Service operator
AI Readability & SEO is a hosted service provided by AIUNSEEN Studio. For privacy questions or deletion requests, contact info@aiunseenstudio.com.
Connection and authorization
Plugin activation alone sends nothing. Connecting sends the public website origin, a private site-scoped credential and a short-lived proof challenge over HTTPS. The service fetches a temporary public WordPress proof. We store a hash of the credential. The credential also remains in the site's WordPress database; protect that database and its backups. Network requests expose their source IP to the receiving service and infrastructure.
Audit information
When an administrator starts an audit, we fetch public pages and resources and process their public URLs, content, business facts, findings and generated files. The service retains installation identity, job references, dates, diagnostic events and credit/payment state. Do not submit private content or URLs that expose confidential information. The crawler does not request a WordPress password or log in to the target website.
AI processing
Paid review uses OpenAI for selected finding titles, numeric evidence identifiers, priorities and observation counts. The current review does not send raw page text, page URLs, WordPress credentials or payment details to the model. Response storage is disabled in our API request. This is not a promise of zero provider retention. OpenAI processes API data under its own applicable terms and data controls.
Payments and email
Purchases redirect to Stripe Checkout. Card details are entered at Stripe, not collected by the plugin or audit API. We process checkout/payment references, purchased tier and payment/refund/dispute state. Hosted completion email is optional. If an administrator selects it, enters a valid address and confirms that address on screen, the plugin sends it over HTTPS to the private hosted service. An empty field or unchecked option means no address is sent and no email is requested. We do not choose an account/admin fallback address or require inbox verification. Use an address you control or are authorized to notify; on-screen confirmation does not establish mailbox ownership. We send fixed ready/failed notices through our configured SMTP provider. Addresses are encrypted in the private notification queue and never included in public reports, generated files or AI requests. Live encrypted delivery payloads are cleared on accepted delivery, permanent failure or expiry. Site-scoped consent fingerprints, delivery/rate metadata and backups can remain; protect backups and contact support for deletion. Support correspondence and operational alerts are separate. Sender acceptance is not a guarantee of inbox delivery.
Retention
Free report payloads are available for 5 days after completion, paid reports for 30 days, and ZIP downloads for 7 days. Expired payload cleanup runs at startup and hourly. Diagnostic rows are pruned after 30 days. Installation, job and financial metadata, logs, backups and provider records do not automatically expire with those payloads. Downloaded files and WordPress publications are controlled by the site owner. Contact us to request deletion; legal/security obligations and financial records may require different treatment.
Security and your choices
Access to reports and downloads is site-scoped. Audit workers are isolated and resource limited. No online service is risk-free. Disconnecting stops local dashboard access but does not cancel hosted work, revoke the hosted credential, delete history, refund a purchase or remove published files. Contact support for hosted revocation/deletion; remove a local publication separately if needed. Backup copies are access restricted; a same-server backup is not protection against total server loss.