Privacy Policy

1. Who we are

WPBit Labs BV, Keizersgracht 241, 1016 EA Amsterdam, Netherlands, is the controller of personal data described in this policy. Our data protection contact is privacy@wpbit.io.

2. Data we collect

Account data. Name, work email, company name, hashed password or identity-provider subject, and billing details processed by our payment provider.

Site telemetry. For each connected site: domain, WordPress core, plugin and theme versions, PHP version, uptime check results, backup metadata and update history.

Product usage. Pages viewed inside the dashboard, feature interactions, and error traces, retained for 90 days.

3. What we do not collect

We do not read your site content, customer records or WooCommerce orders except when transferring an encrypted backup you asked us to take. We do not sell personal data, and we do not use your data to train models.

4. Legal bases

We process account and site telemetry data to perform our contract with you, product usage data on the basis of legitimate interest in improving the service, and marketing email only with consent you can withdraw in one click.

5. Sub-processors

A current list of sub-processors, including hosting, email delivery, payments and error tracking, is maintained in the Data Processing Addendum. We give 30 days notice before adding a new one.

6. Retention

Account data is kept for the life of your workspace and 30 days after cancellation. Backups follow your plan retention setting. Logs are kept 90 days. You can request earlier deletion at any time.

7. Your rights

You may access, correct, export or erase your personal data, object to processing, or lodge a complaint with the Dutch Data Protection Authority. Email privacy@wpbit.io and we respond within 30 days.

8. Transfers

Primary processing takes place in the EU. Where a sub-processor operates outside the EEA, transfers rely on Standard Contractual Clauses plus supplementary technical measures.