Privacy Policy

Last updated: 2026. WP Publisher ("we", "the Service") connects Claude to your WordPress site(s).

What we collect

Account data: your email address and a salted hash of your password (we never store your password in plaintext).
Connected sites: for each WordPress site you connect, its URL, the WordPress username, and an Application Password. The Application Password is encrypted at rest (AES-GCM) and is used only to make WordPress REST API requests on your behalf.
Usage: counts of actions (e.g., posts created per month) for plan limits, and an audit log of administrative actions.
Billing: payments are processed by Stripe. We store a Stripe customer ID; we do not store card details.

How we use it

To operate the Service: authenticate you, connect to your WordPress sites, enforce plan limits, process subscriptions, and provide support. We do not sell your data or use your content to train models.

Your content

Content you publish or manage flows directly between the Service and your WordPress site. We do not retain copies of your posts beyond what is necessary to perform a requested action.

Security

Application Passwords are encrypted at rest with a key held only as a server secret. Transport is over HTTPS. You can disconnect a site at any time, which deletes its stored credentials.

Data retention & deletion

Disconnecting a site deletes its credentials. Deleting your account removes your account, sites, and usage records and cancels any active subscription. Email us to request deletion.

Contact

Questions: warren@lavall.ee.