Privacy Policy

1. Who we are

WPValet is a WordPress care service operated by Vincere. Our registered contact email is care@wpvalet.co and our website is wpvalet.co.

When we say “we”, “us”, or “WPValet” in this policy, we mean the team behind wpvalet.co. When we say “you” or “client”, we mean anyone who uses our website or subscribes to one of our care plans.

2. What information we collect

Information you give us

When you fill in our contact form or sign up for a care plan, we collect:

• Your name and email address
• Your website URL
• Your billing information (processed securely by Stripe — we never see or store your full card details)
• Any messages or requests you send us via email

Information we collect to do our job

To manage your WordPress site, we need access to:

• Your WordPress admin credentials
• Your hosting or cPanel access

These credentials are stored in an encrypted password vault (Bitwarden or 1Password) and are never shared outside our team or stored in plain text, email, or spreadsheets.

Information collected automatically

Our website may collect standard analytics data such as page visits, browser type, and general location (country/city level). We use this only to understand how our site is being used — not to identify individuals.

3. How we use your information

We use your information to:

• Deliver your WordPress care plan — updates, backups, monitoring, and edit requests
• Send you monthly activity reports and billing confirmations
• Respond to your questions and support requests
• Process payments securely via Stripe
• Improve how we run the service based on how it’s being used

We do not use your information for advertising, we do not sell it to third parties, and we do not share it with anyone outside our team except where required to deliver the service (e.g. Stripe for payments).

4. How we store and protect your data

We take data security seriously:

• All website credentials are stored in an encrypted vault with team-level access only
• Email communication is handled through Google Workspace, which is encrypted in transit
• Payments are handled entirely by Stripe — we never store card numbers or bank details
• We do not store sensitive information in spreadsheets, personal email, or messaging apps

We retain your information for as long as you are a client. If you cancel your plan, we will retain basic records for up to 12 months in case you return, then delete them. You can request earlier deletion at any time — see Section 7.

5. Third-party services we use

To run WPValet, we use the following third-party tools:

• Stripe — payment processing. Stripe’s privacy policy applies to all payment data: stripe.com/privacy
• MainWP — WordPress site management dashboard (self-hosted)
• Google Workspace — email and internal communication
• Bitwarden / 1Password — secure credential storage

Each of these services has its own privacy policy governing how they handle data. We choose tools with strong privacy and security practices.

6. Cookies

Our website uses minimal cookies — only what is necessary to make the site function. We do not use advertising cookies or sell cookie data. If we add any analytics or tracking in future, we will update this policy and notify existing clients.

7. Your rights

You have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — ask us to correct any inaccurate information
• Deletion — ask us to delete your personal data (subject to any legal obligations we have to retain records)
• Portability — request your data in a portable format
• Objection — object to how we process your data in certain circumstances

To exercise any of these rights, email us at care@wpvalet.co. We will respond within 30 days.

8. Changes to this policy

If we make significant changes to this privacy policy, we will notify active clients by email before the changes take effect. The “last updated” date at the top of this page will always reflect the most recent version.