Last updated: March 2026

WPSentry ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

1. Information We Collect

Information You Provide

Account data: When you create an account, we collect your email address, display name, and password (stored securely as a hash).
Payment data: If you subscribe to a paid plan, payment processing is handled by Stripe. We do not store your credit card details — Stripe retains this data under their own Privacy Policy.
Contact submissions: If you contact us through our contact form, we collect your name, email, and message content.

Information Collected Automatically

Scan data: URLs you submit for scanning, scan results, and security findings.
Usage data: Pages visited, features used, scan frequency, and interaction patterns.
Device data: Browser type, operating system, IP address, and general location (country/region level).
Cookies: We use cookies for authentication and session management. See our Cookie Policy for details.

2. How We Use Your Information

Provide, maintain, and improve our security scanning services
Process transactions and manage your subscription
Send scan results, alerts, and email reports you have requested
Respond to your inquiries and provide customer support
Monitor and analyze usage trends to improve user experience
Detect, prevent, and address technical issues or abuse
Enforce our Terms of Service

3. Data Retention

Account data: Retained as long as your account is active. You can request deletion at any time.
Scan history: Retained based on your plan (7 days for Free, 90 days for Pro, unlimited for Enterprise). You can delete individual scan records from your dashboard.
Contact submissions: Retained for up to 12 months, then deleted.

4. Data Sharing

We do not sell, rent, or trade your personal information. We may share data only in these circumstances:

Service providers: We use Stripe for payment processing. They receive only the data necessary to process transactions.
Legal requirements: We may disclose information if required by law, court order, or governmental authority.
Protection of rights: We may disclose information to protect our rights, safety, or property, or that of our users.

5. Data Security

We implement industry-standard security measures including encryption in transit (TLS/HTTPS) and at rest, secure password hashing (bcrypt), regular security audits, and access controls. No method of transmission or storage is 100% secure — we strive to protect your information but cannot guarantee absolute security.

6. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal data, and to withdraw consent for optional processing. To exercise any of these rights, please contact us through our contact page.

7. Children's Privacy

Our service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date.

9. Contact Us

If you have questions about this Privacy Policy, please reach out through our contact page.