Privacy Policy

Who is responsible

WPkeeper is responsible for the personal data of account holders and their users described here. For personal data inside the sites you manage, such as WordPress users, orders or form entries in a backup, you are the controller and WPkeeper processes it for you only to provide the service.

What we collect

Account data: names, email addresses, the account name, roles, and your password, which we keep only as an Argon2id hash. Billing data: your plan and Stripe customer and subscription ids; Stripe handles your card, and we never see or store card numbers.

Site data: the URLs and connection details you give us (SSH hosts, users and paths, plugin keys, encrypted credentials), the inventory of plugins, themes and versions, uptime and page check results, screenshots, performance reports, update history, reports and backups of site files and databases.

Usage data: an activity log of actions in your account (who did what and when), and session records that keep you signed in. Your IP address is used briefly to rate-limit sign-in and other sensitive actions; we do not store it in the activity log.

How we use it

To run the service you asked for: monitor and update your sites, take and restore backups, send the alerts and reports you set up, and bill your plan. To keep it secure: verify email addresses, reset passwords, detect abuse and investigate problems. To tell you about your account, such as a failed payment, a change to these documents, or a security issue.

We do not sell your data, use it for advertising, or use the content of your sites to train AI models.

Processors we use

Stripe, for payments and invoices. Our hosting provider, for the servers and database that run WPkeeper. An S3-compatible storage provider, for backups in included storage and for off-site copies of our own database. An email delivery provider, for account and alert emails (an account can use its own mail server instead). Anthropic, whose Claude models power an assistant that only WPkeeper staff use when supporting the service.

When you connect alert channels such as Slack, Telegram or a webhook, or your own S3 bucket or mail server, the data you choose to send goes to those services under their own terms.

Where it is stored and for how long

Secrets such as SSH keys, plugin keys and storage credentials are encrypted at rest. We keep your data while your account exists. Monitoring history, screenshots and backups follow the retention settings of your account.

When you delete your account, its data is removed from our database and files at once. Backups in included storage are removed within 30 days. Our own encrypted database backups roll over within 14 days. Backups in your own bucket stay there under your control. We keep a minimal record that the account existed and was deleted, and Stripe keeps billing records for as long as tax law requires.

Your rights: access, export and deletion

An account owner can download all account data as a file from Settings, Account, and delete the account from the same page. Any user can leave an account. You can also ask us to access, correct or delete your personal data, or object to how we use it, by writing to the address below; we answer within 30 days. You may also complain to your data protection authority.

Cookies

WPkeeper sets one cookie, an httpOnly session cookie that keeps you signed in for up to 7 days. It also remembers a few display preferences in your browser. There are no advertising or analytics cookies.

Children

WPkeeper is for businesses and is not meant for anyone under 18.

Changes to this policy

If we change how we handle personal data in a way that matters to you, we email account owners before the change applies and update the date at the top of this page.

Contact

Questions about this document: [email protected].