Data and privacy

What OctoPress stores#

Everything lives in your WordPress database:

• Chats, messages and runs, including images you attach.
• Projects and their instructions.
• Provider settings and encrypted provider credentials.
• Agents, tool settings, skill settings and extension settings.
• With Pro: schedules, schedule runs and licence status.

Your appearance choices are saved in your WordPress user profile.

There is no OctoPress cloud service in the chat path. Chats do not pass through OctoPress servers.

What is sent to your AI provider#

When you send a message, OctoPress sends the provider you chose the conversation, the instructions for the selected agent, the list of tools Octo may use, tool results (for example post titles Octo looked up) and images you attached. Which data leaves your site therefore depends on what you ask Octo to look at. Read your provider's terms and privacy policy.

Do not paste passwords, API keys or customer data into chats or project instructions.

Credentials#

API keys and sign-in tokens are stored on the server, encrypted, and are never returned to the browser. After you save a key the box stays empty ("Leave blank to keep existing key").

Uninstall behavior#

By default, deleting the plugin keeps your OctoPress data, so reinstalling restores it.

To remove everything when the plugin is deleted:

1. Go to Settings → Data Control.
2. Switch on Delete OctoPress data on uninstall: "Remove OctoPress chats, messages, runs, provider configuration, encrypted secrets, approvals, skills, and settings when the plugin is uninstalled."
3. Click Save.
4. Deactivate and delete the plugin from Plugins.

Things Octo created in WordPress itself, such as posts, pages, media and files, are not removed. Neither are your per-user appearance preferences.

Deleting individual chats#

Use Chat actions → Delete in the chat list to delete a chat permanently. Archive only hides a chat from the list. See Chat workspace.

Site Health and your privacy policy#

OctoPress adds a check to Tools → Site Health that warns when your PHP time limit is too short for long model responses. It also adds suggested wording about OctoPress to the privacy policy guide in Settings → Privacy, for you to review and adapt.