Privacy
Last updated 8 October 2026.
A plain-English summary of the commitments we operate by. For the full formal legal-review text, email hello@wpclienthub.com.
Who we are
WPClientHub is operated by ThirteenBytes (thirteenbytes.com). “We” on this page means ThirteenBytes.
Where your data is hosted
WPClientHub runs on a virtual server hosted by Hostinger in Mumbai, India. Our database and its encrypted backups are stored there. If you are outside India, using WPClientHub means your account data is stored in India and processed by the providers listed below.
What we collect
- Your account: names, email addresses and your organization’s details, plus the people you invite.
- Your sites: the metadata WPClientHub One syncs (versions, update status, health signals, uptime and performance results, security findings) and the activity-log entries it records, including who made each change, their IP address and the browser they used.
- Your clients: client contacts, and help-desk requests, replies and attachments from you and your clients.
- If you use these features: WordPress user lists from your sites (logins, emails, roles and last sign-in, never passwords) for WordPress user management; entries submitted through forms on your clients’ sites (Forms, Agency and above), which can contain those visitors’ personal details; and Search Console data when you connect it.
- Standard service logs.
Client billing data lives in your Stripe account. We mirror invoice references; Stripe holds the payment details.
What we deliberately don’t hold
- Backup payloads. Archives are written on the client’s own server and copied to storage you choose. We store manifests and checksums only.
- WordPress passwords. Sites are managed with per-site signing keys, not passwords, so there is no WordPress password to leak. How those keys are protected, and what a breach would mean, is on Security & data.
- Your clients’ card numbers. Those never leave Stripe.
Sub-processors
These companies process data for us to run WPClientHub:
| Provider | What for, and what it receives |
|---|---|
| Hostinger | Hosting: the server in Mumbai, India that runs WPClientHub and stores its database and backups. Email delivery: account, alert and client emails are sent through Hostinger’s mail servers. |
| Anthropic | AI features: help-desk diagnosis, Ask AI, AI drafts, help-panel and website chat answers, and AI Visibility. |
| OpenAI and Google (Gemini) | AI Visibility: what each assistant says about a business, and how its answers compare. |
| Google PageSpeed Insights | Performance checks: receives each connected site’s public address. |
| Google Search Console | Only if you connect it: read-only search data for the properties you choose. |
| Paddle | Merchant of record for WPClientHub subscriptions and AI credit top-ups: checkout, invoices and payment details. |
| Stripe | Only if you connect your own Stripe account for client billing. It is your account and your processor; we call it with the restricted key you give us. |
| WPVulnerability (wpvulnerability.net) | Vulnerability data: receives plugin and theme names and WordPress versions, never site addresses or personal data. |
| Browser push services (Apple, Google, Mozilla) | Only if you turn on push notifications: they deliver the alert, encrypted so only your device can read it. |
Services you connect yourself — backup storage, Cloudflare, Slack, Zapier or webhook endpoints — receive data because you point WPClientHub at them; they work under your own agreement with them. We update this list when a provider is added or changes.
AI features
Some features send data to the AI providers above to produce an answer, and the result is stored with the request:
- Help-desk diagnosis runs automatically when a request is filed: a client’s request through the portal, or one your team creates with diagnosis on. The request and the site facts needed to diagnose it are sent. Each run spends an AI credit.
- Ask AI on a security, SEO or AI Visibility finding, AI drafts of SEO titles and descriptions, and deep answers in the help panel run only when someone clicks, one credit each.
- Help-panel and website chat questions are answered by a model from our documentation: the question and the matching docs passages are sent.
- AI Visibility scans run on a schedule for every connected site (weekly on Free, nightly on paid plans, with the AI assistants asked again at most once a week). A model reads the site’s public pages, and the assistants are asked what they know about the business, with no other site data.
We don’t use your data to train AI models. Requests go to each provider’s API, not its consumer chat app, under that provider’s API terms.
What we never do
No selling data, no advertising use, and no reading more than the product needs.
This website
This website runs no analytics or advertising trackers. It loads fonts from Google Fonts, and a video loads from YouTube (youtube-nocookie.com) only when you press play. If you send the contact form, it includes the page you landed on, the referrer and any campaign tags, kept in your browser’s session storage until then. Questions you type into the website chat are sent to our server and answered from our documentation by an AI model.
Questions or deletion requests
Email hello@wpclienthub.com — a human answers, and account deletion removes your organization’s data from our systems. Your backups are unaffected, because they were never ours to hold.