Privacy Policy

Last updated: 2026-05-12

1. Who we are

SemanticWP is operated by Espresso Translations (info@traqworx.com), with a registered address provided on request. We act as a data controller for the account data described below and a data processor for the WordPress content you authorize us to read, modify, or create on your behalf.

2. What we collect

When you sign up and use SemanticWP we store:

Account data: email, hashed password, plan, subscription status, trial period, credit ledger entries. Stored in Supabase (EU region).
Site connection data: the WordPress URL you connect, the username you provide, and an application password encrypted at rest with AES-256-GCM. The encryption key is held in our server environment and never sent to your browser.
Site context: the source context, central entity, monetization type you enter during setup.
Snapshots: per-page content snapshots fetched from your WordPress site so we can audit, generate fixes, and roll back changes.
Audit and edit history: 14-rule audit outputs, generated edits, applied status, backups of pre-change content.
Google OAuth tokens (optional, only if you connect GSC): a refresh token and short-lived access token, both encrypted, scoped to webmasters.readonly + indexing + openid email. We use these only to read Search Console performance metrics and submit URL indexing notifications.
Payment data: handled by Stripe. We store your Stripe customer ID and subscription status; card details never touch our servers.

3. How we use it

To deliver the auditing, optimization, content creation, and indexing automations you configure.
To track credit balance and bill via Stripe.
To send transactional emails (signup confirmation, password reset, daily automation reports if you enable them).
To improve product quality (aggregate, anonymized usage signals only — never raw page content).

We do not sell your data, use it to train external models, or share it with third parties beyond the named processors below.

4. Sub-processors

Supabase (database, auth, storage) — EU.
Anthropic (Claude API for audits, content generation) — processes content snapshots transiently; no training on inputs.
Stripe (payments).
Google (Search Console + Indexing APIs, only if you connect GSC).
DataForSEO (SERP + keyword volume data).
Firecrawl (competitor page scrape).
Vercel (hosting).

5. Google API user data — limited use

SemanticWP's use of information received from Google APIs adheres to Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide the connected features (Search Console metrics, daily URL indexing notifications). We do not transfer this data to others except as required by law, do not use it for advertising, and do not allow humans to read it except for support cases initiated by you, security investigations, or as required by law.

6. Retention

Account data is kept as long as your account exists. Audit history, edits, and backups are retained for the lifetime of the connected site so rollback remains possible. On account deletion we purge all your records within 30 days. Stripe retains its own records per its terms.

7. Your rights (GDPR)

If you're in the EU/UK you have rights to access, correct, export, restrict, and erase your personal data. Email info@traqworx.com and we'll respond within 30 days. You can also disconnect Google at any time at myaccount.google.com/permissions.

8. Security

WordPress app passwords and Google refresh tokens are encrypted at rest. Row-Level Security policies prevent cross-account data access at the database layer. All traffic is TLS. Stripe handles payment-card data in a PCI-DSS Level 1 environment.

9. Cookies

We use a Supabase-managed session cookie to keep you logged in. We don't use third-party tracking cookies or advertising pixels.

10. Changes

We'll post material changes here and email account holders.

11. Contact

Questions, requests, or breach reports: info@traqworx.com.