Privacy policy — MediaKnight / Vivango
Version 1.0 — effective from 1 October 2026
1. Who is responsible
Vivango, Dutch Chamber of Commerce number 34212198, VAT number NL001640614B81, Uilenstede 77-H, 1183 AB Amstelveen, the Netherlands. Privacy questions and requests: support@vivango.com.
Vivango is the controller of your data as a MediaKnight customer: licensing, support and voluntarily submitted feedback. Freemius processes, on our behalf, the data needed for licensing, updates and (if you opt in) usage statistics. At checkout Freemius also acts as the seller and processes your payment and billing details under its own privacy policy (https://freemius.com/privacy/). Your WordPress site operator is responsible for files and user data on that site. Supplying the plugin alone does not give Vivango access to that content or automatically make Vivango the processor for all visitor data.
This policy covers these product services. It does not make a general statement about cookies, analytics or other forms across every page of vivango.nl or vivango.com. Those websites must separately explain their actual processing. If support requires access to customer data, we agree a safe procedure beforehand and assess whether a data processing agreement is needed.
2. Free plugin: data stays on your site
The free base works without a Vivango account. It sends no analytics, usage telemetry, media files or visitor content to Vivango. Optional feedback is a separate action; see section 4.
Protection status, access rules, settings and records for previously created download links may be stored locally. To limit download requests, the base uses a salted hash of a connecting IP address valid for about two minutes. This is not a permanent IP database. Expired WordPress transients may physically remain in a database or backup until WordPress or the host removes them. A hash that can still be related to a person is not anonymous data.
The server check requests a temporary test file through the site's own configured uploads URL. The operator controls that destination and any CDN/hosting logs. Uninstalling the base sends no notification to Vivango. The operator manages visitor information, local retention and deletion on their own site.
3. Licensing and payments
The free protection features do not require a connection to Freemius. If you choose to connect in a version with the optional Pro integration, Freemius is used for the Pro trial or purchase, licence management and updates. Before connecting, review which site, account and technical data will be shared.
For a purchase or trial, checkout runs on checkout.freemius.com. Freemius is the seller (merchant of record): it processes your name, email address, billing and payment details under its own privacy policy (https://freemius.com/privacy/) and issues the invoice. Vivango receives your email address, licence and purchase details from Freemius for support, licence management and administration, but no full card details.
We email you about your licence, support, security and any change of sales system. We only send product news if you have not opted out; every email includes an unsubscribe link. Under its own privacy policy, Freemius may also send messages about its service. Send questions or requests about your data to support@vivango.com.
4. Optional feedback and support
When you intentionally submit feedback, we receive only its type, the selected category or departure reason, any explanation, and an email address if you choose to request a reply and enter it. The plugin does not automatically add the site address, administrator email, file names or visitor data to the feedback content. Receipt is recorded with a date and handling status.
Providing feedback, skipping the departure question and deactivating the plugin are separate choices. Skipping or cancelling sends no feedback. Feedback does not cancel a subscription. The network connection may produce security information; the central service may use a short-lived hashed counter, normally valid for ten minutes. Physical cleanup and logs are separate from that validity period.
Do not send passwords, keys, customer documents, payment card information or special category personal data. If you ask us to move your licence to a new email address, we also process your old and new email address and your licence key or order number, only to confirm the licence is yours and to update the email address of your customer account with Freemius. The legal basis is performance of the contract. We never ask for payment card details or passwords. For support we process the contact details, correspondence and safe diagnostic information you share that is needed to help. We do not routinely require access to your entire site. General ideas without personal information may inform improvements; publishing an identifiable quotation, name or testimonial requires a separate arrangement.
5. Purposes and lawful bases
| Processing | Purpose and lawful basis |
|---|---|
| Pro trial, order, licence association, service messages and support for the contracting party | Performance of the contract or steps taken at your request before it. Without necessary site/installation data, the hosted service cannot be supplied. |
| Contact person at a business customer | Legitimate interest in carrying out and communicating about the contract with their organisation; limited to relevant business contact information. |
| Invoices and legally required financial records | Tax and accounting obligations; no justification for retaining all technical or voluntary feedback data for the same period. |
| Optional feedback and any requested reply | Consent through informed, intentional submission and the separate choice to request a reply. Withdrawal through the privacy address does not affect existing media protection or the purchased service. |
| Security and limited repeat-trial/abuse checks | Legitimate interest in protecting the service and one trial per site, after assessing necessity, effects and less intrusive alternatives. You may object. |
| Specific complaints, legal claims and necessary evidence | Handling the contract and, where needed, legitimate interest in establishing, exercising or defending rights; legal obligations take priority. No general retention authorisation. |
Consent to feedback does not cover newsletters, tracking or other use. Vivango does not sell personal data or use these product records for advertising profiling. Automated licence checks determine technical service status; you can request human review and correction of an incorrect restriction through the contact address. This is not a credit assessment or comparable personal profiling service.
