Privacy Policy

S2S Conversions Plugin — Thijs Joosten Digital Acquisition

Last updated: June 16, 2026

        This Privacy Policy explains how Thijs Joosten Digital Acquisition ("TJDA", "we", "us") collects, uses, and protects data in relation to the S2S Conversions Plugin and the license portal at s2s-plugin.tj-da.com.
    

1. Who We Are

Thijs Joosten Digital Acquisition
Email: thijs.joosten@tj-da.com
Website: tj-da.com
Based in the Netherlands

2. Data We Collect

2.1 License Portal (s2s-plugin.tj-da.com)

When you purchase a license or contact us, we collect:

Email address
Name and company name (if provided)
Payment information (processed by Stripe — we do not store card details)
Domain name of your WordPress installation
License key and activation date

2.2 Plugin License Validation

When the plugin validates your license, the following data is sent to our license server:

Your license key
Your WordPress domain name
Timestamp of the validation request
IP address of your server

No personal data of your website visitors is transmitted to our license server.

2.3 Plugin Functionality (on your WordPress site)

The S2S Conversions Plugin processes visitor data on your WordPress site. You are the data controller for this processing. The plugin may process:

Hashed email addresses and phone numbers (only with marketing consent)
Google click identifiers (gclid, gbraid, wbraid) — only with consent
GA4 client IDs
Purchase and order data
Form submission data

This data is sent directly from your server to Google Analytics and Google Ads via their respective APIs. TJDA does not receive or store this visitor data.

3. Legal Basis for Processing

Contract performance — processing your license and providing the plugin service
Legitimate interest — license validation, fraud prevention, and service security
Legal obligation — where required by applicable law

4. Data Sharing

We share data with the following third parties:

Stripe — payment processing. See Stripe's Privacy Policy
Google — the plugin sends conversion data to Google Analytics and Google Ads on behalf of licensees. See Google's Privacy Policy

We do not sell, rent, or trade your personal data with any third parties.

5. Data Retention

License data — retained for the duration of your subscription plus 2 years for legal and billing purposes
License validation logs — retained for 90 days
Payment records — retained for 7 years as required by Dutch tax law

6. Your Rights (GDPR)

Under the GDPR, you have the right to:

Access — request a copy of your personal data
Rectification — correct inaccurate data
Erasure — request deletion of your data
Portability — receive your data in a structured format
Objection — object to processing based on legitimate interest
Restriction — request restriction of processing

To exercise any of these rights, contact us at thijs.joosten@tj-da.com. We will respond within 30 days.

7. Data Processor Role

When the S2S Conversions Plugin processes visitor data on your WordPress site, TJDA acts as a data processor on your behalf, and you act as the data controller. You are responsible for:

Obtaining valid consent from your visitors before tracking
Including the plugin's data processing in your own privacy policy
Ensuring lawful processing under applicable law

If required, we can provide a Data Processing Agreement (DPA). Please contact us at thijs.joosten@tj-da.com.

8. Security

We implement appropriate technical and organisational measures to protect your data, including:

HTTPS/TLS encryption for all data in transit
Encrypted storage of OAuth tokens and API credentials
Access controls and authentication for the admin panel
Regular security updates

9. Cookies

The license portal (s2s-plugin.tj-da.com) uses only a strictly necessary session cookie for admin authentication. No tracking cookies are placed on this website.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to active licensees. The date at the top of this page indicates when it was last updated.

12. Google API Services — User Data Policy

S2S Conversions Plugin's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

12.1 Data Accessed

When a website owner connects their Google Ads account via OAuth, the following Google user data is accessed:

OAuth 2.0 access token and refresh token for the authenticated Google Ads account
Write access to upload conversion data via the adwords scope

We do not access: Google account profile, Gmail, Drive, Calendar, campaign data, or billing information.

12.2 Data Usage

The adwords scope is used exclusively to upload offline conversion events to the advertiser's own Google Ads account via uploadClickConversions and the Data Manager API.

12.3 Token Storage

OAuth tokens are stored AES-256 encrypted on the advertiser's own WordPress server. TJDA never receives or stores these tokens for Pro plugin users. For platform users, tokens are stored encrypted in our secure database and used exclusively for conversion uploads.

12.4 Data Sharing & Retention

Google user data is never shared with third parties, sold, or used for advertising. Tokens are deleted within 30 days of account deletion.

12.5 AI/ML Training

Google user data is never used to train AI or machine learning models.

11. Contact & Complaints

For privacy-related questions or requests, contact us at:
thijs.joosten@tj-da.com

If you believe we are not handling your data correctly, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).