Privacy Policy

1. Who is responsible for your data

The data controller for personal data described in this policy is Kevin Fahey, trading through Results With Kevin / ResultsAiX, established in Portugal ("we", "us").

• Privacy contact: info@onlineimsupport.com
• We are not required to appoint a Data Protection Officer; the contact above handles all privacy matters.

2. The short version

• We collect the minimum needed to deliver licenses, updates, and support.
• We never sell personal data for money. The only third-party measurement on our pages is Google Analytics and Google's tag for our own Google Ads, and you can turn the ads tag off (section 5a).
• Content on your own WordPress site stays on your site — our plugins don't send it to us.
• You can get a copy of your data, or have it deleted, with one email.

3. What we collect, why, and on what legal basis

Data	Where it comes from	Purpose	Legal basis (GDPR Art. 6)
Name, email, transaction ID, product purchased, amount	The marketplace you bought through (WarriorPlus, ClickBank, Stripe, PayPal) sends us a copy via payment notification	Issue your license, deliver the product, provide support, handle refunds	(b) performance of a contract
License-validation pings: your site's domain, plugin version, license key	Your WordPress plugin, automatically	Validate licenses, deliver updates, enforce seat limits	(b) contract; (f) legitimate interest in preventing license abuse
Server logs: IP address, user agent, timestamps	Automatic, when you visit our sites or our endpoints are called	Security, abuse and fraud prevention, debugging	(f) legitimate interest in running secure infrastructure
Support tickets: name, email, message, attachments you choose to send	You, via the contact form or support desk	Answer your questions, fix problems	(b) contract; (f) legitimate interest
Newsletter activity: email, opt-in date, opens/clicks	You, when you opt in via AWeber forms	Send product news and marketing you asked for	(a) consent — withdraw anytime via the unsubscribe link
Accounting records of purchases	Marketplaces	Tax and accounting compliance	(c) legal obligation
Visit statistics: pages viewed, the site or ad that brought you, IP address, browser details and Google Analytics cookie identifiers	Google Analytics on resultsaix.com, automatically	Understand which pages and campaigns work, and improve the site	(f) legitimate interest in understanding how our site is used
Ad measurement: pages viewed, IP address, browser details, Google's cookie identifiers and the click ID of a Google ad	Google's tag on our pages, automatically	Measure our Google ads and show our ads again to people who visited (remarketing), see section 5a	(f) legitimate interest in advertising our products

4. What we deliberately don't collect

• Your browsing behaviour on other websites. The only advertising technology on our pages is Google's tag for our own Google Ads (section 5a).
• Content you create with our AI tools in bring-your-own-key setups — those queries go directly from your site to your AI provider using your key.
• Your WordPress site's content, customers, or analytics. Data your plugins process on your site (e.g. your buyers' conversions in WP Conversion Tracker AI) is stored in your WordPress database, under your control. For that data, you are the controller and we are not a recipient.
• Payment card numbers — these never touch our systems; the marketplaces process all payments.
• Special-category data (health, beliefs, etc.) — we have no use for it; please don't send it in support tickets.

5. Who we share data with (processors & recipients)

We never sell personal data. We share it only with service providers who help us run the business, under contracts that restrict their use of it:

Provider	Role	Location
WarriorPlus, ClickBank, Stripe, PayPal	Payment processing (independent controllers for the payment itself)	USA
AWeber	Email newsletter delivery and opt-in analytics	USA
Freshdesk (Freshworks)	Support ticketing — only when you contact support	USA/EU
Our hosting and CDN/security providers	Website, license server, and download hosting; DDoS/WAF protection	EU/USA
Anthropic, OpenAI, Google	AI processing when you use hosted AI features — your queries are processed under their terms	USA
Google (Google Analytics)	Visit statistics for resultsaix.com (section 5a)	USA
Google (Google Ads)	Advertising: Google's tag on our pages measures our ads and lets us show them again to visitors (section 5a)	USA

We may also disclose data where required by law, to enforce our terms, or in connection with a business sale or reorganisation (with notice).

5a. Advertising with Google

We advertise with Google Ads. Google's advertising tag (the Google tag) runs on the pages of resultsaix.com and resultswithkevin.com. It tells Google which pages you visit and whether you came from one of our ads, together with your IP address, browser details and Google's own cookies and identifiers. Google uses this to count visits and results from our ads and to let us show our ads again to people who visited our sites (remarketing).

