Legal
Last updated: October 2026
WP Agent (“we”, “us”) operates the getwpagent.com website and the WP Agent MCP service at mcp.getwpagent.com. This policy explains what we collect, why, and what we never do with it.
When you sign in through Claude, ChatGPT, or another MCP client, we create an account with your email address and, where provided by your sign-in method, your name. There is no separate registration form.
Connecting a WordPress site issues a WordPress Application Password scoped to WP Agent. We store it encrypted at rest and use it solely to perform the actions you request through your assistant. We never receive or store your WordPress account password.
The Application Password's name in WordPress includes your account email in a shortened form (its first two letters and its domain, for example de…@example.com), so that WordPress's approval screen shows which account the site will join. Other administrators of your site can see that name.
We process the content your assistant sends through WP Agent tools (post text, images, SEO fields) in order to apply it to your site, and we keep operational records — which tools were called, when, and whether they succeeded — for support, quota accounting, and abuse prevention. We do not use your site content to train AI models.
Payments are processed by Lemon Squeezy (our merchant of record). We receive order and subscription status, never your card details.
We rely on a small number of processors to run the service: hosting infrastructure, Lemon Squeezy (payments) and Mailgun (transactional email, sent from servers in the United States). Each receives only what is needed for its function.
Unsplash, for stock-photo search: our server sends it only the search words and, when you add one of its photos, a download notice, as Unsplash requires. We send it nothing that identifies you (no name, email, account or IP address), so avoid putting personal details in a photo search.
Email sent to our support address is forwarded to, read and answered from Gmail (Google LLC), with AI assistance from Anthropic in reading it and drafting replies.
When one of our service providers processes personal data outside the European Economic Area or the United Kingdom, the transfer is covered by the European Commission's Standard Contractual Clauses and, for UK data, the UK International Data Transfer Addendum, where they are part of that provider's data processing agreement (as with Mailgun, our email provider, in the United States).
We send transactional and lifecycle email (welcome, connection status, receipts, usage notices). Every non-essential email includes a one-click unsubscribe, and opting out is permanent for that category.
The getwpagent.com marketing pages have no tracking pixels and set no advertising cookies. The /account portal has a sign-in (email and password, Google, or GitHub). Fonts are served by Google Fonts, which receives your IP address as a technical necessity when loading them.
If you choose a language, your browser remembers that choice (in its local storage) so the site opens in that language next time. It stays on your device and is not sent to us or anyone else.
Disconnecting a site deletes its stored credential. To delete your account and associated data, email support@getwpagent.com from your account address — we complete deletion requests within 30 days, except records we must keep for tax or legal compliance.
Depending on where you live (including under GDPR), you may have rights to access, correct, export, or erase your personal data. Write to support@getwpagent.com and we will honor them.
WP Agent is a tool for running WordPress sites and is not directed to children. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us personal data, write to support@getwpagent.com and we will delete it.
If we change this policy, we update the date at the top of this page.
Questions? Contact us.