Account data
Your name, email address, and password when you create or manage an account.
Legal
WP Studio is committed to protecting your data. This policy explains what we collect, how we use it, and your rights under GDPR, CCPA, and other regulations.
We only collect what we need to provide WP Studio — and we’re transparent about why.
Your name, email address, and password when you create or manage an account.
Pages visited and features used so we can understand how the product performs.
Processed securely by Stripe. We never store your card details.
Prompts you submit and the content our AI generates, used to improve results and train safely.
Your data powers a better WP Studio — and nothing else. Here’s exactly how we use it, and how long we keep it.
We use account and usage data to operate WP Studio, fix bugs, and continuously refine the tools you depend on.
Retention: Account lifetime plus 12 months, then anonymized.
Tailor suggestions, templates, and responses based on your project patterns and preferences.
Retention: Raw prompts: 30 days rolling. Derived preferences: up to 24 months.
Occasional emails about new features, security updates, and practical tips. You can unsubscribe at any time.
Retention: Until you withdraw consent; deletion within 30 days.
Monitor for fraud, spam, and terms violations to keep WP Studio safe for everyone.
Retention: Security logs: up to 6 months, then deleted.
Keep necessary records for tax, accounting, and regulatory compliance (e.g., GDPR).
Retention: Up to 7 years as required by law.
We use a small number of cookies to keep WP Studio secure, remember your preferences, and understand how our site is used. Here’s what each type does and how you can control them.
These cookies are required for core functionality like authentication and security. They cannot be disabled.
These cookies remember choices you make to improve your experience, such as language or region preferences.
We use PostHog and GA4 to understand how visitors interact with WP Studio, helping us improve performance and content.
You can control cookies through your browser settings at any time. Use the guides below to adjust permissions, clear site data, or block specific categories. Essential cookies will always remain active to keep the site secure.
Data Sharing
We never sell your personal data. We only share information with trusted service providers that help WP Studio run smoothly — and only when necessary to deliver our AI WordPress builder to you.
Amazon Web Services (AWS) hosts our platform and stores basic technical data such as IP addresses, error logs, and session metadata.
DPA signedWe use privacy-respecting analytics to understand feature usage, improve the AI builder experience, and fix crashes faster.
Anonymized where possibleSubscription payments are handled by a PCI-DSS compliant payment processor. We never store full card numbers on our servers.
PCI-DSS compliantWe use an email delivery provider for transactional messages, receipts, product updates, and optional newsletter campaigns.
Data Processing AgreementWP Studio does not sell, rent, or trade your personal information. If you have privacy questions, visit our contact page or email privacy@wpstudio.ai.
Every third-party processor below has signed a Data Processing Agreement that meets GDPR and CCPA requirements. These agreements limit how providers may use your data and require appropriate technical and organizational safeguards.
You have control over your personal information. Under applicable data protection laws, you may exercise the following rights regarding the data we hold about you.
Request a copy of the personal data we hold about you.
Ask us to correct inaccurate or incomplete personal data.
Request the deletion of your personal data, subject to legal obligations.
Receive your data in a structured, machine-readable format.
Object to processing based on legitimate interests or direct marketing.
Limit the way we process your data under certain circumstances.
To make a request or ask a question about how we handle your data, email our privacy team.
If you have concerns, reach out — we respond within 30 days. Our dedicated data protection team is here to help you understand how your information is used and exercise your rights.