Privacy

What we collect

• Account: your email address, your name if you give it, and the workspaces you belong to.
• Sites: for each connected site, the site URL, WordPress and PHP versions, multisite flag, and the list of plugins with versions, active status, auto-update status and whether an update is available.
• Settings: alert preferences, and a Slack webhook URL if you add one (stored encrypted).
• Usage: product analytics events (for example, which pages you open) to improve the product.
• Payments: handled by our payment provider, PayTabs. Card details never reach our servers.

What we never collect

The connector never sends posts, pages or other content, users, customers, orders, files or credentials. The stack check on /check does not store the list you paste.

How we use it

To match plugin risk signals to your sites, send you alerts, run your account and bill paid plans. We do not sell data and we do not use third-party ad trackers.

Email

We send alert and account emails through our email provider. You can change which alerts you get in your notification settings.

Retention and deletion

You can export your data or delete your account from your account page. Deleting a workspace removes all its site data within 30 days. Backups roll off within 8 weeks.

Your rights

You can ask for a copy of your data, correct it or delete it at any time by emailing [email protected].