Privacy policy

Webenova, Almada, Portugal, is the data controller for wpsitekept.com. This policy explains what we collect, why, and what you can ask us to do about it.

What we collect

• Order details: name, email, billing country and the plan you bought. Payments are processed by Stripe; we never see or store your card number.
• Onboarding details: your website address, hosting provider, contact details and the access you give us.
• Operational data: update logs, backup records, scan results and support messages relating to your site.
• Usage data: basic, aggregated analytics about visits to this website.

Credentials

Access credentials are moved into an encrypted password vault with access logging, and removed from the submission record. They are used only to perform the service, are never shared outside our team, and are revoked when your plan ends.

Why we process it

To provide the service you purchased (contract), to meet accounting and tax obligations (legal obligation), and to keep our own service secure (legitimate interest).

Who we share it with

Stripe for payments, Resend for transactional email, Supabase for our database, Vercel for hosting, and the site management and backup tools we use to deliver the service. Each acts as a processor under contract. We do not sell data and we do not share it for advertising.

How long we keep it

Order and invoice records for as long as tax law requires. Operational records and backups for the duration of your plan and 30 days after. Credentials until your plan ends, then deleted.

Your rights

Under the GDPR you can ask for a copy of your data, correction, deletion, restriction, or portability, and you can object to processing based on legitimate interest. Write to support@wpsitekept.com and we will answer within 30 days. You can also complain to the CNPD in Portugal or your local supervisory authority.

Cookies

This site uses only what is needed to run: a session cookie during checkout, set by Stripe. If we add analytics or advertising cookies, this page will be updated and you will be asked for consent first.