Privacy Policy
Last updated: July 18, 2026
This policy covers SiteProPilot Cloud, the hosted service the SiteProPilot WordPress plugin connects to. The plugin itself never calls an AI provider directly — every AI request goes through SiteProPilot Cloud, which is what this page describes.
1. Who we are
SiteProPilot ("we", "us") operates SiteProPilot Cloud, a service that WordPress sites connect to via the SiteProPilot plugin to receive AI-generated website audits, content, and optimization recommendations.
2. Information we collect
We collect information at three points: when you create an account, when you connect a website, and when you use a feature.
- Account information — your email address, name, and a securely hashed password.
- Website information — the URL and name of each website you connect, and its WordPress/plugin version.
- Business profile — anything you enter under Settings (business name, description, services, keywords, target audience, writing style, tone), used so the AI doesn't ask you the same questions twice.
- Content sent for processing — depending on the feature you use: page/post titles, headings, and content excerpts (for audits and optimization); image filenames and existing ALT text (for image SEO); topics and keywords you provide (for content generation).
- Usage data — which features you use and how often, to enforce plan limits and improve the product.
- Billing information — subscription plan and status. Payment details (card numbers etc.) are collected and processed entirely by our payment processor, Dodo Payments — we never receive or store your payment card details.
3. How we use this information
- To generate the audits, recommendations, and content you request.
- To maintain your account, subscription, and usage limits.
- To operate, secure, and improve SiteProPilot Cloud.
- To communicate with you about your account or material changes to the service.
4. Third parties we share data with
We do not sell your data. We share it only with the service providers necessary to run SiteProPilot:
- AI providers — content you submit for AI processing is sent to Anthropic (Claude) or OpenAI, depending on which is configured for your request, solely to generate the response. See Anthropic's privacy policy and OpenAI's privacy policy.
- Dodo Payments — processes subscription payments on our behalf. See Dodo Payments for their privacy practices.
- Infrastructure providers — our hosting and database providers, who process data only to operate the service.
5. Data retention
We retain account and website data for as long as your account is active. Audit results, activity logs, and usage records are retained to power the dashboard and enforce plan limits; older audit snapshots are pruned automatically. You can request deletion of your account and associated data at any time (see Section 8).
6. Security
Your session token is stored encrypted on your WordPress site and is never exposed to your site's visitors or to your browser's JavaScript. Data in transit between your site, SiteProPilot Cloud, and our sub-processors is encrypted (HTTPS/TLS).
7. Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, or to object to or restrict certain processing. To exercise any of these rights, contact us using the details below.
8. Children's privacy
SiteProPilot is not directed at children and we do not knowingly collect personal information from anyone under 16.
9. Changes to this policy
We may update this policy from time to time. Material changes will be reflected by an updated "Last updated" date above.
10. Contact us
Questions about this policy or your data: sales@xigmapro.com