Who we are
aiplugingenerator.com ("we", "us") turns a WordPress, WooCommerce or Shopify site into a plugin for AI assistants. For the personal data described here we are the controller. Questions go to custom@aiplugingenerator.com.
What we collect
- Your account. Your name and email address, and your profile picture and account ID from Google if you sign in with Google. If you use a password, we store only a salted hash of it, never the password itself.
- Sign-in security. One-time codes (stored only as hashes and deleted after use or expiry), failed sign-in counts, browsers you chose to remember, and the IP address of each code request, to stop abuse.
- Your sites. The address, platform and name of each site you add, and the plugins it reports.
- Access to your sites. The keys or tokens your site issues when you approve access. They are encrypted before they are stored and only decrypted to carry out a request you or your plugin makes.
- Your plugins. The tools you chose, the listing text, icons and settings.
- Your team. Names and email addresses of people you give access to a plugin.
- Activity. For each tool call: the tool, the AI app that made it, what it acted on, the outcome and the time. Not the content of your conversations.
- Billing. Your PayPal subscription ID, status, currency, amount and renewal dates. We never see your card or bank details.
- Cookie choices. A random ID and the choice you made, with the date. No IP address.
Why we use it
- To provide the service you signed up for: signing you in, connecting your site, building and running your plugins (contract).
- To take payment and keep billing records (contract and legal obligation).
- To keep the service secure and to investigate abuse (legitimate interest).
- For one-tap sign-in, only if you allow it in cookie settings (consent).
We don't sell your data, use it for advertising, or use your site's data to train AI models.
Who else processes it
- Cloudflare hosts the app, the database and your plugins.
- Namecheap hosts our mailbox and delivers our sign-in and verification emails.
- Tawk.to provides our live chat. If you start a chat, your messages and the details you give go to Tawk.to so we can reply.
- Google handles sign-in with Google. When a plugin is built, your site's name, address and chosen tools are sent to Google's Gemini API to draft the listing text.
- PayPal takes payments under its own privacy statement.
- The AI apps you connect (such as ChatGPT, Claude, Gemini or Meta AI) receive the results of the tools you switch on, when you or your team use them. Their own privacy policies apply to that data.
These providers may process data outside your country. Where the law requires it, transfers rely on the providers' standard contractual safeguards.
How long we keep it
For as long as your account exists. Deleting your account erases your account, sites, stored keys, plugins, teams, activity and subscription records straight away. PayPal keeps its own payment records as the law requires. Cookie choice records are kept without your account link for up to three years as proof of consent.
Your rights
You can see, correct, export or delete your data, object to or restrict how we use it, and withdraw consent at any time. Delete your account from Account, or email custom@aiplugingenerator.com for anything else. We reply within 30 days. You can also complain to your local data protection authority.
Security
Site keys are encrypted at rest, every connection uses HTTPS, plugins only carry the tools you chose, and actions that change data ask for confirmation first. You can revoke our access from your own site's admin at any time.
Children
The service is for businesses and isn't directed at anyone under 16.
Changes
We'll post changes here with a new date, and email you about significant ones.