• Visitors in the EU, the UK and Switzerland: for visitors Google places in the European Economic Area, the UK or Switzerland, the Google tag runs in a restricted mode. It sets no advertising cookies and does not add you to advertising lists.
• Google Analytics: resultsaix.com also uses Google Analytics to count visits and see which pages and campaigns work. It sets its own cookies (see the Cookie Policy), except for visitors in the European Economic Area, the UK or Switzerland, where it runs without cookies. Turning off the ads tag below does not turn off these visit statistics; to stop them too, block cookies for our site in your browser or email us.
• Global Privacy Control: if your browser sends this signal, the Google tag does not load at all.
• Turn it off yourself: press the button below to turn off the Google tag on this site in this browser. A small cookie (rx_ads_optout) remembers your choice.
• Google's own settings: manage the ads Google shows you in My Ad Center. How Google uses information from sites that use its services: policies.google.com/technologies/partner-sites.

Turn off ad tracking on this site

We do not use advertising pixels from Meta, TikTok or other ad platforms on these sites. If we start, we will update this policy first.

6. International transfers

Some providers above are in the United States. Where personal data leaves the EU/EEA, we rely on the European Commission's adequacy decision for the EU–US Data Privacy Framework for certified providers, and otherwise on Standard Contractual Clauses (SCCs) plus supplementary measures. You can request a copy of the relevant safeguards via the privacy contact.

7. How long we keep data

Data	Retention
Purchase and license records	Life of the license, then up to 2 years (to honour re-issues and refund disputes)
Accounting/tax records	10 years (Portuguese tax law)
Support tickets	3 years after the ticket closes
Newsletter data	Until you unsubscribe; suppression entry kept so we don't email you again
Server logs	Up to 90 days, unless needed for an active security investigation

8. Security

We use TLS encryption in transit, hashed credentials, least-privilege access to databases, separated environments, timing-safe license-key comparison, rate limiting, and audit logging on the license server. No internet system is 100% secure, but we design so that a single failure doesn't expose your data.

Breach notification: if a personal-data breach is likely to result in a risk to you, we will notify the competent supervisory authority within 72 hours of becoming aware, and affected customers without undue delay, as GDPR requires.

9. Your rights (GDPR / UK GDPR)

If you are in the EU/EEA or UK (and in practice, wherever you are), you can:

• Access — get a copy of the personal data we hold about you.
• Rectification — correct inaccurate data (e.g. change the email on your license with proof of ownership).
• Erasure — have your data deleted. We'll delete everything except records we must keep by law (tax) or need for legal claims.
• Restriction — limit how we process your data while a dispute is resolved.
• Portability — receive the data you gave us in a machine-readable format.
• Objection — object to processing based on legitimate interest, and to direct marketing at any time (which we always honour).
• Withdraw consent — for consent-based processing (the newsletter), withdraw anytime via the unsubscribe link or by email; this doesn't affect processing before withdrawal.

How to exercise them: email info@onlineimsupport.com from the address connected to your purchase (or provide proof of identity if writing from another address). We respond within one month. Exercising your rights is free.

Complaints: you have the right to lodge a complaint with a supervisory authority — in Portugal, the CNPD (Comissão Nacional de Proteção de Dados, cnpd.pt), or the data-protection authority of the country where you live or work. We'd appreciate the chance to resolve it directly first.

10. California residents (CCPA/CPRA)

• We do not sell personal information for money. Google's advertising tag on our pages (section 5a) may count as "sharing" for cross-context behavioural advertising, or as "targeted advertising" under other US state laws. You can opt out with the button in section 5a, by sending a Global Privacy Control signal (which we honour), or by emailing us.
• Categories collected: identifiers (name, email, IP, cookie and advertising identifiers), commercial information (purchases), internet activity (our own site and endpoint logs, the pages you view as measured by Google Analytics, and the pages you view, which Google's tag shares with Google for advertising).
• You have the rights to know, delete, correct, and to non-discrimination for exercising them. Use the same contact email; we honour these requests regardless of exact legal applicability.

11. Children

Our products and sites are for business use and not directed at children under 16. We don't knowingly collect children's data; if you believe a child has provided us personal data, contact us and we'll delete it.

12. Automated decision-making

We don't make decisions with legal or similarly significant effects about you based solely on automated processing. Automated systems are limited to things like rate-limiting and fraud signals, always with human review available.

13. Cookies

This site uses a minimal set of cookies/scripts — see the Cookie Policy for the full list and how to control them.

14. Changes to this policy

We'll update this page when our practices change and adjust the "last updated" date. Material changes are announced on the site and by email to active customers.

15. Contact

Privacy questions or requests: info@onlineimsupport.com. See also: GDPR Compliance Statement · Data Processing Addendum.