Privacy

AumCreate builds custom WordPress websites, themes, and plugins, sells ready-made site templates and plugins, and makes AI tools for people who build sites. This policy covers aumcreate.com.

For anything in this policy — including access, correction, or deletion — write to support@aumcreate.com.

Only what a specific feature needs. There is no profile being assembled in the background.

• Account — your email address, the name you enter, the language you signed up in, and either a password hash or, if you sign in with Google, the identifier Google gives us. We never see your password itself.
• Session — your IP address and browser user-agent, recorded at each sign-in and used for account security, such as spotting credential-stuffing.
• Enquiry form — name, email, optional company, what you need, budget and timeline if you fill them in, which page you sent it from, and any campaign parameters in the link. We do not store your IP with an enquiry.
• Orders — amount, currency, the exchange rate locked at checkout, and the payment provider’s order reference. Card numbers never reach us; they are entered on PayPal’s or Alipay’s own pages.
• Credits — how many credits moved and why. To make the sign-up bonus one-per-person, we store a normalised form of your email address on that one ledger row.

This is the part most policies are vague about, so here it is tool by tool.

• The free tools (SVG optimiser, image converter, icon kit, .po compiler) run entirely in your browser. Nothing is uploaded. We could not keep your files if we wanted to.
• Background removal sends the image you choose to Pixian.ai, which does the cut-out and returns it. We do not store the image or the result.
• PO translation, product CSV, and redirect mapping send only the part that needs a model — the untranslated strings, the product names and attributes, the URLs that could not be matched — to DeepSeek. The file itself is parsed in your browser and never uploaded.
• What we record is the count, not the content: how many strings, how many products, how many URLs, how many megapixels. That is what the charge is calculated from, and it is all that is kept.

This site sets exactly one cookie: your session token, after you sign in. It is HttpOnly, restricted to this exact hostname, SameSite=Lax, marked Secure in production, and it expires after seven days.

There is no analytics, no advertising, no tracking pixels, no third-party scripts, and nothing stored in your browser’s local storage. That is why you have not been asked to accept cookies — there is nothing to accept.

We do not sell data and we do not share it for advertising. These are the services that process data on our behalf so a feature can work:

• Pixian.ai — images you submit to the background remover.
• DeepSeek — the text that needs a model, as described above.
• PayPal and Alipay — payment. They tell us an order was paid; they do not give us your card details.
• Alibaba Mail — our outgoing mail server, for verification, password reset, and enquiry notifications.
• Google — only if you choose to sign in with Google.

The site itself runs on servers we control. There is no third-party analytics or CDN handling your requests.

• Sessions expire after seven days. Verification and password-reset links expire after one hour and work once.
• Account data is kept until you ask us to delete it.
• Enquiries are kept as a business record so we can pick a conversation back up.
• Orders and credit ledger entries are financial records and are kept even if the account is closed.

Write to support@aumcreate.com and we will act within 30 days. You can ask us to show you what we hold, correct it, delete your account, or send you a copy of your data. You can withdraw consent for marketing at any time — though we do not currently send marketing email at all.

If an account was created with your email address and it was not you, you can take that address back yourself: use “Forgot your password?” on the account page.

This is a service for people who build websites professionally. It is not directed at children, and we do not knowingly collect data from anyone under 16.

If we change how data is handled, we will change this page and the date at the top. If the change is significant and you have an account, we will email you.