Plain-English summary of what data we collect, why, and how long we keep it. The full Privacy Policy is at /privacy-policy/; in case of any difference, the full text governs.
What we collect from you
- Account email and name. For login, receipts, support.
- Payment info — handled by Stripe, not us. We see only the last 4 digits of your card for receipts.
- Billing address. For tax / VAT.
- License key heartbeats. When the plugin checks in: license key (hashed for lookup), machine ID, your site’s outbound IP at the time of the check, timestamp. Used for the 2-device cap and rate-limiting only.
What we don’t collect
- Your WordPress content — posts, pages, products, orders, comments, media, users. None of it reaches our servers.
- Your wp-admin password.
- Your Application Passwords.
- The contents of your /wp-setup conversation in Cowork. That stays on your computer.
- Your visitors’ data. We never touch visitor traffic to your site.
Why heartbeats and how long they live
Heartbeats let us enforce the 2-device cap and notice obvious license sharing. We keep heartbeat records for 90 days for support and forensics, then aggregate and delete identifiable fields. Aggregated counts (number of active customers, total tool calls, popular hosts) are retained indefinitely.
Cookies on wpfc.com
We use a small number of cookies on wpfc.com itself for the e-commerce store, MXchat support chat sessions, and basic analytics. The plugin running on your site doesn’t set or read any cookies on us — that all happens between Cowork on your desktop and your WordPress install.
Third parties we share with
- Stripe — payment processing.
- Anthropic — only for MXchat support chat replies on wpfc.com (your message + a RAG-matched chunk of our public knowledge base). Not your WordPress data.
- WP Mail SMTP / Postmark — transactional email (receipts, ticket replies).
We don’t share customer lists with advertisers or sell your data.
Your rights
- Request a copy of your data — email support.
- Request deletion of your account and all associated data (this also disables your license).
- Opt out of marketing emails via the unsubscribe link in any email we send.
If something changes
We’ll email you before any change that meaningfully expands what we collect or who we share with.