After checkout
How the customer receives the license key and future updates.
Last updated: 2026-06-16. This page explains product delivery, not legal advice.
Direct answer
A buyer pays through Stripe Checkout, receives a CFE-...
license key, activates that key in WordPress, and then receives private
update metadata and gated ZIP downloads while the subscription remains
active.
The delivery flow
- Stripe Checkout: the buyer selects Solo, Pro, or Agency and accepts subscription, legal, and immediate-access acknowledgements before payment.
- Webhook processing: the Stripe webhook verifies the signature, avoids duplicate event processing, creates or updates the customer/subscription, and issues one license for the subscription.
- License delivery: the success page looks up the paid Checkout Session and displays the license key. If the email binding is configured, the store also sends an order/license email.
- WordPress activation: the customer installs the ZIP, opens Settings > Encryption License, enters the license key, and activates the production site.
- Update checks: WordPress asks the plugin updater for update metadata. Active licenses receive the latest version details and a private package URL.
- Private download: package downloads are gated by license status and release version. The ZIP is not a public static file.
What the license server sees
License and update requests need license status data, normalized site identity, product slug, plugin version, and environment version context. They do not need form submissions, uploaded files, encrypted values, decrypted values, encryption keys, search keys, or audit logs.
What happens when a subscription expires
Expired, canceled, refunded, or suspended licenses stop private update and ZIP download access. They do not disable installed encryption, decryption, or already-protected records on the WordPress site.
Customer recovery path
- If the success page does not show the license immediately, it retries for a short window while the webhook completes.
- If the key is still missing, the buyer can contact support with the checkout session reference shown on the success page.
- Support requests should not include form submissions, uploaded files, encryption keys, or decrypted values.
- Billing, renewal, payment method, and cancellation actions go through the Stripe Customer Portal after it is enabled for production.
Next step before buying or deploying.
Read the installation guide for WordPress activation, then review compatibility and the security model before using the plugin on a production site.