1. Who is responsible for your data?

The controller for personal data processed through sitepublisher.ai is:

Please use the email address above for privacy questions or requests concerning your personal data.

2. What personal data do we process?

Information you provide

When you contact us, request information or ask for support, we may process your name, business name, email address and any information you choose to include in your message.

Technical and security information

Our website, hosting and security services may record information such as your IP address, browser and device type, requested pages, date and time, referring page and security events. This information is used to operate, protect and troubleshoot the website.

Cookie choices and analytics information

We store your cookie preference. If you actively accept analytics, we may also collect limited usage information such as visited pages, referral source, approximate location, device and browser information and interaction data.

Data we do not currently collect through this website

Online checkout, customer accounts and paid licence activation are not yet active on this website. We will update this policy before those services begin collecting personal data.

3. Why do we use personal data?

Where processing is based on legitimate interests, we consider the necessity of the processing and balance those interests against your rights and reasonable expectations.

4. Cookies and analytics

The essential fcc_consent cookie remembers whether you accepted or rejected optional analytics. It is stored for up to 365 days and is necessary to respect your choice.

Analytics powered by Matomo through WPMU DEV remain blocked until you select Accept analytics. If you reject analytics, those analytics scripts and cookies are not activated. You can change your choice at any time through the cookie-settings link in the website footer.

For names, purposes and lifetimes of individual cookies, please read our Cookie Policy.

5. Using the SitePublisher AI WordPress plugin

SitePublisher AI runs within the WordPress environment in which the plugin is installed. The website owner using the plugin determines which content and personal data are processed and remains responsible for the data processed for their own publishing activities.

Optional update checks and installation statistics

From Free version 2.0.1, update checks and installation reporting have separate controls under Platform Settings → Updates & Privacy. Both are off by default. They are optional and are not required to use Free.

If you enable update checks, your WordPress website contacts sitepublisher.ai to check for a release and to download an update when requested by WordPress. The plugin version is included in the connection header. Update checks do not include your website URL, installation token, content, passwords or OpenAI API key.

If you enable installation reporting, the plugin sends a random installation token, plugin version, build and activity status to sitepublisher.ai, normally once per day. We store a hash of that token, the version and build, and the first and last report times. The report does not include your website URL, email address, API key, passwords, articles or visitor data. The receiving host can see the connection IP address in hosting logs. A daily salted IP hash is used for short-term request rate limiting.

Installation records expire after 90 days without a report. Opting out stops reporting immediately and requests deletion. A token-hash revocation marker, without version or build, is retained for up to 90 days to prevent delayed reports from recreating a deleted record. If the service cannot be reached, reporting still stops and the previous record expires. Deactivation disables reporting; enabling it again requires a new choice in the plugin settings.

Download statistics are aggregate request counts, with direct downloads and update downloads counted separately. They may include repeated requests and bots. Active-installation statistics cover only consenting installations that reported within the last 30 days.

Optional public website credit

The “Powered by SitePublisher AI” footer link is off by default. A website administrator can enable or disable it independently of updates and reporting. The plugin does not insert this credit into article content.

When a user connects an OpenAI API account and requests AI-generated content or images, the relevant prompt and content are sent to OpenAI using the API credentials configured by that user. The OpenAI API key should be entered only inside the plugin settings and should never be sent to us by email or through this website.

For information about OpenAI’s processing practices, consult the OpenAI Privacy Policy and the terms that apply to your OpenAI account.

6. Who may receive personal data?

We disclose personal data only where necessary for the purposes described in this policy. Categories of recipients may include:

• website hosting, maintenance, security and email service providers;
• WPMU DEV and the Matomo analytics technology used through its service, but only for optional analytics after consent;
• professional advisers such as accountants or legal advisers where necessary; and
• public authorities or courts where disclosure is required by law.

Service providers acting on our behalf are required to handle data only for the agreed purpose and with appropriate safeguards. You can read the WPMU DEV Privacy Policy for more information about that provider.

7. International data transfers

Some technology providers may process information outside Spain or the European Economic Area. Where personal data is transferred to a country without an adequacy decision, the transfer must be supported by an appropriate legal safeguard, such as the European Commission’s Standard Contractual Clauses, together with any supplementary measures required by law.

When you use the SitePublisher AI plugin with your own OpenAI account, you are responsible for reviewing and configuring the data-processing arrangements applicable to that account and your publishing activities.

8. How long do we keep personal data?

We retain personal data only for as long as necessary for the purpose for which it was collected and for any applicable legal, accounting or dispute-resolution period.

• Contact and support correspondence is kept while the request is active and afterwards only as long as reasonably needed for follow-up, contractual records or legal claims.
• Technical and security logs are retained for the limited periods configured by our hosting and security services, unless a longer period is required to investigate an incident.
• Your cookie preference is stored for up to 365 days.
• Analytics cookie lifetimes are listed in the Cookie Policy. Analytics records are retained according to the configured service retention and are deleted or aggregated when no longer required.

When retention is no longer necessary, information is deleted, anonymised or securely isolated until deletion is possible.

9. Your data-protection rights

Subject to the conditions of the General Data Protection Regulation, you may have the right to:

• request access to and a copy of your personal data;
• correct inaccurate or incomplete data;
• request deletion or restriction of processing;
• object to processing based on legitimate interests;
• receive data you provided in a portable format where applicable; and
• withdraw consent at any time without affecting processing carried out before withdrawal.

To exercise a right, email clients@sitepublisher.ai. We may need to verify your identity before completing the request. We normally respond within one month, subject to any lawful extension.

You also have the right to lodge a complaint with Spain’s supervisory authority, the Agencia Española de Protección de Datos (AEPD), or with another competent supervisory authority.

10. Security and your responsibilities

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, alteration, loss or disclosure. No internet service can guarantee absolute security.

Keep WordPress administrator credentials, Application Passwords and API keys confidential. Do not include passwords, API keys or other secret credentials in emails or support messages.

This website and product are intended for business and professional users and are not directed at children.

11. Changes to this policy

We may update this Privacy Policy when our services, suppliers or legal obligations change. The revised version will be published on this page with an updated date. Material changes will be highlighted where appropriate.