Privacy Policy

Last updated: December 15, 2025

Quick Summary

We respect your privacy

We collect only what's necessary to provide our service

We never sell your data

Your information is never shared with third parties for marketing

You control your data

Request access, modification, or deletion at any time

Secure by default

Industry-standard encryption and security practices

Information We Collect

We collect information that you provide directly to us and information automatically collected when you use our service:

Account Information: - Email address (for authentication and communication) - Name (optional) - Profile information (optional)

Usage Information: - WordPress site URLs you connect - License key activations and validations - Download history (MCP server, plugin versions) - Feature usage and interaction data

Technical Information: - IP address - Browser type and version - Device information - Log data and analytics

How We Use Your Information

We use the information we collect to:

Provide Our Service: - Create and manage your account - Process and validate license keys - Enable WordPress site connections - Deliver updates and downloads

Improve Our Service: - Analyze usage patterns - Fix bugs and technical issues - Develop new features - Optimize performance

Communicate With You: - Send important service updates - Respond to support requests - Share product announcements (with your permission) - Send billing and subscription information

Security and Compliance: - Prevent fraud and abuse - Enforce our Terms of Service - Comply with legal obligations

Data Security

We implement industry-standard security measures to protect your information:

Encryption: - All data transmitted over HTTPS/TLS - Passwords hashed using bcrypt - API keys encrypted at rest

Infrastructure: - Hosted on DigitalOcean App Platform - Protected by Cloudflare security - Regular security audits and updates

Access Controls: - Role-based access (user, admin) - Row-level security policies - Authentication via magic links (passwordless)

Data Retention: - Active accounts: Data retained as long as account is active - Deleted accounts: Data removed within 30 days - Backups: Retained for 90 days for disaster recovery

Data Sharing and Third Parties

We work with trusted third-party service providers to operate our service:

Service Providers: - Supabase (PostgreSQL + Authentication) - DigitalOcean (Application hosting) - Cloudflare (CDN and security) - Lemon Squeezy (Payment processing) - SendGrid (Transactional emails)

What We Share: - Only data necessary for each provider to perform their function - All providers are bound by confidentiality agreements - We never sell or rent your personal information

Legal Requirements: We may disclose your information if required by law or to: - Comply with legal processes - Protect our rights and property - Prevent fraud or security issues - Protect user safety

Your Rights and Choices

You have the following rights regarding your personal information:

Access: Request a copy of the data we hold about you

Correction: Update or correct inaccurate information

Deletion: Request deletion of your account and data

Portability: Receive your data in a machine-readable format

Opt-Out: Unsubscribe from marketing emails (service emails still required)

Object: Object to processing of your data for certain purposes

To exercise these rights, contact us at: [email protected]

We will respond to your request within 30 days.

Cookies and Tracking

We use cookies and similar technologies for:

Essential Cookies: - Authentication (session management) - Security (CSRF protection) - Preferences (settings, language)

Analytics: - Usage statistics (page views, features used) - Performance monitoring - Error tracking

Your Choices: - Essential cookies: Required for service to function - Analytics cookies: Can be disabled in browser settings - We do not use advertising cookies

Contact Us

If you have questions about this Privacy Policy or our data practices:

Email: [email protected]

Support:

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

  • Posting the new Privacy Policy on this page
  • Updating the "Last updated" date
  • Sending you an email notification (for significant changes)

Your continued use of our service after changes become effective constitutes acceptance of the updated policy.