Legal
Privacy Policy
1. Who is responsible for your data
The controller of your personal data is:
Xseox Marketing Adam Kwiatkowski
ul. Lipowa 27, 55-040 Królikowice, Poland
NIP (VAT ID): 9730825516
Email: kontakt@xseox.pl · Product support: ai@wpoptima.com
We have not appointed a Data Protection Officer. In all matters concerning your data, write to the address above.
2. What we collect and why
2.1 Orders and invoices
When you buy a licence we process your name, email address, billing address and — for companies — your VAT ID, together with the order number and payment details supplied by the payment provider. We need this to perform the contract (Art. 6(1)(b) GDPR) and to meet our accounting and tax obligations (Art. 6(1)(c) GDPR).
2.2 Licence keys and activations
Our licence server stores your licence key, the email address it was issued to, the addresses of the sites where the key has been activated and the date of each activation. This lets us deliver the licence, let you check its status and protect the key against abuse (Art. 6(1)(b) and Art. 6(1)(f) GDPR).
2.3 Plugin telemetry
After installation and after each update, the plugin may send us a short technical report with no personal data in it: the site address and name, plugin version, WordPress, PHP and MySQL versions, web server, memory limit, active theme, number of active plugins, WooCommerce version, site language, the list of active modules, whether the licence is active, whether the site uses https, and the number of posts, products and user accounts. We use it to decide which versions and configurations to support (Art. 6(1)(f) GDPR).
No content of your posts, no passwords and no visitor data are ever sent. You can switch telemetry off in WpOptima → Settings → Usage analytics, and it stops immediately.
2.4 Free download and mailing list
To download the free version you give us an email address, and you may separately consent to receiving product news. We record the email, the time, the IP address and whether consent was given, so that we can prove it later. The mailing is based on your consent (Art. 6(1)(a) GDPR) and every message contains an unsubscribe link.
2.5 Server logs
Our hosting provider records standard access logs (IP address, time, requested address, browser). They serve security and diagnostics (Art. 6(1)(f) GDPR).
3. AI features and your content
All scoring, structured data generation and entity work run on your own server. Nothing is sent to us to produce a score.
The optional AI writing assistants are different: if you switch them on and supply your own API key, the text you choose to process is sent directly from your server to the provider you picked — Anthropic, OpenAI or Google. That transfer happens under your own agreement with that provider, and we are not a party to it. Those providers may process data outside the European Economic Area.
4. Who else sees your data
We share data only with suppliers who help us run the service, and only as far as needed:
- the hosting provider that runs wpoptima.com and the licence server;
- the payment providers that handle the transaction and hold the card details, which we never see — Stripe Payments Europe, Ltd. (Ireland) and, in the Polish shop, Paynow, the payment service of mBank S.A. (Poland);
- the email provider used to deliver licence keys and newsletters;
- our accountants, for invoices.
We do not sell personal data and we do not share it for anyone else's marketing.
5. How long we keep it
| Data | Retention period |
|---|---|
| Invoices and accounting records | 5 years from the end of the tax year, as required by law |
| Licence key and activation history | For as long as the licence exists, then up to 3 years for claims |
| Telemetry | Until you switch it off or the site stops reporting, then 24 months |
| Mailing list | Until you withdraw consent or unsubscribe |
| Server logs | Up to 12 months |
6. Your rights
You may ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or hand it over in a portable format. You may object to processing based on our legitimate interest, and you may withdraw consent at any time — withdrawing does not affect anything we did lawfully beforehand.
Write to kontakt@xseox.pl and we will answer within one month. If you believe we handled your data badly, you can complain to the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw.
7. Automated decisions
We do not profile you and we make no decisions about you by automated means.
8. Changes
If we change this policy we will update the date at the top and, for changes that affect you materially, tell subscribers by email.