Privacy Policy

What personal data we collect, why we collect it, who processes it for us, and how long we keep it.

Last updated: 1 July 2026

We collect the minimum

Account details, billing info and the site credentials needed to maintain your site — nothing more.

Secrets are encrypted

Site credentials live in an encrypted vault; every access is logged and visible to you.

Named processors only

Razorpay, Stripe, Brevo, MainWP, Hostinger and FreeScout — each under a data-processing agreement.

You stay in control

Export or delete your data, or revoke our access, any time from your dashboard.

01

What we collect

We collect only what we need to run your account and maintain your site: your name and contact details, billing information handled by our payment processors, the site addresses you connect, and the technical credentials required to perform maintenance.

• 
  Account data — name, email, phone, company and GSTIN where provided.
• 
  Billing data — handled by Razorpay or Stripe; we never store full card numbers.
• 
  Site data — URLs, connector keys and maintenance logs.

02

How credentials are protected

Site credentials live in an encrypted vault and are used only through a secure connector. Every access to your site is recorded in an audit log you can view in your dashboard, and you can revoke our access in one click at any time.

03

Who processes data for us

We work with a small, named set of processors, each under a data-processing agreement:

• 
  Razorpay — payments, subscriptions and GST invoicing for Indian customers.
• 
  Stripe — card payments for customers in the USA.
• 
  Brevo — transactional email and the newsletter (only if you opt in).
• 
  MainWP — secure site-management connection used to run maintenance.
• 
  Hostinger — hosting infrastructure for our own systems and backups.
• 
  FreeScout — support helpdesk that keeps your conversation in one thread.

04

How long we keep data

Account and billing records are kept for as long as your account is active and for the period tax law requires afterwards. Site credentials are deleted when you disconnect a site or close your account. Support conversations are retained so we keep context on your site.

05

Your choices & contact

You can access, correct, export or delete your personal data at any time. Write to privacy@wptenet.com and we’ll action it — usually within a few business days and always within 30.