Privacy Policy

Last updated: January 2025

Overview

fix-wp.com takes your privacy seriously. This policy explains what data we collect, how we use it, and how we protect it.

Data We Collect

SSH Credentials (Temporary)

  • SSH hostname/IP address
  • SSH username
  • SSH password or private key

Retention: Encrypted at rest, automatically deleted within 2 hours or immediately after job completion - whichever comes first.

Site Information

  • WordPress site URL
  • Problem description you provide
  • Screenshots of your site (before/after repair)

Retention: Screenshots retained for 30 days for your records, then deleted.

Payment Information

  • Processed securely by Stripe
  • We do not store credit card numbers
  • We receive only: payment status, transaction ID, email (if provided)

Technical Data

  • IP address (for rate limiting and abuse prevention)
  • Browser type and version
  • Pages visited and timestamps

Retention: 90 days for security logs.

How We Use Your Data

  • Service delivery: SSH credentials used solely to perform the repair you requested
  • Verification: Screenshots prove the repair was successful
  • Communication: Email (if provided) for job status updates
  • Security: IP logging to prevent abuse and fraud

Data Security

  • Encryption: All credentials encrypted with AES-128 (Fernet symmetric encryption)
  • Transport: All connections use TLS 1.3
  • Isolation: Each repair job runs in isolation
  • Auto-deletion: Credentials deleted programmatically after use
  • No logging: Credentials never written to application logs

Third-Party Services

We use the following third-party services:

Your Rights

You have the right to:

  • Access: Request a copy of data we hold about you
  • Deletion: Request deletion of your data (credentials auto-delete anyway)
  • Portability: Request your data in a machine-readable format
  • Object: Object to processing for marketing purposes (we don't do marketing)

Contact [email protected] to exercise these rights.

Cookies

We use minimal cookies:

  • Session cookies: Required for form submissions (CSRF protection)
  • No tracking cookies: We do not use analytics or advertising cookies

Children's Privacy

Our service is not intended for users under 18 years of age. We do not knowingly collect data from children.

Changes to This Policy

We may update this policy periodically. Material changes will be noted with a new "Last updated" date.

Contact

For privacy questions: [email protected]