Summary: WP Copilot collects only what it needs to provide the service, never sells your data, and you can request deletion at any time. Read on for the full details.

1. Who We Are

WP Copilot ("we", "our", or "us") is an AI-powered WordPress assistant. This Privacy Policy explains how we collect, use, and protect information when you use our website, plugin, or any related services (collectively, the "Service").

If you have questions, contact us at privacy@wpcopilot.org.

2. Information We Collect

We collect information you provide directly and information generated automatically when you use the Service.

Information you provide:

Account details (name, email address, password)
Payment information (processed securely by our payment provider — we never store full card numbers)
Messages and prompts you send to the AI assistant
Support communications

Information collected automatically:

WordPress site URL and basic site configuration (when the plugin is connected)
Usage data — which features you use and how often
Log data — IP address, browser type, pages visited, timestamps
Cookies and similar tracking technologies (see Section 7)

3. How We Use Your Information

We use collected information to:

Provide, maintain, and improve the Service
Process transactions and send related notices
Respond to your comments and questions
Send product updates, security alerts, and support messages
Monitor and analyze usage trends to improve user experience
Detect, investigate, and prevent fraudulent or illegal activity
Comply with legal obligations

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4. How We Share Your Information

We may share your information in the following circumstances:

Service providers: Third-party vendors who perform services on our behalf (payment processing, email delivery, cloud hosting, analytics). These vendors are bound by data processing agreements and are not permitted to use your data for any other purpose.
AI processing: Prompts you send are processed by AI model providers. Prompts are not used to train third-party AI models without your explicit consent.
Legal requirements: When required by law, regulation, or valid legal process.
Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your data is subject to a different privacy policy.
With your consent: Any other purpose with your explicit consent.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data at any time (see Section 8). We may retain certain information for legitimate business or legal purposes after account deletion, such as transaction records required by tax law.

6. Data Security

We implement industry-standard security measures to protect your information, including:

TLS/SSL encryption for all data in transit
Encrypted storage for sensitive credentials
Access controls limiting who can view your data
Regular security audits and penetration testing

No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Cookies

We use cookies and similar technologies to operate and improve the Service. Types of cookies we use:

Essential cookies: Required for the Service to function (session management, authentication).
Analytics cookies: Help us understand how visitors interact with our website (e.g., page views, traffic sources). We use privacy-friendly analytics.
Preference cookies: Remember your settings and choices.

You can control cookies through your browser settings. Disabling essential cookies may prevent parts of the Service from working correctly.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access: Request a copy of the data we hold about you.
Correction: Request correction of inaccurate data.
Deletion: Request deletion of your personal data.
Portability: Request your data in a machine-readable format.
Objection: Object to processing of your data for certain purposes.
Withdrawal of consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at privacy@wpcopilot.org. We will respond within 30 days.

9. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately and we will take steps to delete it.

10. International Transfers

Your information may be transferred to and processed in countries other than your own. We ensure that any such transfers comply with applicable data protection laws and that appropriate safeguards are in place.

11. Third-Party Links

The Service may contain links to third-party websites. This Privacy Policy does not apply to those sites and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by displaying a notice in the Service. The "Last updated" date at the top of this page indicates when this policy was last revised. Continued use of the Service after changes become effective constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: privacy@wpcopilot.org
Website: wpcopilot.org