Privacy Policy

OctoPress is a WordPress-hosted AI workspace for site administrators. This Privacy Policy explains how the OctoPress website and the OctoPress plugin collect, use, disclose, and safeguard your information. By using our website or the OctoPress plugin, you agree to the data practices described in this policy.

Who We Are

Our website is https://octopress.ai. OctoPress is developed by Nazmul Alam. Throughout this policy, “OctoPress,” “we,” “us,” and “our” refer to the OctoPress plugin and its developers.

Information Collected by This Website

When you visit this website, our web server may process standard technical information such as your IP address, browser type, requested pages, referring page, and request timestamps. This information is used for site security, troubleshooting, and basic operation.

If this website offers comments, contact forms, downloads, newsletter signup, account login, or support features in the future, we may process the information you submit through those features so we can provide the requested service.

Cookies

This website may use standard WordPress cookies for login, administration, comments, and security. If analytics, embedded media, or third-party services are added later, those services may set their own cookies according to their own policies.

Purchases and Payment Processing

When you purchase a premium license for the OctoPress plugin, all payment transactions are processed through Paddle, our authorized third-party payment provider. We do not collect, store, or have access to your full payment card details or financial account numbers.

Through Paddle’s merchant services, we receive the following order information:

• Your name and email address
• Order details including purchase date, license tier, and transaction amount
• License key assignment and activation status

We use this information solely to provision your license, deliver product updates, provide customer support, and manage your account. Paddle processes your payment data in accordance with their own Privacy Policy and Terms of Service. We encourage you to review Paddle’s policies before completing a purchase.

How the OctoPress Plugin Handles Data

OctoPress runs inside your WordPress admin area. The plugin stores operational data in your own WordPress database, including provider configuration, encrypted provider secrets, chats, messages, runs, settings, agent profiles, tool settings, skill settings, extension settings, and related workflow state.

OctoPress does not include an AI model. An administrator must configure an external AI provider before chat and agent workflows can run. Depending on the workflow, OctoPress may send prompts, chat messages, selected WordPress content, tool context, model names, provider metadata, and generated responses to the AI provider selected by the administrator.

Provider API keys and OAuth credentials are stored server-side in WordPress and are not returned to normal browser-facing REST responses. Site owners are responsible for choosing providers, reviewing provider terms, and deciding what data should be sent to those providers.

External AI Providers

Built-in provider options include OpenAI services. You can review OpenAI’s policies here:

• OpenAI Terms of Use
• OpenAI Privacy Policy

OctoPress also supports custom OpenAI-compatible endpoints. If you configure a custom provider, that provider receives the request data for the models you use. Review that provider’s terms, privacy policy, and data handling practices before connecting it.

Content and Tool Actions

OctoPress can read or update WordPress content only through enabled tools, agent profiles, and permissions. Approval-gated actions require confirmation unless a chat has been configured for auto approval. Site administrators remain responsible for reviewing AI-generated content and changes before publishing or approving them.

Data Retention

Data stored by the plugin remains in your WordPress database until it is deleted by a site administrator, removed by plugin cleanup tools, or removed during normal WordPress database management. External providers may retain submitted data according to their own terms and privacy policies.

For premium license customers, we retain your order information (name, email, purchase history, and license key) for as long as your license is active and for a reasonable period thereafter for accounting, legal, and support purposes. If you wish to have your customer data removed, please contact us and we will accommodate your request to the extent permitted by applicable law.

Security

OctoPress uses WordPress permissions and server-side credential storage to limit access to sensitive settings and workflow data. No system can be guaranteed completely secure, so site owners should keep WordPress, OctoPress, themes, plugins, and server software up to date.

Your Choices

Site owners can control which providers, models, tools, agents, skills, and extensions are enabled. You can avoid sending data to an AI provider by not configuring a provider, disabling provider access, or not using chat and agent workflows.

International Data Transfers

OctoPress is operated from the United States. If you are located outside the United States and choose to use our website or plugin, your information may be transferred to, stored, and processed in the United States or other jurisdictions where our external service providers (including Paddle and AI providers) operate. By using our services, you consent to such transfer and processing.

Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: You may request a copy of the personal data we hold about you.
• Correction: You may request that we correct inaccurate or incomplete personal data.
• Deletion: You may request that we delete your personal data, subject to legal retention obligations.
• Portability: Where applicable, you may request your data in a structured, commonly used format.
• Objection: You may object to the processing of your personal data in certain circumstances.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within the timeframe required by applicable law. We will not discriminate against you for exercising your privacy rights.

Children’s Privacy

OctoPress is intended for WordPress site administrators and is not directed to children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.

Changes to This Policy

We may update this Privacy Policy from time to time as OctoPress evolves. Material changes will be communicated by updating the “Last Updated” date shown on this page and, where appropriate, by email notification to active license holders. Your continued use of the website or plugin after changes are posted constitutes your acceptance of the revised policy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: [email protected]