Privacy Policy

1. Information we collect

• Account info: email address, name (optional). Authentication is handled by Clerk; we never store your account password.
• Connected site info: site URL, WordPress admin username, Application Password (stored encrypted)
• Backup data: database dumps and media files
• Usage records: access logs, monitoring results, IP address

2. How we use it

• Identifying members and signing in
• Providing management features (backups, monitoring, security, updates)
• Sending incident and security alerts
• Improving the Service and preventing abuse

3. Retention and deletion

• Account info is kept until you delete your account, then deleted without undue delay.
• Backup data is kept for your plan’s retention window (7 days on Free, 30 on Personal, 90 on Pro), then automatically deleted.
• Where the law requires longer retention, we keep it for that period.

4. Third parties and processors

We do not share your personal data without consent. To provide the Service, we entrust limited processing to:

• Clerk: authentication and session management (USA)
• Freemius: payment processing and receipts (Merchant of Record, USA)
• Amazon Web Services (AWS): backup storage (S3, Seoul region) and email delivery (SES)
• Google Analytics 4: website usage statistics (USA)
• Sentry: error tracking (USA). Passwords, tokens and email addresses are stripped before an error report is sent.
• Telegram: sending alerts when you enable them

5. International transfer

Backup data is stored domestically (AWS Seoul region). If you use Telegram alerts, alert content may transit servers outside Korea.

6. Your rights

You may request access, correction, deletion, or suspension of processing of your personal data at any time, and can erase your data by deleting your account. Requests: support@wpcontrol.dev

7. Security measures

• WordPress connection passwords are stored encrypted with AES-256-GCM.
• We do not hold your account password; Clerk manages it.
• We use a revocable WordPress Application Password instead of your main password.
• Backups are kept on encrypted storage separate from your site.

8. Cookies

We use essential cookies to keep you signed in, and Google Analytics 4 cookies for usage statistics. We do not use advertising cookies, and we do not sell or share your data with ad networks. You can block cookies in your browser, though sign-in may not persist if you do.

9. Privacy contact

For privacy inquiries and requests: support@wpcontrol.dev

10. Changes to this policy

If this policy changes, we will announce the effective date and the changes within the Service.