Terms of Service

1. Who we are and what these terms cover

WP SecureGate is built and operated by TheDevGarden, Bangladesh (“we”, “us”). These terms are the agreement between us and you, the person or organisation that buys or uses WP SecureGate. They cover this website, your customer account, your licence, the WP SecureGate plugin and the online services the plugin uses.

By buying a licence, creating an account or using the plugin, you agree to these terms. If you buy for a client or an employer, you confirm you may accept them on their behalf.

2. Buying, prices and our reseller

Our order process is run by our online reseller, Dodo Payments, which is the Merchant of Record for all our orders. Dodo Payments takes the payment, issues the invoice or receipt, collects and pays sales tax or VAT where it applies, and handles billing enquiries and refunds. Its terms apply to the payment itself.

Current prices are on the pricing page. A plan is billed monthly, yearly or once (a lifetime plan), as the plan shows. Monthly and yearly plans renew automatically at the end of each period until you cancel. A lifetime plan is a single payment for as long as we offer WP SecureGate. Every plan includes every feature; plans differ only in how many sites you can activate.

We may change prices for future periods. A price change never applies to a period you have already paid for, and we will tell you before a renewal at a new price.

3. Your account

Your account is created when you buy. We email you a link to set your password; keep that password private, and tell us straight away if you think someone else has used your account. You are responsible for what is done with it.

The details on your account must be accurate, including the email address, which is where we send receipts, notices and sign-in links.

4. The plugin and what a licence gives you

The WP SecureGate plugin is free software, released under the GNU General Public License, version 2 or later, like WordPress itself. Nothing in these terms limits the rights that licence gives you over the plugin’s code.

What you pay for is the service around the code. An active licence gives you:

• the protections running on your sites, and access to their settings;
• signed updates, delivered through WordPress’s own updater;
• WP SecureGate’s online services — the attacker IP list, cloud malware verdicts, IP location in alert emails and the country database for country rules;
• support from the team that builds the plugin.

Sites. Each site address you activate uses one of your plan’s sites. You can release a site from your account dashboard and activate the licence somewhere else. A licence and its sign-in tokens are for your own sites (or your clients’ sites that you manage); you may not share them, publish them or let others use them on sites you do not manage.

Trial. A new install runs with full protection for 7 days before it needs a licence.

5. When a licence ends

WP SecureGate has no free tier. When a licence ends — it expires, is cancelled and runs out, or is refunded — on every site using it:

• the protections stop running: the firewall, login protection, two-factor sign-in, hardening, scanning and alerts. A custom login address returns to the standard WordPress one, so you cannot be locked out;
• the settings screens lock, while the read-only screens and the licence page stay available;
• updates and the online services stop.

The plugin stays installed and keeps your settings. Activating a licence again turns everything back on as it was. If a site cannot reach our servers, it keeps its last confirmed licence status for up to 30 days (never beyond the licence’s own end date), so a network problem does not switch protection off.

6. The online services

The online services are run from our servers. To work, some of them send information from your site to us — for example a file the scanner has flagged, or the IP address an alert email is about. Our Privacy Policy lists exactly what each one sends and what we keep. Most can be switched off in the plugin.

The services are provided for normal use by your sites and are rate-limited to protect everyone using them. We keep improving them and may change, replace or retire individual services; when a change takes something away that you pay for, we will tell you in advance. We aim to keep them available but cannot promise they will never be interrupted — if one is unreachable, the plugin carries on with what it already has.

7. Acceptable use

You agree not to:

• copy, resell, publish or redistribute the data the online services provide (such as the attacker IP list or scan verdicts);
• get around licence checks, rate limits or site limits, or use another customer’s licence or tokens;
• attack, overload, probe or disrupt our servers, other than reporting a vulnerability under our security policy;
• use WP SecureGate to break the law or to harm anyone else.

We may suspend a licence that is being misused, and will tell you why.

8. No security product stops everything

WP SecureGate makes a site much harder to attack, but no software can prevent every attack or find every infection. You remain responsible for your sites: keeping WordPress, themes and plugins up to date, keeping your own backups, and acting on the alerts the plugin sends. The plugin can block requests, quarantine files and change security settings on your instruction, so check what a setting does before turning it on, and keep a backup you can restore.

9. Warranties and liability

We provide WP SecureGate “as is”. To the extent the law allows, we make no promise that it will be free of errors or interruptions, or suit a particular purpose, beyond what these terms say.

To the extent the law allows, we are not liable for indirect or consequential loss — lost profits, revenue, data or business — and our total liability to you for anything related to WP SecureGate is limited to the amount you paid us in the 12 months before the claim. Nothing here limits liability that cannot legally be limited, or the rights consumer law gives you where you live.

10. Cancelling and ending these terms

You can cancel at any time; how, and what happens to your licence, is in our Refund & Cancellation Policy. We may end or suspend your licence if you seriously or repeatedly break these terms, if a payment is reversed, or if the law requires it. Sections that by their nature should survive — such as liability and acceptable use — continue after these terms end.

11. Changes to these terms

We may update these terms. The date at the top says when they last changed. If a change materially affects you, we will email the address on your account before it takes effect. Continuing to use WP SecureGate after that means you accept the new terms.

12. Governing law

These terms are governed by the laws of Bangladesh, and the courts of Bangladesh have jurisdiction over any dispute. If you are a consumer, you also keep the protection of the mandatory laws of the country you live in. Please contact us first — most problems are solved faster by email.

13. Data sources and credits

WP SecureGate’s online services are built on data and rules from others, used under their licences:

• IP location and country data: IP Geolocation by DB-IP, licensed under CC BY 4.0.
• Malware rules: signature-base YARA rules by Florian Roth and contributors (Neo23x0/signature-base), under the Detection Rule License 1.1, and php-malware-finder by NBS System (nbs-system/php-malware-finder), under the LGPL-3.0.
• Attacker IP lists: IPsum by Miroslav Štampar (public domain), and blocklist.de.
• Malware hashes: abuse.ch MalwareBazaar and ThreatFox.

14. Contact

Questions about these terms: [email protected], or the contact form.