Update Privacy-Policy.md

Updated for WooPay

Privacy-Policy.md

@@ -33,7 +33,7 @@ It’s probably no surprise that we collect information that you provide to us d
 
 *   **Basic account information:** We ask for basic information from you in order to set up your account. For example, we require individuals who sign up for a WordPress.com account to provide an email address and password, along with a username or name — and that’s it. You may provide us with more information — like your address and other information you want to share — but we don’t require that information to create a WordPress.com account.
 *   **Public profile information:** If you have an account with us, we collect the information that you provide for your public profile. For example, if you have a WordPress.com account, your username is part of that public profile, along with any other information you put into your public profile, like a photo or an “About Me” description. Your public profile information is just that — public — so please keep that in mind when deciding what information you would like to include.
-*   **Payment and contact information:** If you buy something from us or earn revenue through your site, we’ll collect information to process those payments and contact you. If you buy something from us — a subscription to a WordPress.com plan, a premium theme, a [custom domain](https://en.support.wordpress.com/domains/domain-registrations-and-privacy/), some Longreads swag — or if you pay fees to a person or business through their WordPress.com site (for example via the Payments feature or the Pay with PayPal block), you’ll provide additional personal and payment information like your name, credit card information, and contact information. We also keep a record of the purchases you’ve made. If you use our Ecommerce Services (including [Store on WordPress.com,](https://en.support.wordpress.com/store/) [WooCommerce Shipping & Tax](https://docs.woocommerce.com/document/woocommerce-services/), and WooCommerce Payments), you’ll have to create a WordPress.com account or connect an existing account and, for some Services, provide your site URL. You may also provide us with financial details to set up a payments integration, like the email address for your Stripe or PayPal account or your bank account information. If you participate in a revenue sharing opportunity for your site, like [WordAds](https://wordads.co/), you’ll provide some additional information — for example, a tax ID or other identifier so we can process payments to you.
+*   **Payment and contact information:** There are various ways in which you may provide us payment information and associated contact information. For example, if you buy something from us — a subscription to a WordPress.com plan, a premium theme, a [custom domain](https://en.support.wordpress.com/domains/domain-registrations-and-privacy/), some Longreads swag — or if you pay fees to a person or business through their WordPress.com site (for example via the Payments feature or the Pay with PayPal block), you’ll provide additional personal and payment information like your name, credit card information, and contact information. We also keep a record of the purchases you’ve made. If you use our Ecommerce Services (including [Store on WordPress.com,](https://en.support.wordpress.com/store/) [WooCommerce Shipping & Tax](https://docs.woocommerce.com/document/woocommerce-services/), and WooCommerce Payments), you’ll have to create a WordPress.com account or connect an existing account and, for some Services, provide your site URL. You may also provide us with financial details to set up a payments integration, like the email address for your Stripe or PayPal account or your bank account information. Additionally, if you use [WooPay](https://woo.app) to make purchases on other sites, we will store the contact information and payment information you provide to that service. And if you participate in a revenue sharing opportunity for your site, like [WordAds](https://wordads.co/), you’ll provide some additional information — for example, a tax ID or other identifier so we can process payments to you.
 *   **Business Profile:** Some of our products collect additional information from you as part of creating a user/customer profile. For example, if you are a Jetpack CRM customer we may add you to our customer relationship database (powered by Jetpack CRM!) using information you provide us including your name, your employer, your job title or role, your contact information, and your communications with us. If you are a Happy Tools user, we use information you provide us like your timezone and location information, your company and team information, and your contact information, to set up your account and power the Service’s features.
 *   **Content information:** You might provide us with information about you in draft and published content (a blog post or comment that includes biographic information about you, or any media or files you upload).
 *   **Credentials:** Depending on the Services you use, you may provide us with credentials for your self-hosted website (like SSH, FTP, and SFTP username and password). Jetpack and VaultPress users may provide us with these credentials in order to use our one-click restore feature if there is a problem with their site, or to allow us to troubleshoot problems more quickly.
@@ -45,6 +45,7 @@ It’s probably no surprise that we collect information that you provide to us d
 We also collect some information automatically:
 
 *   **Log information:** Like most online service providers, we collect information that web browsers, mobile devices, and servers typically make available, including the browser type, IP address, unique device identifiers, language preference, referring site, the date and time of access, operating system, and mobile network information. We collect log information when you use our Services — for example, when you create or make changes to your website on WordPress.com.
+*   **Transactional information:** When you make a purchase through our Services, we collect information about the transaction, such as product details, purchase price, and the date and location of the transaction. This includes when you purchase something we sell or when you use our Services (like [WooPay](https://woo.app)) to buy something from a third party.
 *   **Usage information:** We collect information about your usage of our Services. For example, we collect information about the actions that site administrators and users perform on a site using our WordPress.com or Jetpack services — in other words, who did what and when (e.g., \[WordPress.com username\] deleted “\[title of post\]” at \[time/date\]). Our [WooCommerce Usage Tracker](https://woocommerce.com/usage-tracking/) also tracks information like your email address, WooCommerce settings, and PHP settings, along with information about your online store, like the aggregate number of orders and customers. We also collect information about what happens when you use our Services (e.g., page views, support document searches at en.support.wordpress.com, features enabled for your website, interactions with our [Admin Bar](https://en.support.wordpress.com/admin-bar/) and other parts of our Services) along with information about your device (e.g., screen size, name of cellular network, and mobile device manufacturer). We use this information to, for example, provide our Services to you, get insights on how people use our Services so we can make our Services better, and understand and make predictions about user retention.
 *   **Location information:** We may determine the approximate location of your device from your IP address. We collect and use this information to, for example, calculate how many people visit our Services from certain geographic regions. We may also collect information about your precise location via our mobile apps (like when you post a photograph with location information) if you allow us to do so through your mobile device operating system’s permissions.
 *   **Stored information:** We may access information stored on your mobile device via our mobile apps. We access this stored information through your device operating system’s permissions. For example, if you give us permission to access the photographs on your mobile device’s camera roll, our Services may access the photos stored on your device when you upload a really amazing photograph of the sunrise to your website.
@@ -57,7 +58,7 @@ We may also get information about you from other sources. For example:
 
 *   **Third Party Login:** If you create or log in to your WordPress.com account through another service (like Google) we’ll receive associated login information (e.g. a connection token, your username, your email address)
 *   **Social Sharing Services:** If you connect your website or account to a social media service (like Twitter) through our Publicize feature, we’ll receive information from that service (e.g., your username, basic profile information, friends list) via the authorization procedures for that service.
-*   **Financial Account Info:** If you use WooCommerce Payments, we’ll receive information relating to your Stripe account, such as your email address and phone number.
+*   **Financial Account Info:** If you use WooCommerce Payments, we’ll receive information relating to your Stripe account, such as your email address and phone number. If you use WooPay, we’ll receive your payment information from Stripe.
 *   **Google Account Information:** When you connect your Google account to your Newspack powered site, we may access certain Google user data such as your Google Ad Manager Configuration (the network code and your ad units) and your Google Analytics data to allow you to access and manage features more seamlessly. For example, you may be able to manage your Google ads and see your Google Analytics data directly within the dashboard of your Newspack powered site.
 
 The information we receive depends on which services you use or authorize and what options are available.