Privacy Policy

This policy explains how Rosenheinrich Software Solutions (Phillip Rosenheinrich, Destouchesstr. 3, 80803 Munich, Germany — “we”, “us”) processes personal data when you use the multisitemigrate.com website, customer account, and license services for Multisite Migrate. Provider details are in our Legal Notice.

WordPress plugin (on your server)

The free Multisite Migrate WordPress plugin runs on infrastructure you control. Backup archives, database dumps, and stored credentials remain on your servers unless you configure remote destinations (for example cloud storage). We do not receive that site content through normal plugin use.

Licensed features may contact our license server with a license key and site URL to validate or activate your license. Optional cloud connectors (Google Drive, Dropbox) use an OAuth proxy on our license server; authorization codes and tokens are exchanged in transit and are not stored in our database.

Optional plugin services (opt-in only)

Separate from website checkout and account email, the Multisite Migrate plugin may contact our portal at multisitemigrate.rosenheinrich.com only when you opt in in the setup wizard or in Settings → Privacy. No visitor analytics, advertising trackers, backup archives, or database contents are transmitted through these optional flows.

Usage telemetry

When: you check the telemetry checkbox on the setup wizard finish step or enable telemetry in Settings → Privacy. Legal basis: consent (Art. 6(1)(a) GDPR).

Data sent:

• A pseudonymous installation ID (random identifier stored in your WordPress database).
• A pseudonymous, one-way site identifier derived from your site URL; we cannot derive your URL from it without access to your site.
• Plugin edition (Free or Pro), plugin, WordPress, and PHP versions, site locale.
• Wizard progress and completion; backup, import, and restore job outcomes (success or failure, error category and sanitized message — not file contents); optional environment snapshots (hosting basics for compatibility work).

Not included: site URL in event payloads, visitor or page analytics, backup or database contents. Withdrawal: disable telemetry in Settings → Privacy or uncheck the option before finishing the setup wizard.

Standalone installer (empty server)

When: you run the Pro empty-server installer on a host without WordPress and check the optional telemetry checkbox on the Server check step before continuing. Legal basis: consent (Art. 6(1)(a) GDPR). This is separate from telemetry on the source site — source-plugin consent is not copied into the installer package.

Data sent during that migration only:

• A new pseudonymous installation ID generated for the installer session (stored in installer state on the destination host, not in the signed backup manifest).
• A pseudonymous, one-way site identifier (not your full site URL).
• PHP version, installer locale, Pro edition, sanitized installer error categories and messages (max 500 characters, paths redacted).

Endpoints: same telemetry register and events URLs as plugin telemetry above. Installer error reports stop when the migration finishes or installer files are removed. For ongoing telemetry on the restored site, opt in again in Multisite Migrate Pro → Settings → Privacy after WordPress is running.

Product emails from the plugin

When: you check the product-email checkbox on the setup wizard finish step. This is separate from marketing emails on this website and from checkout email. Legal basis: consent (Art. 6(1)(a) GDPR).

Data sent:

• Your WordPress administrator email address and display name.
• Full site URL, site title, WordPress and PHP versions, site language, and Multisite Migrate plugin version.

Where double opt-in is required by law, we send a confirmation email; the confirmation link expires after 48 hours. You can unsubscribe via the link in each message or by contacting us.

Feedback and deactivate survey

When: you submit the optional in-plugin feedback dialog or the deactivate survey when removing the plugin. Legal basis: consent (Art. 6(1)(a) GDPR).

Data sent:

• Sentiment rating, optional free-text message, deactivate reason (if applicable), plugin, WordPress, and PHP versions.
• Only the pseudonymous site identifier — not your site URL. When you report a problem after a failed job, the last sanitized error message may be included.
• Optional contact email on the deactivate survey only, if you choose to provide it.

Google user data

If you connect Google Drive as a backup destination in Multisite Migrate, the plugin requests access through Google OAuth using the drive.file scope. That scope limits access to backup files that Multisite Migrate creates or opens in your Google Drive account.

