Legal
What local scans, hosted AI, and bring-your-own-key AI process, what is retained, and why every generated suggestion needs human review.
WPAI SEO separates deterministic local scans, hosted AI, and bring-your-own-key (BYOK) AI. Choosing one mode does not silently enable another.
SEO scans and rule-based checks run inside your WordPress installation. They inspect relevant WordPress content and metadata locally to identify missing or weak titles, descriptions, indexing settings, canonicals, headings, image alt text, sitemap signals, and thin content. Page content is not sent to WP AI Stack or an AI provider merely because you run a scan.
Hosted AI is called only when an authorized WordPress administrator expressly requests an AI suggestion or an enabled automation requests one under the administrator's settings. For each generation, WPAI SEO sends:
The request also includes the minimum instructions and technical metadata needed to produce, meter, and secure the result. Do not send unrelated site data.
WP AI Stack sends hosted requests to the OpenAI Responses API with store: false. WP AI Stack retains usage counts and operational status needed for quota, licensing, fraud prevention, and reliability; it does not retain prompts or generated output. OpenAI states that API data is not used to train its models by default unless its customer opts in. Its default abuse-monitoring logs may contain inputs or outputs for up to 30 days, subject to its policy, legal requirements, and safety exceptions. See OpenAI's API data controls.
In BYOK mode, you supply your own OpenAI API key. The plugin stores that key encrypted where supported by the configured WordPress environment and uses it to call OpenAI under your own provider account, limits, billing, and terms. WP AI Stack's hosted AI gateway does not receive the BYOK prompt or output. Your WordPress host and network process the request, and OpenAI processes it under your account.
You are responsible for securing, rotating, restricting, and funding your API key. Never share it through support forms or screenshots.
Send only content needed for the requested SEO field. Do not submit confidential business information, passwords, secrets, authentication tokens, financial-account data, health data, government identifiers, children's data, regulated records, or unnecessary personal data. Remove or anonymize personal information before generation where practical.
If you process another person's data, you are responsible for having an appropriate legal basis, notice, permission, and provider arrangement. WP AI Stack is not designed as a repository for regulated data and does not promise that hosted AI is suitable for a sector-specific compliance regime.
AI output is probabilistic. It can hallucinate facts, omit important context, use an unsuitable tone, make unsupported claims, reproduce common phrases, or produce text that is similar to another output. A generated suggestion is not necessarily unique and is not cleared for trademark, copyright, advertising, professional, accessibility, or other legal requirements.
Review the source page and every suggestion before relying on or publishing it. Verify names, claims, prices, locations, qualifications, links, and legal or regulated statements. Use preview, change history, undo, and restore controls where available, and maintain appropriate site backups.
An AI-generated title or description does not guarantee that a search engine will use it. Search engines may rewrite snippets, decline to index a page, change their systems, or rank content using factors outside WP AI Stack's control. We do not guarantee rankings, impressions, traffic, clicks, conversions, revenue, or compliance with search-engine policies.
Local scan results are diagnostic signals, not a substitute for a complete technical, editorial, legal, accessibility, or security review.
You retain your rights in content you submit. You give WP AI Stack and the selected provider only the limited permission needed to process a requested generation, return it, secure the service, and meet legal obligations. Your rights in generated output depend on applicable law and provider terms; outputs may not qualify for exclusive intellectual-property protection and may resemble outputs produced for others.
An administrator can choose whether to use deterministic generation, hosted AI where included, or BYOK where supported. Disable AI automation when content should never be sent to an external model. Review the Privacy Policy for account, license, provider, international-transfer, retention, and rights information.
Questions about AI processing can be sent to legals@wpaistack.com. Product support is available at support@wpaistack.com.