Log in

Privacy policy

Last updated 19 October 2026.

This policy explains what personal data WordPlus Cloud collects, why, how long it is kept and what your rights are. It covers www.wordplus.cloud and api.wordplus.cloud, our cloud services, and the data our WordPress plugins share with us.

Who is responsible

The controller is FOP Tkachenko Andrij Ivanovich, an individual entrepreneur registered in Ukraine ("WordPlus", "we"). Contact: support@wordplus.cloud.

What we collect

  • Account details: your name, email address, a hash of your password and the language you use the site in.
  • Purchases and licences: our reseller, Freemius, or Paddle for a subscription it sold before 19 October 2026, collects your payment details, and we never see your card. It tells us your email, name, customer, subscription and licence identifiers, what you bought, the status of your payments, and the billing details you gave at checkout, such as your address and tax number.
  • Connected sites: each site's address and name, the WordPlus plugins and versions on it, and when it was last in touch.
  • Support: what you write to us by email, through the contact form or from your account, kept in our support desk.
  • Technical data: IP address, browser and request details in server logs, used for security and to fix faults.

Our history from Freemius

Our WordPress plugins used to be sold, and their usage data collected, through Freemius, Inc., acting for us. We keep a copy of what Freemius holds for our products: the accounts of buyers and of administrators who opted in, their sites, licences, subscriptions, payments, billing details, trials and reviews, the answers given when a plugin was deactivated, and the emails Freemius sent, with the IP addresses Freemius recorded. We keep it as the history of our customers and of the sites using our plugins, to honour the licences bought there and to carry over the choices made there. Freemius keeps receiving data from sites that run older versions of our plugins, until they update.

Usage data from our WordPress plugins

Our WordPress plugins (Better Messages and its add-ons, and Live Stream) send us nothing about a site unless its administrator opts in, for each plugin, on the screen the plugin shows after it is activated, or a paid build's licence is active on it (below). The screen lists what each choice shares:

  • Your profile: the name and email address of the administrator who opted in, to email you about security and important updates of that plugin.
  • Site and plugin info: the site's address and title, its language and time zone (we work out its country from the time zone), the WordPress and PHP versions, and the plugin's version and whether it is active, deactivated or uninstalled.
  • Features and settings in use (optional, on unless you switch it off): which of the plugin's features are switched on and how they are set, as names with on/off values, numbers or short values, never your content, addresses or keys, so we know which features matter most.
  • Plugins and themes list (optional): the names, versions and status of the site's other plugins and themes, to keep our plugins compatible with them.
  • Newsletter (optional, off unless you switch it on): news and offers by email.

A site that opted in through the Freemius SDK in an earlier version of our plugin keeps that choice, and its data now comes to us instead of Freemius, with the features and settings in use added, which the plugin tells its administrator once. A paid build with an active licence always shares the site and plugin info, the features and settings in use and its activation and deactivation, as our terms of service say, and the plugins and themes list only if you choose. When you deactivate a plugin, it may ask why. Your answer is sent only if you submit it, and without your email or site address unless you opted in and leave "Anonymous feedback" unticked. We store no IP address with any of this. You can change each choice or opt out at any time under the plugin on your Plugins screen. Opting out stops the data and erases what that plugin shared, and every newsletter has a link that ends it.

The AI assistant in our plugins

Some of our plugins have an AI assistant on their Support page. When an administrator asks it something, the plugin sends us the question, the site's address, the plugin and its version, the site's language and the WordPress user ID of whoever asked, and the assistant may read the plugin's settings to answer. The question and what the assistant reads are processed by Anthropic, PBC (United States), our AI provider, which does not use them to train its models. We keep each question with its answer for 12 months, to stop abuse and to improve the answers.

Your site's users

When your site uses WordPlus Cloud, our servers handle data of your site's users for you, as your processor, under our data processing agreement. Our servers know your users only by the numeric IDs your site gives them, and their names, avatars and other profile details reach us encrypted by your site, so we cannot read them. So does what plugins built on our realtime SDK send on private channels, with keys that never leave your site. By those IDs we handle who is online, the delivery state of messages, push notifications, call connections and live streams. Message content stays in your WordPress database. Plugins written for the Pusher-compatible API send their data as they choose, and we relay it, keeping a presence member's details only while they are on the channel. Cloud AI, when your site switches it on, processes the message text or voice recording it works on and returns the result, and we keep it no longer than 30 minutes. Pushes to your mobile apps go through Google's Firebase Cloud Messaging and, on iPhones, Apple's push service.