• What we access: backup archives that the plugin uploads, lists, downloads, or deletes in your Google Drive (typically in a dedicated folder).
• Why: to store, restore, import, or remove your WordPress backups when you request it. We do not read unrelated files in your Drive.
• How authorization works: you sign in with Google; our license server at multisitemigrate.rosenheinrich.com acts as an OAuth proxy so your site can receive tokens without embedding client secrets in the plugin.
• Where data is stored: backup files stay in your Google Drive. OAuth access and refresh tokens are stored in your WordPress database on your server. Our license server keeps tokens only in short-lived temporary storage during the authorization handshake and when proxying token refresh — not in our customer database.
• Sharing: we do not sell Google user data and do not use it for advertising.
• Limited use: our use of Google user data is limited to providing and improving the backup and restore features you enable, in line with the Google API Services User Data Policy (including the Limited Use requirements).
• Revoking access: disconnect Google Drive in the plugin settings, or remove Multisite Migrate under your Google Account permissions.

Data we process on this website

• Account & checkout: email address, name, phone number (optional), password (stored only as a secure hash), and Stripe customer ID after purchase.
• Partner referrals: if you arrive via a partner link (?ref=), the referral code is passed only in the link and sent along with your registration or purchase. We store it on our server with the order (as Stripe metadata) so we can pay the partner’s commission. No cookie or other browser storage is used for this. The partner does not receive your name or email address. Legal basis: our legitimate interest in settling partner commissions (Art. 6(1)(f) GDPR).
• Campaign links: if you arrive via a campaign link (for example from our WordPress plugin or an ad), the campaign details are carried only in the link to pricing and checkout so the matching offer can be applied. No cookie or other browser storage is used for this.
• Licenses & activations: license key, plan tier, status, expiry, linked email, activated site URL, and plugin version.
• Pricing test: we test different presentations of our pricing page. The variant you see is chosen on our server and carried only in the link to checkout, so you see the same price throughout. No cookie or other browser storage is used for this.
• Authentication: a session cookie (mm_web_auth), browser type and time of last use. Sign-in by email link uses a short-lived link we send by email.
• Billing: payment and billing details are collected and processed by Stripe (card data, billing address, tax information). We receive limited billing metadata from Stripe (customer ID, subscription status, invoices).
• Server & security logs: IP address, request metadata, and timestamps in standard web-server logs and in our license audit log (failed validation attempts and activations; retained up to 90 days).
• Essential cookies: authentication session, optional billing-currency preference (mm_billing_currency, 1 year), and language preference cookies if you use our multilingual setup.
• Email: transactional messages (welcome, login links, license delivery, billing notices) via our mail infrastructure.

Cookies and consent

When you visit multisitemigrate.com, we use cookies and similar technologies. Some are strictly necessary for the site to work; others — with your consent — support marketing measurement. Details: Cookie Policy.

Consent management

On your first visit (EEA, UK, Switzerland), a first-party consent banner lets you accept all, reject non-essential cookies, or open Preferences by category. You can reopen choices anytime via Cookie settings in the footer. Your choice is stored in your browser.

• Essential: always active — login, checkout, security, language routing, billing currency, consent storage, Cloudflare, Stripe.
• Marketing: opt-in — Google Tag Manager and Google Ads (remarketing and conversion measurement).

Marketing cookies and tags load only after you opt in. Legal basis: Art. 6(1)(a) GDPR (consent). In Germany, storing or accessing information on your device for these purposes also requires consent under TDDDG § 25(1).

First-party cookies

• mm_web_auth — account session — session / sign-in duration — Essential
• mm_billing_currency — EUR/USD billing preference — 1 year — Essential
• mm_locale — language you chose in the language switcher — 1 year, set only when you actively choose a language — Essential
• Consent preferences — your cookie choice, stored in your browser — until cleared — Essential

Marketing and third-party technologies (consent only)

These load only if you opt in to the matching category:

• Google Tag Manager — tag container for consented tags.
• Google Ads — Marketing — remarketing and conversion measurement. Google Privacy Policy · Google Ads Settings (opt-out)
• Google Consent Mode v2 — Google Tag Manager is only loaded after you opt in to Marketing; until then, Google receives no request.

Third-party providers may set their own cookies (for example for ad identifiers). Retention is typically 30–90 days, depending on the provider and your browser settings.

