This Privacy Policy explains what data wptaskify collects and how we use it. We aim to collect only what we need to run the Service.
wptaskify is operated by Logical Dottech, Sunder Nagar, Fatehabad, Haryana 125050, India.
Data we collect
- Account data: your email address and a securely hashed password.
- WordPress connection data: the site URL, username, and an Application Password - the Application Password is encrypted with AES-256 at rest.
- Shopify connection data: if you connect a Shopify store, we store your store domain and an Admin API access token (encrypted at rest) so the app can read and update your products, collections, pages, blog content, discounts and theme content for SEO. See the Shopify section below.
- Other connections: for Google, Pinterest, Meta, LinkedIn and YouTube, an encrypted OAuth token (see the sections below).
- Images you create: Pinterest pin images are stored in Cloudflare R2 until you delete the pin.
- Usage data: basic logs of actions taken (for your activity feed, billing, and abuse prevention).
- Payment data: handled by our payment provider, Razorpay. We do not store your full card details. For Indian customers we may store your GSTIN (only if you provide it) so we can issue a valid tax invoice.
How we use your data
To provide and secure the Service, connect your site to AI, process payments, send account emails (verification, password reset), and improve the product.
AI processing
When you use the AI, your instructions and relevant site content are sent to your chosen AI provider (Claude or ChatGPT) and, for images, to Google Gemini, to produce the requested result. Their handling of that data is governed by their own privacy policies.
Google Analytics & Search Console (optional connection)
If you choose to connect your Google account, wptaskify requests access to your Google Analytics and Google Search Console data using these scopes:
analytics.readonly- read-only access to your Google Analytics 4 reports (sessions, pageviews, top pages, traffic sources).webmasters- to read your Search Console data (search queries, clicks, impressions, positions, URL indexing status and canonicals via the URL Inspection API, and sitemap status) and, only when you or your AI assistant explicitly ask, to submit or resubmit a sitemap. This never forces or requests indexing of any page.
We use this access only to show you, and let your chosen AI assistant summarise, your own traffic, search performance and indexing status inside wptaskify. The only write action we ever perform is submitting/resubmitting a sitemap when you explicitly request it; we never otherwise write to, modify, or delete anything in your Google account, and we do not use this data for advertising. We store an encrypted Google refresh token so we can fetch this data on your behalf.
Limited Use: wptaskify's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can disconnect your Google account at any time from your dashboard, which removes our stored token; you can also revoke access at myaccount.google.com/permissions.
Google Business Profile (optional connection)
If you connect a Google Business Profile, wptaskify requests the business.manage scope. With it, and only when you or your AI assistant ask, we read your locations, reviews, posts, photos and performance figures, and we can reply to reviews, publish and schedule posts, upload photos and update listing details such as hours, description and services. We also check for new reviews so we can email you an alert.
The Limited Use terms above apply to this data as well. You can disconnect at any time from your dashboard or at myaccount.google.com/permissions.
Review link pages: when a customer opens the review page we host for your business and asks for help writing, the words they type are sent to Google Gemini to draft a review they can edit and post themselves on Google. We do not store what they type.
YouTube (optional connection)
wptaskify uses YouTube API Services. If YouTube is enabled for your account and you connect a channel, you sign in through Google and approve the youtube and youtube.force-ssl scopes. With them, and only on your request, we read your channel, videos, playlists, comments and captions, update a video's title, description and tags, and reply to comments. We do not upload or delete videos.
By connecting YouTube you agree to the YouTube Terms of Service, and the Google Privacy Policy applies. You can revoke access at any time at security.google.com/settings/security/permissions.
Shopify stores
If you install wptaskify from the Shopify App Store or connect a Shopify store, we request only the permissions needed for SEO and content work: read and write access to products, content (pages, blogs, articles), price rules (discounts) and themes, and read access to store locations. We use this to read and improve your store's SEO - product titles, descriptions, meta, schema, alt text, collections, blog content and theme SEO markup.
We do NOT request access to your orders or your customers. wptaskify does not read, store, or process order data or customer personal data from Shopify. The app focuses only on products, content and SEO.
We store your store domain and an encrypted Admin API access token so the app can perform the actions you request. If you uninstall the app, we stop using this access. You can request deletion of your stored data at any time by contacting us.