Support and your account

To help you, or to look into a problem, our support can sign in to your account. Each sign-in is logged with its reason and with what was changed. Support can't change your email address or password, or delete your account.

Emails and downloads

  • We keep a copy of each email we send, with its text but without its sign-in or reset links, for 90 days, to check what was sent.
  • Our plugins download updates and files such as emoji, stickers and pictures from api.wordplus.cloud. We log each download with the file, the site address and plugin version the request names, and the page it was loaded from, for 90 days.

Why we use it

  • To provide your account, the services and licences you bought, and support (performance of a contract).
  • To make our plugins work better on the sites that use them, and to email the administrators who opted in, with their consent, which they can withdraw at any time.
  • To check licences, keep the history of our customers and sites, help you through your account, and keep the service secure and free of abuse (our legitimate interests).
  • To send emails the service needs, such as address verification, password resets and notices about your sites.
  • To keep records required by tax and accounting law (legal obligation).

We do not sell personal data, and we do not use it for advertising.

Cookies

Reading this site and buying from its pricing page set no cookies. When you sign in, create an account, connect a site or buy from a plugin's settings, we set one session cookie that keeps you signed in or carries the purchase back to your site, and, if you choose to stay signed in, a cookie that remembers you. They are strictly necessary for what you asked for, so they need no consent. We use no analytics or advertising cookies. The Freemius checkout sets its own cookies when you open it to pay. For a subscription Paddle sold, Paddle's form opens in your account, or on the page Paddle's emails about a failed renewal open, when you change its card, and sets its own cookies.

Who we share it with

  • Freemius, Inc. (United States), our reseller and merchant of record, for payments, tax and invoices, under its own privacy policy. It also keeps what it collected for us before (above).
  • Paddle.com Market Limited (United Kingdom), or the Paddle company for your country, the merchant of record for the subscriptions it sold before 19 October 2026, for their payments, tax and invoices, under its own privacy notice.
  • OVHcloud, which hosts our main servers in Germany and France, and our media servers for group calls and live streams.
  • Amazon Web Services (Frankfurt, Germany), which sends our emails.
  • Anthropic, PBC (United States), for the AI assistant in our plugins.
  • Google LLC and Apple Inc. (United States), which deliver pushes to mobile apps built with our app builder.

Apart from Freemius and Paddle, each of them processes the data only to provide its service to us, under its data processing terms. The full list of who processes the data of your site's users is in the data processing agreement.

Where your data is

Our main servers, which hold the data, are in the European Union, in Germany and France. Group calls and live streams run on media servers in several regions, nearer their participants, which relay audio and video and hold no data. We operate from Ukraine, which has no adequacy decision of the European Commission, and run the service from there. Providers in the United States receive personal data from the European Economic Area under the European Commission's standard contractual clauses, or the EU-U.S. Data Privacy Framework where they are certified under it.

How long we keep it

  • Account and site details: while your account exists, and deleted with it.
  • Purchases, licences and our history from Freemius: kept as the history of our customers and sites, and deleted when you ask, except what tax law requires us to keep.
  • Support conversations: kept so we can follow up on earlier problems, and deleted when you ask.
  • Server logs: up to 30 days. Copies of the emails we send, and the log of downloads: 90 days.
  • Usage data: while the plugin's opt-in lasts, or a paid build's licence, and erased when you opt out or the licence ends, except a count that the plugin stopped sharing, with its version. Deactivation answers: up to three years.
  • Questions to the AI assistant, with their answers: 12 months.
  • Texts and recordings for Cloud AI: no longer than 30 minutes.

Your rights

You can access, correct, export or delete your personal data, object to or restrict its use, and withdraw a consent at any time. Most of this you can do in your account's settings and on your Plugins screen. Deleting your account in its settings deletes it. To have everything erased, our history from Freemius included, email us, and we will also ask Freemius to delete its copy. What Paddle keeps as the seller of a purchase is handled under its own privacy notice, and we pass on a request you send us about it. We answer within a month. You can also complain to the data protection authority where you live.

Changes

We will update this page when our practices change, and tell you by email about significant changes.