Last updated: September 22, 2026
This Privacy Policy explains how WP Triage ("we", "us", "our") collects, uses, and safeguards information when you use our website and service (the "Service"). By using the Service you agree to the practices described here.
Who we are
WP Triage (wptriage.app) is operated by Mike Beck, an independent developer based in Whanganui, New Zealand. Questions about this policy can be sent to [email protected].
Information we collect
- Account information. Your name, email address, and authentication credentials when you create an account.
- Billing information. Subscription and payment details are processed by our payment provider, Stripe. We do not store full card numbers on our servers.
- WordPress site metadata. When you connect a site, our plugin reports technical metadata — installed plugin and theme names and versions, WordPress core version, and PHP version. We do not collect your site's content, customer data, or database contents.
- Usage data. Standard log data such as IP address, browser type, and pages visited, used to operate and secure the Service.
- Live chat. If you use the chat widget, Tawk.to collects the messages you send and technical data such as IP address and browser details so we can respond. When you are signed in we may pass your name and email to Tawk.to so the conversation is associated with your account.
How we use information
- To provide risk scoring, vulnerability matching, and prioritisation for your connected sites.
- To send service communications, including critical alerts and weekly summaries you have enabled.
- To process payments and manage your subscription.
- To maintain the security, integrity, and performance of the Service.
How we share information
We do not sell your personal information. We share data only with service providers who help us operate the Service (for example, payment processing, email delivery, and live chat via Tawk.to), and where required by law.
Data retention
We retain account and site data for as long as your account is active. You may delete sites at any time, and you can request deletion of your account by contacting us. Backups are purged on a rolling basis.
Security
All data is transmitted over encrypted connections (TLS). Connection and ingest tokens are stored as hashes. For more detail, see our Security page.
Your rights
Depending on your jurisdiction, you may have rights to access, correct, export, or delete your personal data. To exercise these rights, contact us at [email protected].
Changes to this policy
We may update this policy from time to time. Material changes will be reflected by the "last updated" date above.
Contact
Questions about this policy can be sent to [email protected].