Audience measurement

We count page views without cookies and without recognising visitors, using PureMetrix (operator: Lydia Rebers, Munich, Germany; hosted in Germany). No consent is required for this. Legal basis: legitimate interests (Art. 6(1)(f) GDPR).

Retention and withdrawal

You can withdraw marketing consent at any time via Cookie settings in the footer (or clear site data in your browser). Withdrawal does not affect processing that was lawful before withdrawal. Essential cookies remain active where necessary for the site to function.

Purposes and legal bases (GDPR)

• Contract performance (Art. 6(1)(b)): account creation, license provisioning, checkout, subscription management, and support related to your purchase.
• Legitimate interests (Art. 6(1)(f)): fraud prevention, rate limiting, security logging, and keeping our services reliable — balanced against your rights.
• Legal obligation (Art. 6(1)(c)): tax and accounting records where applicable.
• Consent (Art. 6(1)(a)): marketing cookies and tags (Google Tag Manager, Google Ads) — only after CMP opt-in; optional plugin usage telemetry, product emails from the setup wizard, and in-plugin feedback or deactivate surveys — only after you opt in in the plugin; essential cookies do not require marketing consent.

Recipients and processors

• PureMetrix (Lydia Rebers) — cookieless audience measurement for this website, hosted in Germany.
• Stripe, Inc. — payment processing and customer billing portal. Stripe Privacy Policy
• Google Ireland Ltd. — Google Tag Manager, Google Ads, and Google Consent Mode (consent-based). Google Privacy Policy
• Hosting provider — operation of this website and databases (EU/EEA or with appropriate safeguards).
• Cloud / CDN providers (if enabled) — may see IP addresses and request metadata (for example country detection for currency display).
• Email delivery — providers used to send transactional email.
• Rosenheinrich Software Solutions (portal APIs on multisitemigrate.rosenheinrich.com) — opt-in plugin telemetry, product-email subscriptions, and feedback when you submit them in the plugin.

We do not sell your personal data.

International transfers

Stripe, Google, and some infrastructure providers may process data in the United States or other countries outside the EU/EEA. Where required, transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses and the provider’s data-processing terms.

Retention

• Customer account and license records: for the life of your account or license, plus statutory retention periods for invoices.
• Checkout staging data (before payment completes): up to 24 hours.
• Magic-link tokens: up to 24 hours.
• License audit log entries: up to 90 days, then deleted automatically.
• Server logs: according to hosting configuration (typically weeks to months).
• Marketing cookies (when consented): typically 30–90 days, depending on the provider; you can clear them by withdrawing consent or deleting browser cookies.
• Opt-in plugin telemetry (events and install metadata): until you withdraw consent in the plugin or request erasure; after withdrawal we stop collecting new events and delete or anonymise associated portal records within a reasonable period, typically 90 days, unless a longer period is required by law.
• Plugin product-email subscriptions: until you unsubscribe, object, or request erasure; double-opt-in confirmation links expire after 48 hours.
• In-plugin feedback and deactivate surveys: until erasure is requested or no longer needed for product improvement, typically for up to 24 months after submission unless you ask us to delete earlier.

Your rights

Under the GDPR you may have the right to:

• access, rectify, or erase your personal data;
• restrict or object to certain processing;
• data portability where applicable;
• withdraw consent at any time (without affecting prior lawful processing);
• withdraw telemetry consent in Settings → Privacy in the plugin;
• unsubscribe from plugin product emails via the link in each message;
• lodge a complaint with a supervisory authority — in Germany, your local state data-protection authority (Landesdatenschutzbehörde).

To exercise your rights, email [email protected]. You can also manage billing details in the customer account or Stripe customer portal where available.

Security

Passwords are stored hashed. Sessions use HTTP-only cookies. Access to production systems is restricted. No method of transmission over the Internet is 100% secure; we work to protect your data with reasonable technical and organisational measures.

Children

Our services are aimed at businesses and site administrators. We do not knowingly collect data from children under 16.

Changes

We may update this policy when our services or legal requirements change. The “Last updated” date at the top indicates the current version.

Contact

Phillip Rosenheinrich · Rosenheinrich Software Solutions · Destouchesstr. 3 · 80803 Munich · Germany
Email: [email protected]