This is the short version, because the architecture genuinely is small. Generation runs on your server, not ours — so most of the data you might expect us to hold, we never receive at all.
Waypoint Software USA, Kansas City, Missouri, United States, is the data controller for the information described here. Contact us about anything on this page at support@waypointsoftwareusa.com.
Our store and licensing system holds a deliberately short list:
That is the whole record. We use it to sell you a license, to deliver it, to check that it is valid, to enforce the one-site-per-license limit, and to support you if you write to us.
This list is as important as the one above:
Generation happens between your WordPress installation and the AI provider you chose. We are not a party to it and it does not pass through our infrastructure.
Stripe processes payments, holds card data, and provides the billing portal. Supabase hosts the database in which the records listed above are stored. Both are bound to process this data only for the purposes of providing their service to us. Because both are United States providers, data may be processed in the United States.
The paid build performs a daily license check. It sends your license key, your site address, and the plugin version, and receives back confirmation that the license is valid. That is the only routine contact between your site and our servers, and it carries nothing else — no content, no analytics, no page views, no visitor data.
The free build on WordPress.org contacts us not at all.
Our store pages do not set advertising or analytics cookies. Stripe may set cookies necessary to operate its hosted checkout and billing portal when you are on those Stripe-hosted pages.
Where the GDPR or similar law applies to you, we rely on performance of a contract to sell and deliver your license and to run license validation; on legitimate interests to prevent license abuse and to secure our systems; and on legal obligation to retain records required for tax and accounting.
We keep license and activation records for as long as your license is active, and for up to 24 months after it lapses — long enough to restore a license for someone who returns, and to handle billing or dispute questions. Transaction records required for tax and accounting purposes are retained for as long as the law requires, typically seven years. Support email is kept for up to 24 months.
You may request a copy of the data we hold about you, ask us to correct it, or ask us to delete it. Write to support@waypointsoftwareusa.com from the address associated with your license and we will act on it. Note that deleting your record deactivates the license attached to it, and that we may need to retain transaction records we are legally required to keep.
Data is transmitted over TLS and stored with our processors under their security controls. No system is perfectly secure, but the smallest defense against a breach is not holding data in the first place — which is the main reason this policy is as short as it is.
The plugin is a business tool and is not directed at children. We do not knowingly collect information from anyone under 16.
If this policy changes, the effective date above changes with it, and material changes are emailed to active license holders.
Related documents: Terms of Service · Refund Policy