GDPR / data requests: we support Shopify's mandatory privacy webhooks (customers/data_request, customers/redact, shop/redact). Because we do not store customer personal data from Shopify, a customer data or redaction request is acknowledged and has no stored customer data to return or delete; a shop-redaction request removes your store's connection data from our systems.
Pinterest (optional connection)
If you choose to connect your Pinterest business account, wptaskify uses the Pinterest API only to help you market your own content on your own Pinterest account. You authorize the connection through Pinterest's OAuth, and we store an encrypted access/refresh token so we can act on your behalf when you ask us to.
With your Pinterest connection, and only on your request, the app can: read your boards, create boards, and publish pins (an image, title, description and a link back to your own website) to your account. We use this access solely to create and manage pins for your account.
We do not collect other people's Pinterest data, we do not read your followers or private messages, and we do not sell or share your Pinterest data. You can disconnect Pinterest at any time from your dashboard (which removes our stored token), and you can also revoke access from your Pinterest account settings. To request deletion of any stored Pinterest connection data, contact us.
Facebook and Instagram (optional connection)
If you choose to connect a Facebook Page or an Instagram professional account, wptaskify uses Meta's APIs only to help you publish and manage your own content on your own accounts. You authorize the connection through Meta's login, and we store an encrypted access token so we can act on your behalf when you ask us to.
From Meta we receive only what is needed to provide the service: the list of Pages or Instagram accounts you manage, an access token for the ones you select, and the posts, comments and basic statistics for content published through us. With your connection, and only on your request, the app can: show you your connected accounts, publish posts, photos, videos, Reels and Stories, show you the comments and performance figures for those posts, and reply to comments.
We do not sell, share or transfer this information to anyone else, we do not use it for advertising, and we do not use it to build audience profiles. Access tokens are encrypted at rest, and each customer can reach only the accounts they connected themselves. You can disconnect an account at any time from your dashboard, which removes our stored access to it, and you can also revoke access at facebook.com/settings. To request deletion of any stored Meta connection data, contact us.
LinkedIn (optional connection)
When you connect a LinkedIn account or Company Page, we store an access token issued by LinkedIn and the basic details it returns: your name or the Page name, its id, and the Pages you administer. We use these only to publish the content you schedule and to show you how those posts performed.
We do not read your connections, your messages, or any data beyond what you authorise on LinkedIn's own permission screen. We never post to a Page without an action you take yourself, and we never share one customer's LinkedIn data with another customer.
You can disconnect a LinkedIn account at any time from your dashboard. Disconnecting deletes the stored token, after which we can no longer reach that account. Tell us and we will delete the associated data on request.
Data sharing
We do not sell your data. We share data only with the service providers needed to run wptaskify (hosting, database, email, payments, AI) and when required by law. Data obtained from Google APIs, from Meta (Facebook and Instagram) and from LinkedIn is not shared beyond providing that feature to you.
Subprocessors
These companies process personal data for us, only to run the service:
- Railway Corporation (United States): application hosting and database, US West region.
- Google LLC (United States): Gemini AI processing of content you ask about (for example alt text, review reply drafts and insights), and the Google services you choose to connect (Search Console, Analytics, Business Profile).
- OpenAI, L.L.C. (United States): AI image generation for featured and in-article images.
- Cloudflare, Inc. (United States): AI image generation, and storage of Pinterest pin images (Cloudflare R2).
- Resend, Inc. (United States): account emails such as verification, alerts and reports.
- Razorpay Software Private Limited (India): billing on our website.
Your account data is stored in the United States. Pinterest pin images are stored in Cloudflare R2 in its Asia-Pacific location. Data is accessed from India by the company owner for support and maintenance.
Requests from governments and other third parties
We disclose personal data only when the law requires it under a valid, binding order. Each request is reviewed by the company owner and checked for legal validity, and we answer with the minimum data the order requires. Where the law allows, we tell the affected user before disclosing. We do not give any government or third party direct or bulk access to our systems.
Security
Credentials are encrypted, accounts are isolated, and access is restricted. No system is perfectly secure, but we take reasonable measures to protect your data.
Your rights
You can access, correct, or delete your account data, and disconnect your sites, at any time. To request deletion, contact us.
Contact
wptaskify is operated by Logical Dottech, Sunder Nagar, Fatehabad, Haryana 125050, India. Questions about this policy or a request to delete your data can be sent to the address on our contact page.