Privacy Policy

Information we collect

Depending on how you use the Service, we may collect the following types of information:

• User inputs: prompts, questions, messages, and other content you submit to the assistant.
• Conversation data: chat history, generated responses, troubleshooting context, conversation titles, timestamps, and related metadata.
• Account information: if you create an account, your email address, authentication metadata, and account preferences.
• Usage data: session identifiers, timestamps, feature usage, interaction patterns, error events, and service performance data.
• Technical data: IP address, browser type, device information, log data, and similar technical information.
• Cookies and local storage: data used for authentication, preferences, session continuity, and Service functionality.
• Legal and compliance data: information needed to respond to legal requests, enforce our terms, prevent abuse, or comply with applicable privacy laws.

ActionPanel AI plugin data

When an administrator installs, enables, and uses ActionPanel AI, the plugin may send selected WordPress site information to our servers. Depending on plugin settings and administrator actions, this may include:

• Prompts and chat messages.
• WordPress site diagnostics and configuration summaries, including plugin, theme, WordPress version, REST, cron, Site Health, and runtime information.
• Selected WordPress settings relevant to troubleshooting.
• The results of same-site diagnostic HTTP requests you approve, such as response status, selected headers, asset URLs, and page content.
• Excerpts from your WordPress debug log — only when log reads are enabled (see below).
• Metadata or text contents of allowlisted files, limited to specific WordPress directories, when needed for troubleshooting.
• Your site URL and, for account or privacy requests, an email address.

ActionPanel AI is disabled by default on fresh installs until an administrator completes setup and turns it on. Log reads are off by default and separately opt-in, and can be turned off at any time. Administrators can also require a preview before site data is read, and proposed write operations require explicit administrator approval before any live change is applied.

How we use information

We may use collected information to:

• Provide, operate, and improve the Service.
• Generate AI-powered responses and troubleshooting guidance.
• Maintain conversation continuity and user preferences.
• Provide account features, authentication, and customer support.
• Troubleshoot bugs, monitor performance, and improve reliability.
• Detect, prevent, and respond to abuse, fraud, security incidents, or unauthorized access.
• Send service-related messages, security notices, and administrative updates.
• Comply with legal obligations and enforce our terms.

Content use

ActionPanel AI plugin data is used to provide plugin functionality and troubleshooting guidance. We do not use your private WordPress site diagnostics to create public content without appropriate permission or de-identification. We do not intentionally publish personal information, credentials, secrets, or confidential site data.

Third-party AI providers and service providers

To operate the Service, we may send prompts, context, and related data to third-party AI infrastructure providers, such as OpenAI and Google, and to the platforms we use to route requests to them. These providers process data under their own terms, privacy commitments, and data-processing practices.

We may also use service providers for hosting, analytics, authentication, email delivery, logging, monitoring, and security. We do not sell or rent personal information.

Cookies, local storage, and tracking

We may use cookies, local storage, and similar technologies to keep users signed in, remember preferences, maintain sessions, improve functionality, measure usage, and protect the Service. You can control cookies through your browser settings, but disabling them may prevent some Service features from working properly.

Data retention

We retain information for as long as reasonably necessary to provide the Service, maintain security, comply with legal obligations, resolve disputes, and enforce our terms.

Anonymous plugin session chat data is automatically deleted after a limited retention period. Account-linked data may be retained while the account remains active or as needed for legitimate business, security, legal, or compliance purposes. Retention periods may vary depending on the type of data, user settings, legal requirements, and operational needs.

Data security

We use reasonable technical and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, or destruction. These may include TLS encryption, access controls, authentication mechanisms, and monitoring. No online service can guarantee absolute security. You are responsible for using the Service carefully and avoiding submission of credentials, secrets, regulated data, or highly sensitive information unless necessary and authorized.

International data transfers

Your information may be processed in the United States or other countries where we or our service providers operate. If information is transferred internationally, we take appropriate steps designed to protect it in accordance with applicable law, which may include contractual safeguards such as Standard Contractual Clauses where required.

Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal information, and to withdraw consent where processing is based on consent. To exercise privacy rights, contact us at support@wpassistant.ai.

For ActionPanel AI plugin data, WordPress administrators can also use Tools → Export Personal Data and Tools → Erase Personal Data to request site-scoped export or deletion for an email address.

California and other U.S. state privacy rights

If laws such as the California Consumer Privacy Act or similar state laws apply to your information, you may have additional rights, including the right to know, access, correct, delete, and opt out of certain uses of personal information. We do not sell personal information.

European privacy rights

If the GDPR or similar laws apply, our legal bases for processing may include providing the Service, performing a contract, legitimate interests, consent, legal compliance, and protecting the rights and security of Atiba, users, and others. You may have the right to lodge a complaint with your local data protection authority.

Do Not Track signals

Some browsers provide “Do Not Track” signals. Because there is no consistent industry standard for responding to these signals, the Service does not currently respond to them.

Children

The Service is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us and we will take appropriate steps to delete it.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice through our website, the Service, or another reasonable method. Continued use of the Service after an updated Privacy Policy becomes effective means you acknowledge the updated policy.

Contact us

For privacy-related questions or requests, contact us at support@wpassistant.ai.