Privacy Policy

Effective date: 30 Sep 2026

This privacy policy explains what personal data AnyAPI collects, why we collect it, and how you can control it. It covers the anyapiplugin.com website, the AnyAPI Starter plugin, the AnyAPI Lite plugin, and the AnyAPI remote connection service.

In short, we collect only what we need to sell licenses, support you, and connect your store to Google when you ask us to. Your WooCommerce order data never passes through our servers.

Who We Are

AnyAPI is a product of GO4WEB, a business registered in Hong Kong. For this privacy policy, GO4WEB is the data user (under Hong Kong law) and the data controller (under the EU GDPR, where it applies).

You can contact us about privacy at any time: support@anyapiplugin.com.

Data We Collect on anyapiplugin.com

When You Buy a License

When you purchase AnyAPI Lite, our WooCommerce store collects your name, email address, billing address, and order details. We use this data to process your order, send your license key, provide support, and keep records required by law.

However, we never see or store your full card number. Instead, our payment processors (WooPayments) handle payment details directly under their own privacy policies.

When You Contact Us

If you use our contact form or email us, we receive your name, email address, and your message. We use this only to reply to you and to improve our support.

Analytics and Cookies

We use Google Analytics 4 to understand how visitors use our website, for example which pages people read and whether a purchase completes. As a result, Google Analytics sets cookies and collects data such as pages visited, approximate location, device type, and referring website.

We use this data only in aggregate to improve the site. You can block analytics cookies in your browser settings, or install the Google Analytics Opt-out Browser Add-on. In addition, WooCommerce sets essential cookies so that your cart and checkout work.

Data the AnyAPI Plugins Send

AnyAPI Starter (Free)

By default, AnyAPI Starter does not contact our servers or any other external server. It sends nothing on activation, sends no usage statistics, and runs no background check-ins.

Starter contacts our AnyAPI remote service only after a site administrator clicks “Connect Google”. That click is your consent. See “Google Connection” below for exactly what happens next.

Of course, the integrations you build yourself send order data to the API endpoints you configure. You choose those destinations, and their own privacy policies apply to them.

AnyAPI Lite (Paid)

When you activate a Lite license, and when the plugin checks for updates, Lite contacts anyapiplugin.com. It sends your site URL, your license key, and the installed plugin version. We use this data only to validate your license, enforce the activation limit, and deliver updates.

Google Connection

Google does not allow a plugin with public source code to hold the secret key that its sign-in process requires. Therefore, AnyAPI runs a small service at anyapiplugin.com, called AnyAPI remote, that completes the Google sign-in on behalf of your site.

What AnyAPI remote receives:

First, your website’s domain.
Second, a connection identifier and credentials that link your site to its Google connection.
Third, the Google OAuth tokens that Google issues after you approve access.
Fourth, the email address of the Google account you connect, so that you can see which account your site uses.

What AnyAPI remote stores: your Google refresh token, encrypted at rest, and a connection record (domain, connection identifier, and connection dates). We keep these only so your site can obtain fresh access to Google without asking you to sign in again.

What never passes through our servers: your WooCommerce order contents, your customers’ personal data, and any payment data. Your own website sends that data directly to Google Sheets. In other words, AnyAPI remote handles the sign-in only, not your store’s data.

Finally, the IP address and user-agent string of each request your site or your browser makes to AnyAPI remote, which we log to prevent abuse and to enforce activation limits.

How We Use Google User Data

AnyAPI requests only the drive.file Google permission. This permission lets AnyAPI access only the spreadsheets that the plugin creates for you. In particular, AnyAPI cannot see any other file in your Google Drive.

We use Google user data only to provide the feature you turned on: writing your store’s orders into the spreadsheet AnyAPI creates for you. Specifically, we do not:

sell Google user data;
use it for advertising, or transfer it to advertising platforms or data brokers;
let humans read it, except with your permission, for security reasons, or where the law requires; or
use it to develop, improve, or train generalized AI or machine learning models.

AnyAPI’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How to Disconnect Google

You can revoke access at any time in either of two ways:

First, click Disconnect in the AnyAPI plugin settings. As a result, we delete the stored refresh token for your site.
Alternatively, remove AnyAPI from your Google Account permissions page. After that, the stored token stops working, and we delete it the next time your site tries to use it.

How Long We Keep Data

We keep each type of data only as long as we need it:

Order and invoice records: for 7 years, because Hong Kong tax rules require businesses to keep business records for that long.
License records: while your license is active, and then for 7 years as part of the order record.
Support emails and contact messages: for up to 2 years after the conversation ends.
Google connection data: until you disconnect, or until the token stops working. After that, we delete it within 30 days.
Analytics data: Google Analytics keeps it for the retention period set in our account (14 months).
Security logs (IP address and user-agent): for 12 months, and then we delete them.

Who We Share Data With

We do not sell personal data. Instead, we share it only with service providers that help us run AnyAPI:

Google — Google Analytics (website analytics) and the Google APIs you connect. See the Google Privacy Policy and Google Terms of Service.
Payment processors — WooPayments, to take payments.
Our hosting provider — to run anyapiplugin.com and AnyAPI remote.

We may also disclose data where the law requires it.

Security

We protect your data with HTTPS on every connection, encrypted storage for Google refresh tokens, and limited administrator access. However, no system is perfectly secure. If a breach affects your personal data, we will tell you without undue delay.

Your Rights

Under Hong Kong Law

Under the Personal Data (Privacy) Ordinance (Cap. 486), you have the right to ask whether we hold your personal data, to request a copy of it, and to ask us to correct it. To do this, email support@anyapiplugin.com. We will respond within 40 days. Note that the law allows us to charge a reasonable fee for a copy of your data.

We will not use your personal data for direct marketing unless you first agree. You can withdraw that consent at any time, free of charge, by emailing us or by clicking the unsubscribe link in any marketing email.

Under the GDPR (EU and UK Users)

If the EU or UK GDPR applies to you, you also have the right to:

First, access, correct, or delete your personal data.
Second, restrict or object to our processing.
Third, receive your data in a portable format.
Finally, complain to your local data protection authority.

We rely on these legal bases: performing our contract with you (orders, licenses, the Google connection), our legitimate interests (support, security, analytics), and legal obligations (tax records).

Children's Privacy

AnyAPI is a business tool for WooCommerce store owners. For that reason, we do not knowingly collect data from anyone under 18.

Changes to This Privacy Policy

We may update this privacy policy when our services change. If we do, we will change the effective date at the top. Moreover, if a change significantly affects how we use your data, we will notify license holders by email before it takes effect.

For the rules that govern your use of AnyAPI, see our Terms of Service. To learn how the plugin works, read the AnyAPI documentation. Finally, you can reach us any time through the contact page.

Create API Automation With AnyAPI

Embrace no coding with a single click & create API Integration