Under GDPR, CCPA, and other applicable privacy laws, you have the right to request access to — or deletion of — your personal data. We process all verified requests within 30 days.
1 Your Rights
You may ask us to confirm what personal data we hold about you, correct inaccuracies, delete data we no longer need to keep, or provide a copy of it in a portable format. You may also object to certain processing. We will verify your identity before acting on any request.
2 What We Can Remove
- Marketing list entries and email subscriptions.
- Support conversation history and attachments.
- Analytics profiles tied to your browsing sessions.
3 What We Must Retain
Some records must be kept to meet legal obligations and cannot be deleted on request:
- Purchase and invoice records (retained for up to seven years for tax and accounting).
- Data needed to process an active license or refund.
- Records required for fraud prevention and security.
4 Data On Your Server
WPilot AI plugins run on your own WordPress installation. The store, order, customer, and media data inside your site is controlled by you and stored on your server — not by us. For that data, you are the data controller, and requests from your customers should be handled within your own WordPress admin.
5 Sub-Processors
To operate our service we rely on a small set of trusted providers, including our payment processor, email delivery provider, and analytics provider. Where you enable AI features and connect your own keys, the relevant AI providers (such as Anthropic, OpenAI, Google, Replicate, or FAL AI) act as processors for that specific data under their own terms.
6 Submit a Request
To make a data access or deletion request, email support@pixalab.ai with the subject line "Data Request" and the email address associated with your purchase — or open a ticket at our support portal. We'll verify your identity and respond within 30 days.