6. Retention
| Data | Period or criterion |
|---|---|
| Operational licence and installation records | For as long as necessary to provide the trial or service and handle a concrete follow-up, complaint or claim. Delete or anonymise when no longer necessary, unless a statutory duty requires specific evidence. Unnecessary secrets are not tax records. |
| Minimum evidence of a previous trial | Only the site-bound identification and original trial dates that remain necessary and proportionate to enforce one trial per site. Review and delete when that purpose ends; do not retain the full operational licence record as minimum evidence. |
| Core tax records | Generally 7 years under applicable Dutch tax rules; OSS records 10 years where that scheme applies. These periods apply only to the records required by law, not automatically to feedback, logs or all licence fields. |
| Feedback and related correspondence | Until the feedback or requested reply has been handled or consent is withdrawn, then delete or genuinely anonymise without undue delay unless another legal basis requires specific evidence. |
| Support and complaint correspondence | For as long as necessary to handle the request, comply with warranty or statutory duties, or establish, exercise or defend a concrete claim. |
| Central access, security and error logs | For the shortest period necessary for security and fault investigation. Retain only relevant records longer when a concrete incident or claim requires it, with periodic review. |
| Central backups | According to a documented recovery cycle limited to what is necessary for continuity and security. Deleted data is not restored for ordinary use; after a necessary recovery, previous deletions are applied again. |
A claim or legal duty may justify longer retention of specific records. We record the reason, access and review arrangements; not everything is retained longer. Truly anonymous product statistics may remain longer. Removing a name is insufficient when the rest is still identifiable.
7. Recipients and international processing
Only authorised people have access for their tasks. Providers receive what is necessary for hosting, payment, administration and communication. Where they process on our instructions, appropriate processing agreements are put in place.
| Service | Provider and processing |
|---|---|
| Central hosting, database and backups | TransIP B.V., the Netherlands. The VPS and related backups are administered in the Netherlands; processing for this service is in the EU (the Netherlands). |
| Email and support | TransIP B.V., the Netherlands. Mail relay for support@vivango.com; processing for this service is in the EU (the Netherlands). |
| Sales, payment, VAT, licensing and updates | Freemius, Inc. resells the licence under its Vendor Terms, handles the transaction and VAT, and processes licensing, update and opt-in data under its Privacy Policy and applicable DPA. |
Freemius' Vendor Terms describe Freemius as reseller and, for vendor customer data, processor with Vivango as controller. Freemius' Privacy Policy states that data may be transferred to, processed and stored outside the user's jurisdiction, including outside the EEA, using an applicable lawful transfer mechanism. The applicable Freemius DPA and, where required, the EU Standard Contractual Clauses for controller-to-processor transfers apply. This policy does not claim that processing occurs in one country only.
Data may also go to competent authorities where required, or advisers bound by appropriate duties for a specific administrative or legal matter. We do not routinely share all feedback with payment or hosting providers beyond what their technical service requires.
8. Your rights
Depending on the processing, you have rights of access, rectification, erasure, restriction, portability and objection. You may withdraw consent at any time; this does not retrospectively invalidate earlier processing. An objection to legitimate-interest processing is assessed substantively, with an explanation if necessary retention continues.
Email support@vivango.com and explain the request. We verify identity only as needed and do not routinely request a full identity-document copy. We respond without undue delay and within one month at the latest. For a lawful extension because of complexity or the number of requests, we explain the reason within that first month; at most two additional months.
Requests are generally free. Erasure is not absolute, for example for necessary tax evidence or a legal claim; we explain restrictions and delete data no longer justified. For data held only on your WordPress site, exercise rights with that operator. You can complain to the Dutch Autoriteit Persoonsgegevens or another competent supervisory authority without first having to complete an internal complaint process.
9. Security and incidents
Vivango takes appropriate measures, including HTTPS, restricted access, protection of installation/signing secrets and payment configuration, updates and careful recovery. Incidents are investigated; we notify the supervisory authority and affected people where required. This is not a guarantee against every incident or certification of the customer's website.
Report concerns confidentially to support@vivango.com, sharing as little personal information as possible. Request a secure channel before sending sensitive details. The product is intended for website administrators; the central services are not directed at children.
10. Changes and contact
Version and date above identify changes. For a material change to purposes, recipients or rights, we inform affected users in time through an appropriate channel. A new text does not itself create a lawful basis for new use; we request separate consent where necessary.
Privacy contact: support@vivango.com · Vivango, Uilenstede 77-H, 1183 AB Amstelveen, the Netherlands. Purchases, cancellation and withdrawal are also covered by the licence terms and the terms Freemius shows at checkout.