This policy explains how NOMESOFT LTD (“we”, “us”) handles personal data on powerwp.ai and in the services around the PowerWP AI plugin. We collect as little as we can.
The short version. Your AI app talks to your website directly. PowerWP never sends us your site’s content, your customers, orders, users, connection keys, logs or anything your AI app does on your site. We only receive what it takes to sell, update and support PowerWP.
Who is responsible
NOMESOFT LTD, 60 Tottenham Court Road, Suite 6047a, Fitzrovia, London W1T 2EW, United Kingdom, a company registered in England and Wales with company number 16414145, is responsible for the data described here. For anything about privacy, write to [email protected].
What we collect
When you buy
Your name, e-mail address, country and city, your phone number if you give it, what you bought, your license keys and your order history. The Free plan collects the same details, without payment data. With each order, the shop also stores the IP address and browser it was placed from, to help prevent fraud. You pay by card through Stripe (Apple Pay and Google Pay go through Stripe too); we receive the payment status and limited details such as the card brand and its last four digits, never the full card number. For a paid plan, Stripe keeps your payment details so the plan can be billed every month or every year until you cancel; we never charge them for anything else without you. We need these details to deliver your plan; only the phone number is optional.
When you write to us
Your name, e-mail address, the site address if you give it, and your message, from the contact form or by e-mail.
If you choose to get our e-mails
If you tick the box at checkout, we add your e-mail address to our newsletter at Brevo, our e-mail service, and send you PowerWP news, offers and discounts. The box is never ticked for you, and buying doesn’t depend on it. Every marketing e-mail has a link to unsubscribe. Order and license e-mails are separate and always come.
From the plugin’s update check
Your site contacts our update and license service (api.powerwp.ai):
- When: once a day, when WordPress checks for updates; when the plugin is activated, updated, deactivated or deleted; and when you activate or deactivate a license.
- What it sends: a random installation ID (on a copied site, also the ID of the installation it was copied from); why it reports (for example the daily check, an update or a deactivation); the site and home address and the site name; the versions of PowerWP, WordPress, WooCommerce, PHP and the database server; the active theme, the web server software and the site language; whether the site is a multisite; the environment you set in PowerWP (production, staging or development); and the edition (pro with an active paid license, otherwise free). Activating a license on the License screen sends the key, the installation ID, the home address and the PowerWP version, and after that the key is part of each report.
- What it never sends: content, customers, orders, users, connection keys, logs or AI activity.
- IP address: the service sees your server’s IP address but does not store it. Cloudflare, which protects the service, processes it as described below.
- Why: to deliver updates, to check your license (plan, sites and until when it is active) and to count the sites that use PowerWP.
- Your choice: the check is part of receiving updates and can’t be switched off in the plugin; deactivating or deleting the plugin stops it. The service can’t act on your site: WordPress installs an update from us only if its signature matches the key built into the plugin.
When you visit powerwp.ai
Our hosting and Cloudflare, which protects and speeds up the site, process technical data such as your IP address, browser and the pages you open. This is used for security and to keep the site working, and kept only for a limited time.
Cloudflare Web Analytics counts visits (pages, referring sites, browser and country) without cookies and without identifying you. If you choose Accept in the cookie banner, two more things happen: WooCommerce records where your visit came from, for example a search engine, a link or an ad, and keeps it with your order for our sales reports; and Brevo records the pages you view and the carts you leave on powerwp.ai and the e-mail address you enter at checkout; once we know your address, this is linked to you and used for our e-mails. With “Only necessary”, neither happens. We use no advertising trackers.
What we don’t receive
Anything that happens between your AI app and your website stays between them: your site’s content and settings, your customers and orders, what the AI reads or changes, and your conversations with the AI app. Those are handled by your own server and by your AI app’s provider under its terms. PowerWP’s own records, such as the activity log, the change history, the site memory and the record of AI apps that signed in, stay in your site’s database.
Your site’s data and your AI app
PowerWP runs on your site. What your AI app reads through it goes to your AI provider under that provider’s terms, and as the owner of your site you are responsible for the personal data on it. PowerWP lets you limit what each connection may do, masks personal data in order checks by default and hides passwords and keys unless a connection is allowed to see them.
