Privacy Policy
How we collect, use, and protect your information when you use TalkToWP.
In short
TalkToWP collects only the monitoring data your WordPress plugin sends — uptime status, response times, plugin lists, and security headers. We never store your WordPress admin password or database credentials. We never sell your data to anyone. You can request a full export or deletion of your data at any time by emailing [email protected].
1. Introduction
Beyondt Consultancy & Services Pvt. Ltd. ("Company", "we", "us", or "our") operates TalkToWP ("Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By using the Service, you consent to the practices described in this policy.
2. Information We Collect
2.1 Personal Information
- Email address
- Name (optional)
- Payment information — processed and stored by Dodo Payments (our Merchant of Record). We do not store your card or payment details directly.
2.2 WordPress Site Data
- WordPress version and configuration
- Installed plugin and theme information
- Server performance metrics
- Error logs and debug information
- Security status indicators
- SSL certificate status
- Database statistics
2.3 Usage Data
We automatically collect certain information when you access the Service: IP address and browser type, device information, pages visited and features used, and time and date of visits.
3. How We Use Your Information
We use collected information to provide and maintain WordPress monitoring services, detect and alert you to site health and security issues, generate AI-powered insights and plain-English explanations, send transactional alerts, process payments, improve the Service, and meet legal obligations.
3.1 Collective Plugin Intelligence
TalkToWP analyses anonymised, aggregated patterns across all sites in our network to improve issue detection. No domain names, site identifiers, client information, or personally identifiable data are ever included in this analysis.
4. Third-Party Services & Sub-processors
| Service | Purpose | Data Shared |
|---|---|---|
| Dodo Payments | Payment processing, billing | Name, email, payment details |
| Supabase | Authentication and database | Email, account data, monitoring data |
| OpenAI | AI-powered issue analysis | Anonymised error data only. No PII. Not used for model training. |
| Cloudflare | CDN, DDoS protection | IP addresses, request metadata |
| Resend | Email delivery | Your email and notification content |
| Google PageSpeed | Performance analysis | Public site URLs only |
We do not sell your personal information to any third party.
5. Lawful Basis for Processing (GDPR)
We process your personal data on the following legal bases: contract performance (delivering the Service), legitimate interests (fraud prevention, security, service improvement), legal obligation (compliance with applicable law), and consent (where you have provided it explicitly).
6. Your Rights
EEA / UK residents (GDPR / UK GDPR)
- Access: Request a copy of your personal data
- Rectification: Request correction of inaccurate data
- Erasure: Request deletion of your personal data
- Portability: Receive your data in a machine-readable format
- Restriction: Request restriction of processing
- Objection: Object to processing based on legitimate interests
California residents (CCPA)
- Know: Request disclosure of personal information collected
- Delete: Request deletion of personal information
- Opt-out of sale: We do not sell your personal information
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
7. International Data Transfers
Your data may be processed in countries other than India, including the United States and the European Union, by the sub-processors listed above. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) where required.
8. Data Security
We implement bank-level encryption in transit (TLS/SSL), encryption at rest, secure API key authentication, role-based access controls, and regular security reviews. In the event of a data breach, we will notify you and relevant authorities as required by applicable law.
9. Data Retention
- Incident logs and monitoring history: Retained while your account exists
- Account data: Retained until you explicitly request deletion
- Payment records: Retained as required by applicable tax regulations (typically 7 years)
To request deletion, contact [email protected].
10. Cookies and Tracking
We use essential cookies (required for login sessions), preference cookies (remember your settings), and analytics cookies (understand aggregate Service usage). You can control cookies through your browser settings.
11. Children's Privacy
Our Service is not directed to individuals under 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, please contact us immediately.
12. Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be communicated by updating the "Last updated" date and, where appropriate, by email notification.
13. Contact & Data Controller
Beyondt Consultancy & Services Pvt. Ltd.
302, EE 194, Sector 2, Saltlake, Kolkata 700091, West Bengal,
India
Email:
[email protected]
14. Grievance Officer
In accordance with the Information Technology Act, 2000, our Grievance Officer can be contacted at the address above. We aim to acknowledge grievances within 24 hours and resolve them within 30 days.