Privacy Policy

Pielyt (“Pielyt,” “we,” “us,” or “our”) provides a service that lets a WordPress site owner connect an AI assistant to their site so the assistant can propose changes that the owner reviews and approves before anything goes live. This Privacy Policy explains what information we collect, why we collect it, who we share it with, and the choices you have.

1. Information We Collect

We collect the following categories of information:

• Account information. When you create an account, we collect your name, email address, and password (hashed, not stored in plain text) through our authentication provider, Supabase Auth. If you sign in with a third-party identity provider, we receive the basic profile information that provider makes available to us.
• Site connection data. When you connect a WordPress site, we store connection credentials or tokens needed to communicate with your site, along with metadata about the site (such as its URL, plugin/theme inventory, and connection status) necessary to operate the service.
• Usage and audit logs. We log the actions proposed by connected AI assistants, the changes you review, and the approvals or rejections you make, along with timestamps and associated account and site identifiers, so you have a record of every change to your site and who or what proposed it.
• Payment data. Subscription payments are processed by our payment processor, Stripe. We do not store your full payment card number or bank details on our own servers. We retain limited billing metadata (such as subscription plan, seat count, and payment status) needed to administer your account.
• Email and communications data. We use Resend to send transactional email, such as account verification, password resets, billing notices, and alerts about proposed or approved changes to your site. This may include your email address and the content of the messages we send you.
• Technical and log data. Like most web services, we automatically collect limited technical information, such as IP address, browser type, and access timestamps, for security, debugging, and abuse-prevention purposes.

2. Why We Collect It

We use the information described above to:

• Create and secure your account and authenticate sign-ins;
• Connect your WordPress site to the AI assistant(s) you authorize, and relay proposed changes for your review;
• Maintain an accurate, tamper-evident record of what was proposed, what was approved, and what changed on your site — the audit trail that lets you undo a change;
• Process subscription billing and manage your plan and seats;
• Send you transactional and service-related communications;
• Detect, investigate, and prevent fraud, abuse, and security incidents; and
• Comply with our legal obligations.

We do not sell your personal information, and we do not use your data to serve you advertising.

3. Third-Party Service Providers

We rely on a small number of established service providers (“subprocessors”) to operate Pielyt. Each processes data on our behalf, under contractual terms that limit their use of it to providing services to us:

• Supabase — authentication and database hosting for account and application data.
• Stripe — payment processing and subscription billing. Stripe collects and stores your payment details directly; we do not.
• Resend — delivery of transactional email.
• Vercel — application hosting and content delivery.

We may update this list as our infrastructure evolves. Material changes will be reflected in an updated version of this policy.

4. Data Retention

We retain account and site connection data for as long as your account is active and for a reasonable period afterward to support account recovery and comply with legal obligations.

Usage and audit logs of agent proposals, approvals, and site changes are retained for an extended period beyond typical application logs, and we keep that history after a change has been approved or rejected, so it remains available for review, dispute resolution, and troubleshooting. If you delete your account, we will delete or anonymize your personal information within a reasonable period, except where we are required or permitted to retain it (for example, financial records or an audit history tied to a site still connected to another account).

5. Your Rights

Depending on where you live, you may have rights under laws such as the EU/UK General Data Protection Regulation (GDPR) or the California Consumer Privacy Act (CCPA) and similar state laws. These may include the right to:

• Access the personal information we hold about you;
• Correct inaccurate or incomplete information;
• Delete your personal information, subject to the retention exceptions described above;
• Object to or restrict certain processing, or request a portable copy of your data; and
• Not be discriminated against for exercising any of these rights.

To exercise any of these rights, contact us at privacy@pielyt.com. We will respond within the timeframe required by applicable law.

6. Cookies

We use a minimal set of cookies required to keep you signed in and to secure your session (for example, authentication tokens issued by Supabase Auth). We do not use advertising or cross-site tracking cookies, and we do not sell data collected through cookies. Disabling essential cookies in your browser may prevent you from signing in or using the service.

7. Children’s Privacy

Pielyt is a business tool intended for site owners, administrators, and teams. It is not directed at children, and we do not knowingly collect personal information from anyone under the age of 16. If you believe a child has provided us with personal information, contact us and we will delete it.

8. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the service before the changes take effect. The “Last updated” date at the top of this page reflects the most recent revision.

9. Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact us at privacy@pielyt.com.