Privacy Policy

What we collect, why we collect it, and what we never do with it.

Last updated: 24 September 2026

This policy covers avadakit.com, hub.avadakit.com, and doc.avadakit.com (together, “our sites”) and the team that operates them (“we”, “us”). We make Element Kit for Avada, a plugin for the Avada WordPress theme, and run the licensing service behind it. For anything in this policy, contact us at info@avadakit.com.

Account information. When you buy a license or create an account, we store your email address, a hashed password once you set one, and any profile details you add (such as a name). We never store passwords in readable form.

Purchase and billing information. We store your plan, subscription status, renewal dates, and payment history references. Payments are processed by Razorpay; your card, UPI, or bank details go directly to Razorpay and are never stored on our servers. Razorpay’s handling of your data is described in the Razorpay privacy policy.

License and activation data. To operate licensing, our server stores your license keys, the domain names of sites you connect, a technical site identifier, plugin version numbers, and the IP address and time of licensing requests in our API logs.

Support communications. If you email us, we keep the correspondence so we can help you and improve the product.

Website basics. Like most websites, our servers keep standard access logs (IP address, browser type, pages requested).

We use cookies only to make the service work: a session cookie when you sign in to your customer portal, an optional “remember me” cookie if you choose it, and a short-lived checkout cookie (about 30 minutes) that lets the purchase page show your new license right after payment. We do not use advertising cookies and we do not sell or share browsing data with advertisers.

We do not sell your personal information, and we do not send marketing email unless you have opted in.

If you install Element Kit on your website, the plugin contacts our licensing server to validate the license and check for updates. Those requests include your site’s domain, a technical site identifier, and the plugin version; our server logs the request IP and time. The plugin does not send us your site’s content, your users’ personal data, or analytics about your visitors.

Some elements store data only in your visitors’ own browsers (for example, the Recently Visited element keeps a visitor’s recently viewed pages in their browser storage and never transmits it to us or to your server). Elements that display store activity are designed to anonymise customer names by default. You remain responsible for your own site’s privacy disclosures to your visitors.

We share information only with service providers who help us run the service: Razorpay for payment processing, our hosting provider for running the websites, and our email delivery provider for transactional email. Each receives only what it needs to perform its role. We may also disclose information if the law requires it.

Account, license, and billing records are kept while your account is active and afterwards as long as accounting and tax law requires. Licensing API logs are kept for operational and security purposes and are periodically pruned. If you ask us to delete your account, we remove personal information that we are not legally required to retain.

You can access and update your profile from your customer portal. You may ask us at any time to provide a copy of the personal data we hold about you, correct it, or delete it, by writing to info@avadakit.com. We respond to all requests within a reasonable time. Depending on where you live, these rights may be backed by applicable data protection law, including the GDPR for customers in the European Union or United Kingdom. EU and UK customers also have the right to lodge a complaint with their local supervisory authority.

Portal and licensing traffic is encrypted in transit over HTTPS. Passwords are stored hashed, license operations are authenticated, and access to customer records is restricted. No system is perfectly secure, but we design and test with security as a requirement, not an afterthought.

We and our service providers operate internationally, and your information may be processed in countries other than the one you live in. Wherever it is processed, it is protected as described in this policy.

Our products and services are intended for business and professional use and are not directed at children. We do not knowingly collect personal information from children.

If we change this policy, we will update this page and revise the date below. Significant changes affecting how your data is handled will be highlighted on this page or notified by email.