Data Privacy Policy
Contents
- Controller and Contact
- Scope and Applicable Law
- Data We Process
- Hosting, Security and Delivery
- Google Analytics, Google Tag Manager and Cookies
- Google reCAPTCHA
- Newsletter
- Contact Forms and Support
- User Accounts and Godmode Connections
- AI Providers
- Payments and Future Stripe Checkout
- Processors, Recipients and International Transfers
- Retention
- Your Rights
- Changes to this Policy
1. Controller and Contact
The controller responsible for this website is WP Godmode, operated by Agenza GmbH in Switzerland.
Privacy contact address:
Agenza GmbH
Am Mattenhof 4a
6010 Kriens
Switzerland
hallo@agenza.ch
Data Protection Officer: Mike Wegmüller.
2. Scope and Applicable Law
This privacy policy applies to the website wpgodmode.com, related user accounts, the Godmode connection flow, support and contact channels, newsletters, analytics and future payment flows.
Where applicable, processing is assessed under the Swiss Federal Act on Data Protection (FADP) and, for visitors or users in the European Economic Area, the UK or similar jurisdictions, under the GDPR or corresponding local privacy laws.
The legal bases for processing may include performance of a contract, pre-contractual steps, consent, legitimate interests in operating and securing the website, compliance with legal duties, and, where required, consent for cookies, analytics, marketing communications or third-party integrations.
For account, billing, website, security and operational-logging data, Agenza acts as controller. Where Agenza processes customer content (including prompts, AI outputs and conversation history) on behalf of a business customer to deliver a requested task, Agenza acts as processor under a Data Processing Agreement that meets the requirements of Article 28 GDPR, available from hallo@agenza.ch.
3. Data We Process
Depending on how you use WP Godmode, we may process the following categories of data:
- Account data such as name, email address, login data, account status, selected plan and settings.
- Connection data such as the AI provider you connect, connection status, authorization information, tokens or identifiers required to maintain the connection, timestamps and technical logs.
- Prompt and interaction data such as the prompts, instructions, files and website content you submit through the Godmode plugin, the AI outputs returned, your conversation history with the AI, and related usage data and technical logs.
- Website and device data such as IP address, browser, operating system, referrer URL, pages visited, session information, cookie identifiers and consent choices.
- Communication data from contact forms, email, support requests or newsletter interactions.
- Payment and billing data when paid plans or Stripe Checkout are introduced.
- Security data such as server logs, failed login attempts, abuse-prevention signals and diagnostics.
Please do not submit special-category personal data unless strictly necessary for your request, and do not submit personal data without a valid lawful basis and any required consents and notices.
4. Hosting, Security and Delivery
The Godmode server and related WordPress infrastructure are hosted on Swiss hosting infrastructure provided by Hostfactory. Hostfactory may process server logs and technical data such as IP addresses, timestamps, requested URLs, user agents and error logs for hosting, security, maintenance and troubleshooting.
Cloudflare may be used for DNS, CDN, security, caching, DDoS protection, traffic routing and edge delivery. When Cloudflare is active, visitor requests may pass through Cloudflare infrastructure before reaching our server. Cloudflare may process IP addresses, request metadata, security signals and cookies or similar technologies required to provide these services. Cloudflare's privacy policy is available at cloudflare.com/privacypolicy.
The website also loads technical assets needed for its design and functionality, including WordPress, Breakdance, local Godmode scripts, locally hosted fonts, optimized media and selected CDN libraries such as cdnjs/Cloudflare-hosted GSAP and ScrollTrigger. These resources may involve the transmission of technical access data to the respective host or CDN endpoint.
ShortPixel Image Optimizer may be used to compress and optimize media files. If images are processed through ShortPixel, image files and technical metadata may be transmitted to ShortPixel for optimization.
6. Google reCAPTCHA
Google reCAPTCHA may be used to protect forms, logins and account-related workflows from spam, automated submissions and abuse. reCAPTCHA can process IP address, browser and device data, interaction data, referrer information, cookies and other signals required by Google to distinguish humans from automated traffic.
Use of reCAPTCHA is based on our legitimate interest in protecting the website, users and infrastructure from abuse, or on consent where legally required. Google privacy information is available at policies.google.com/privacy.
8. Contact Forms and Support
When you contact us through a form, by email or through support channels, we process the information you provide, such as name, email address, company, message content, attachments and technical metadata. We use this data to respond to your request, provide support, document communication and improve our services.
Contact form submissions may be protected by reCAPTCHA and may be stored in WordPress, transmitted by email, processed by support tools or retained in backups and server logs. Please do not include confidential third-party data unless it is necessary for your request.
9. User Accounts and Godmode Connections
WP Godmode provides user accounts. Users may leave personal data in their account, including email address, name, authentication data, account settings, plan information, support history and connection settings.
To connect a Godmode account with an AI provider, users initiate a connection flow with the relevant provider. During this process, account identifiers, authorization information, access tokens, connection status, timestamps and technical logs may be transmitted to and processed by the Godmode server hosted at Hostfactory in Switzerland. This processing is necessary to authenticate the user, maintain the connection, provide account functionality and troubleshoot connection issues.
When you use the Godmode plugin, your prompts, the related website content and files you submit, the AI outputs and your conversation history are transmitted to the selected AI provider for processing under your own provider account. This transmission is initiated from your WordPress site and may pass through, or be logged by, the Godmode server. Agenza may access, view, log and store these prompts, outputs and conversation history, together with connection metadata, in order to operate, support and secure the Service, to troubleshoot, and to prevent abuse and fraud.
