Legal
How WP AI Stack collects, uses, shares, secures, and retains personal data across the website, accounts, licensing, support, analytics, and hosted AI.
WP AI Stack is a software operator. This Privacy Policy explains how we handle personal data when you visit wpaistack.com, create an account, contact us, use our licensing service, or use hosted features in a WP AI Stack plugin. Lemon Squeezy is the merchant of record for purchases and processes payment data under its own privacy terms.
We collect only the data needed to operate the service:
We process data to create and secure accounts; verify email addresses; match purchases to a verified email; activate, validate, and deactivate licenses; provide downloads, hosted AI and customer support; prevent fraud and abuse; maintain service reliability; meet tax, accounting, dispute, and legal obligations; and, with consent, understand basic conversion performance.
Depending on the law that applies, these purposes rely on performance of our contract, compliance with legal obligations, our legitimate interests in operating and protecting the service, and your consent for optional analytics. You may withdraw analytics consent at any time through Cookie choices in the footer.
Deterministic SEO scans run inside your WordPress installation and do not send page content to WP AI Stack. A hosted-AI request sends only the selected title, description, and up to 4,000 characters of relevant page content after an administrator asks for a suggestion.
WP AI Stack does not store the prompt or generated output from hosted AI. We retain usage counts needed to enforce allowances and prevent abuse. We call OpenAI's Responses API with store: false. OpenAI states that API inputs and outputs are not used to train its models by default, unless the customer opts in, but abuse-monitoring logs may contain content and are generally retained for up to 30 days. See OpenAI's API data controls.
When you use your own API key (BYOK), your WordPress site communicates with the provider under your account and that provider's terms. See the separate AI and Data Processing Notice for more detail.
We disclose relevant, limited data to service providers that help us deliver the service:
We may also disclose data when required by law, to protect people or the service, in connection with a business reorganization subject to appropriate safeguards, or when you direct us to do so. We do not sell personal data, share it for cross-context behavioural advertising, or use it for targeted advertising.
Our providers may process data in countries where they operate. Privacy protections may differ from those in your location. Where required, we use contractual and organizational safeguards and limit each provider to the data necessary for its role.
We may retain a record longer where law requires it, a dispute is active, or it is reasonably necessary to establish, exercise, or defend legal claims.
We use measures appropriate to the nature of the service, including encrypted transport, password hashing, secure session cookies, access controls, rate limits, restricted secrets, encrypted backups, license-key hashing, and signed entitlements. No system is completely secure, so we cannot guarantee absolute security. Keep your WordPress installation, account credentials, license key, and API keys secure and tell us promptly if you suspect misuse.
Subject to applicable law, you may ask to access, correct, or delete personal data; object to or restrict certain processing; withdraw consent; or receive information about our handling of your data. We may need to verify your identity and may retain data where a legal obligation or valid security, fraud, dispute, or claims need applies.
Residents of US states with applicable privacy laws may also have rights to confirmation, access, correction, deletion, portability, and appeal, and rights concerning sale, targeted advertising, or certain profiling. We do not sell personal data or use it for targeted advertising. This statement does not assert that any particular statutory threshold applies to WP AI Stack.
Send requests or complaints to legals@wpaistack.com.
The service is not directed to children and accounts require a person who is at least 18 or otherwise has legal contractual capacity. If you believe a child provided personal data improperly, contact us.
We may update this Policy to reflect service, provider, or legal changes. We will post the revised effective date and provide additional notice where a material change or applicable law requires it.
For privacy questions, rights requests, or complaints, email legals@wpaistack.com.