Since PowerWP AI 1.6, apps such as Claude and ChatGPT can connect by signing in. That happens between your site and the app: you sign in to WordPress on your own site and approve the app, and no PowerWP server takes part. Your site keeps a record of each app you approved (its name, the address it registered and the administrator who approved it) and stores its access tokens only as fingerprints. We receive none of this.
Why we use your data
- To provide what you bought: orders and recurring billing, license keys and license checks, downloads, updates and support (performing our contract with you).
- To keep things secure and working: preventing fraud and abuse, protecting the website, and counting installations to plan updates (our legitimate interests).
- To understand how the site is used: visit statistics without cookies (our legitimate interests) and, if you accept cookies, where orders come from (your consent).
- To send news, offers and discounts: only if you ticked the box (your consent). You can withdraw it at any time.
- To meet legal duties: for example keeping invoices and tax records (legal obligation).
We don’t sell your personal data, and we don’t share it for advertising.
Who helps us
We use a small number of service providers who process data on our behalf and under contract: Stripe (payments), our hosting provider and Cloudflare (website and security), Google Workspace (e-mail), and Brevo (Sendinblue SAS, France), which sends our e-mails, including order and license e-mails and therefore their content and license keys, and runs our newsletter and e-mail marketing with your contact details, your orders and, if you accept cookies, your visits to powerwp.ai. Our licensing and update service is run by us. We share data with authorities only when the law requires it.
International transfers
We are based in the United Kingdom, and our providers may process data in the UK, the EU, the USA and other countries. Where data leaves the UK or the EU, we rely on the safeguards the law provides, such as the UK International Data Transfer Addendum and the European Commission’s standard contractual clauses.
How long we keep data
- Orders and invoices: as long as tax and accounting law requires.
- Your account and license keys: while your account exists, then as long as needed for legal duties.
- Messages to support: up to two years after the conversation ends.
- Newsletter subscription: until you unsubscribe. Brevo keeps a record that you agreed.
- Update-check data: while the installation is active, and up to 12 months after it was last seen.
Your rights
Depending on where you live, you can ask us to show you the data we have about you, to correct it, to delete it, to limit or object to its use, or to give it to you in a portable form. You can also complain to a data protection authority: in the UK, the Information Commissioner’s Office (ico.org.uk); in the EU, the authority where you live. If you live in California or another US state with a privacy law, you have the rights that law gives you; we don’t sell or share personal information as those laws define it. To stop marketing e-mails, use the unsubscribe link in any of them, or write to us. To use any right, write to [email protected]. We may ask you to confirm who you are first, and we answer within one month.
Cookies
powerwp.ai uses these cookies:
- Needed for the site: WooCommerce cookies for your cart and checkout, WordPress cookies when you sign in, and a Cloudflare cookie (cf_clearance) that protects the site against bots.
- Where your visit came from (only if you accept): WooCommerce’s sbjs_ cookies remember it during your visit, at most 30 minutes after the last page you open, so an order can show its source.
- Brevo (only if you accept): the sib_cuid cookie lets our e-mail service recognize your browser for up to six months, and tracking_email keeps the address you typed at checkout until you close the browser.
The cookie banner asks before any of the last two groups is set, and remembers your answer in the pw_consent cookie for six months. To change your choice, use Cookie settings at the bottom of any page; if you withdraw it, we remove those cookies. We don’t use advertising cookies, and the site works the same either way.
Children
PowerWP is made for businesses and adults. We don’t knowingly collect data from children under 16.
Security
We protect data with encryption in transit, limited access for the people who need it, and providers that take security seriously. No system is perfect: if a breach affects your data, we will tell you as the law requires.
Changes to this policy
We will update this policy when our practices change. The date at the top shows the latest version; important changes are announced by e-mail to customers.
Contact
NOMESOFT LTD, 60 Tottenham Court Road, Suite 6047a, Fitzrovia, London W1T 2EW, United Kingdom · Registered in England and Wales, company number 16414145 · [email protected]