised policy.
For any privacy-related questions, rights requests, or concerns:
| Purpose | Contact |
|---|---|
| General privacy questions | privacy@stackoms.com |
| Data access / deletion requests | privacy@stackoms.com |
| DPDPA 2023 representative | dpdpa@stackoms.com |
| Security vulnerability reports | security@stackoms.com |
| Legal & compliance | legal@stackoms.com |
| General support | support@stackoms.com |
Data Fiduciary (DPDPA 2023):
Priha Corporation
345, Tower A, K10 Atlantis, Opp. Vadodara Central Mall,
Sarabhai Main Road, Alkapuri, Vadodara – 390007, Gujarat, India
Contact: Haard Shah | +91 72850 09393 | support@stackoms.com
We aim to respond to all privacy inquiries within 5 business days and resolve requests within 30 days.
Contact our privacy team directly. We respond to all data requests within 5 business days.
Email Privacy Team →