We do not use this content to train AI models or for product-improvement analytics, except on an anonymised or aggregated basis or with your consent. Where we process this content on your behalf to deliver the task you requested, we act as your processor under a Data Processing Agreement (Article 28 GDPR); for our own operational, security and compliance logging we act as controller on the basis of contract performance, our legitimate interests in operating and securing the Service, and our legal obligations.
Access to this content within Agenza is limited to authorised personnel and vetted sub-processors who need it for the purposes above, under confidentiality and appropriate technical and organisational security measures. Users are responsible for ensuring that they have a lawful basis to send their own website data, customer data, content, prompts or files to Agenza or to any connected AI provider.
10. AI Providers
WP Godmode currently works with OpenAI and Anthropic as AI providers. Specific model names (such as the ChatGPT / Codex or Claude families) are illustrative and may change; the current list of supported providers and models is described in our Documentation. Additional or successor providers (for example Google Gemini) may be added in the future.
When you use an AI provider, the provider may process prompts, instructions, files, website content, output, account identifiers, usage data and technical metadata according to its own terms, privacy policy, enterprise settings and data retention controls. The privacy policy of the relevant provider applies to that provider's processing.
- OpenAI privacy information: openai.com/policies/eu-privacy-policy
- Anthropic privacy information: anthropic.com/legal/privacy
- Google privacy information, including Gemini-related Google services: policies.google.com/privacy
Provider settings may determine whether prompts, outputs or other content can be used by the provider for model improvement, safety monitoring, abuse prevention or product development. Users should review and configure their provider account settings accordingly.
Independently of the provider's own processing, Agenza may log and store your prompts, outputs and conversation history as described in Section 9. Agenza does not use this content to train AI models or improve the product, except on an anonymised or aggregated basis or with your consent.
11. Payments and Future Stripe Checkout
Paid plans are planned but may not yet be live. When payments are introduced, Stripe Checkout may be used as the payment interface. During checkout, Stripe may process name, email address, billing address, payment method details, card information, transaction data, invoice data, tax information, fraud-prevention data and technical metadata.
We do not intend to store full card numbers on our own servers. Payment data required to complete and secure the transaction is processed by Stripe. Stripe may act as an independent controller for certain payment, fraud prevention and compliance processing. Stripe's privacy policy is available at stripe.com/privacy.
We may receive and store transaction confirmations, customer identifiers, subscription status, invoice details, plan information and billing-related communication in order to provide paid services, manage subscriptions, issue invoices, comply with accounting obligations and handle disputes or refunds.
12. Processors, Recipients and International Transfers
We may share personal data with service providers and processors where necessary to operate the website and service, including hosting providers, CDN and security providers, analytics providers, email and newsletter providers, form and support tools, AI providers selected by the user, payment processors, legal/accounting providers and technical maintenance providers.
This may also include the prompt, output, conversation and log data described in Sections 3 and 9, which may be processed by our hosting provider (Hostfactory, Switzerland) and by our developer / second-level support acting as a sub-processor under a data processing agreement.
Some providers may process data outside Switzerland, the EEA or the UK, including in the United States. Where required, we rely on adequacy decisions (including the European Commission's adequacy decision for Switzerland), standard contractual clauses, data processing agreements, consent, contractual necessity or other lawful transfer mechanisms.
We do not sell personal data, and we do not share it for cross-context behavioural advertising. We may disclose data if required by law, to enforce agreements, to protect rights and security, to prevent abuse, or as part of a merger, acquisition, restructuring or similar business transaction.
13. Retention
We retain personal data only for as long as necessary for the purposes described in this policy, including providing the service, maintaining accounts, securing the website, handling support, complying with legal duties, preserving evidence and enforcing agreements.
Typical retention periods depend on the data category. Prompt and interaction data (prompts, AI outputs and conversation history) and related connection and usage logs are retained only for as long as necessary for operation, support, security and abuse prevention, and are then deleted or anonymised; unless a longer period is required for security, dispute-handling or legal reasons, we retain conversation logs for up to 90 days. Security logs and abuse-prevention signals are usually retained for up to 12 months. Account data is retained while the account exists and for a reasonable period after deletion where required. Billing and accounting records may be retained for statutory retention periods. Newsletter data is retained until unsubscribe or deletion unless evidence of consent must be preserved.
You can request deletion of, or access to, your data by contacting hallo@agenza.ch; we will action verified requests subject to any legal retention obligations and the rights of others.
14. Your Rights
Depending on applicable law, you may have the right to request access to your personal data, correction, deletion, restriction, portability, objection to processing, withdrawal of consent and information about automated decision-making. You may also have the right to complain to a competent data protection authority.
If you are a California resident, you also have rights under the CCPA/CPRA, including the right to know and access, to delete, to correct, and to opt out of any sale or sharing of personal information, as well as the right not to be discriminated against for exercising these rights. We do not sell your personal information and do not share it for cross-context behavioural advertising.
To exercise your rights, contact us at hallo@agenza.ch. We may need to verify your identity before responding. Withdrawal of consent does not affect processing that occurred before withdrawal.
15. Changes to this Policy
We may update this privacy policy when the website, Godmode features, providers, legal requirements or data processing practices change. The updated version will be published on this page with a new update date.
This policy should be reviewed again before Stripe Checkout or additional AI providers are launched, and whenever the actual newsletter, contact form, analytics, consent or hosting configuration changes.