Our privacy approach
FortisRestore, operated by Munklunk, LLC, collects the information needed to provide accounts, subscriptions, licensing, updates, support, and secure integrations. Your website backup archives are stored in the destination you choose; FortisRestore does not intentionally copy their contents into the fortisrestore.app account service.
1. Information we collect
Account and transaction information
We collect information such as your email address, account authentication records, selected plan, subscription status, Stripe customer and subscription identifiers, invoice status, and license details. Stripe processes full payment-card information; FortisRestore does not store full card numbers.
License and site information
When a license is activated or an update is requested, we may receive the license key or a protected representation of it, website domain, platform, software version, plan, activation status, IP-derived security data, and timestamps. License keys are protected in storage and should be treated as confidential.
Technical and support information
We may collect server logs, IP address, browser or device information, request metadata, error details, security events, update-download records, and communications you send to us. If you contact support, do not send passwords, recovery keys, private keys, access tokens, or backup archives unless we provide a secure method and specifically request them.
2. Backup archives and recovery keys
The FortisRestore extension or plugin runs within your Joomla or WordPress environment. Archives may remain on your server or be transferred directly to a remote-storage provider you authorize. Their contents can include website files, databases, configuration, user information, and other data controlled by you.
You decide what to back up, where to store it, how long to retain it, and who may access it. Encrypted archives require the correct recovery key. We do not have a universal key and may be unable to recover an archive if you lose yours.
3. Connected storage providers
If you connect Dropbox, Google Drive, Amazon S3-compatible storage, SFTP, or another provider, authorization is completed with that provider. FortisRestore may store access and refresh tokens, provider identifiers, selected destination paths, and connection status in your website environment as needed to perform requested transfers. The provider receives information according to its own privacy policy.
You can disconnect a provider from FortisRestore and revoke access through the provider. Revocation may not delete archives already stored there.
4. How we use information
- Provide accounts, checkout, subscriptions, licensing, activations, protected downloads, updates, and support.
- Authenticate users, prevent fraud or abuse, enforce plan limits, and protect the service.
- Send transactional messages about purchases, licenses, security, account access, backups, restores, or material service changes.
- Diagnose failures, maintain compatibility, improve reliability, and understand aggregate service usage.
- Comply with legal obligations and establish or defend legal claims.
5. Legal bases
Where applicable, we process information to perform our contract with you, pursue legitimate interests such as security and service improvement, comply with law, and act with your consent. You may withdraw consent where processing depends on it, without affecting earlier processing.
6. How we share information
We share information only as needed with service providers that support payment processing, hosting, email, security, analytics, customer support, and infrastructure; with storage providers you choose; during a merger, financing, acquisition, or sale of assets subject to appropriate safeguards; or when required to comply with law, protect rights, investigate abuse, or address security threats.
We do not sell your personal information or share it for cross-context behavioral advertising.
7. Retention and security
We retain account, subscription, licensing, security, and transaction records for as long as necessary to provide the service, meet tax or accounting duties, resolve disputes, prevent abuse, and enforce agreements. Retention periods vary by record type and legal requirement.
We use reasonable administrative, technical, and organizational safeguards, including restricted access and protection of sensitive license and configuration data. No transmission or storage method is completely secure.
8. Your rights and choices
Depending on your location, you may have rights to access, correct, delete, restrict, or obtain a copy of personal information, object to certain processing, withdraw consent, or appeal a decision. You can update billing information through your account and manage provider access through FortisRestore or the provider.
To make a privacy request, email privacy@fortisrestore.app or hello@fortisrestore.app. We may verify your identity before fulfilling a request. You may also complain to your local data-protection authority.
9. Cookies and communications
We may use essential cookies or similar technologies for sign-in, account security, checkout continuity, and preferences. We do not use essential cookies for unrelated advertising. You may receive transactional emails necessary to operate your account or subscription. Marketing messages, if offered, will include an unsubscribe method.
10. International use and children
Information may be processed in countries other than your own. Where required, we use appropriate safeguards for international transfers. FortisRestore is intended for businesses and website administrators and is not directed to children under 13 or the minimum age required in their jurisdiction.
11. Changes and contact
We may update this policy as FortisRestore evolves. We will post the revised policy here and change the effective date; material changes will be communicated when required.
Privacy questions and requests: privacy@fortisrestore.app. General inquiries: hello@fortisrestore.app.