RecapWP ("we", "us", "our") operates in two distinct contexts: this website (recapwp.com), where you may purchase a Pro license, and the WordPress plugin itself, which runs entirely on your own server. This policy covers both. All payments are handled by Lemon Squeezy as merchant of record; they are the data controller for your billing information. This website uses Google Site Kit to connect Google Analytics 4 and Google Search Console so we can understand how visitors find and use the marketing site. The Plugin runs on-demand audits of your WordPress site and stores its findings in your own database; that data stays on your server.
Overview.
This policy covers two things: this website (where you buy a Pro license) and the WordPress plugin that runs on your own server. Payments are handled by Lemon Squeezy as merchant of record; they hold your billing info, not us. Plugin data stays on your site; we can't see it.
RecapWP ("we", "us", "our") is committed to protecting your privacy. This policy explains what information is collected in connection with RecapWP, by whom, how it is used, and what rights you have.
RecapWP operates in two distinct contexts: this website (recapwp.com), where you may purchase a Pro license, and the WordPress plugin itself, which runs entirely on your own server. This policy covers both.
Because all payments and licensing are handled by Lemon Squeezy as merchant of record, Lemon Squeezy is the data controller for your purchase and billing information. We are the data controller only for support correspondence we receive directly. Data collected by the Plugin on your WordPress site is stored on your server, under your control; we never have access to it.
Information we collect.
This website runs Google Analytics 4 (via Site Kit) for traffic insights. Lemon Squeezy handles all payment info. If you email support, we get your name, email, and message. The plugin runs on-demand site audits on your server and stores the findings, fix history, and an activity log locally; those never leave your site.
2.1 When you visit this website
This marketing site (recapwp.com) runs Google Site Kit, which
connects two Google services: Google Analytics 4 and Google Search
Console. Analytics collects pages viewed, referring URL, approximate (country-level)
location derived from IP, device and browser metadata, and engagement events such as clicks,
scroll depth, and time on page. Search Console is a server-to-server data feed from Google
about how this site appears in search results; it does not collect anything from your browser.
Visitor IPs are anonymized by Google Analytics before they reach Google's reporting interface.
No personally identifying information is collected through Analytics; visitors are
distinguished by a randomly generated client ID stored in a first-party _ga cookie
(see Section 8 for details on cookies and how to opt out).
2.2 When you purchase a Pro license
All payment processing is handled by Lemon Squeezy, our merchant of record. Lemon Squeezy collects and controls your name, email address, billing address, and payment details. We receive a notification from Lemon Squeezy confirming your purchase so we can verify license activation; we do not independently store your billing information or payment card details.
2.3 When you contact support
If you email us directly, we collect your name, email address, and the content of your message. This information is used solely to respond to your enquiry.
2.4 When you use the Plugin on your WordPress site
RecapWP is an on-demand site auditor: when you click “Scan now” it runs deterministic checks across your installation, then records the results in your own database on your own server. The data it stores is:
- Findings: the issues each scan detects (security, performance, SEO, broken links, user hygiene, configuration, WooCommerce, and similar), with the affected target and status
- Fix history: a ledger of fixes you apply and undo, kept so any fix can be reversed
- Scan-run records: when each scan ran, what was checked, and the resulting counts
- Activity log: plugin activity, fixes and undos, and login events
By default, this data never leaves your server; it is not transmitted to us, and we have no access to it at any time. The only outbound requests are license validation to Lemon Squeezy if you activate a Pro license, and, if you enable the optional “Ask RecapWP” assistant and supply your own API key, the requests it sends to the AI provider you configure. The Pro broken-link crawler fetches your site's own URLs to check for broken links. See Section 4.
How we use it.
We only use support emails to reply to you. We don't use them for marketing or advertising, and we don't sell or share your personal information.
The only personal information we directly hold is support correspondence. We use it solely to respond to your enquiry. We do not use it for marketing, advertising, or any other purpose.
We do not sell, rent, or share your personal information with third parties for their own commercial use.
3.1 Legal basis for processing (GDPR)
Where the GDPR applies, we process support correspondence on the basis of legitimate interest, specifically responding to enquiries you have initiated and protecting our business from fraud and abuse. All other personal data associated with your purchase is processed by Lemon Squeezy under their own legal basis as the data controller for that information.
Third-party services.
Google Site Kit runs Analytics & Search Console on this website. Lemon Squeezy handles payments and Pro license validation. The optional “Ask RecapWP” assistant only runs if you add your own AI provider API key. Each has its own privacy policy.
The following third-party services are used in connection with RecapWP. Each operates under its own privacy policy and is independently responsible for the data it collects.
- Google Site Kit (Google Analytics 4 + Google Search Console): installed on
recapwp.comto understand how visitors find and use the marketing site. Analytics collects pageviews, referrer, country-level location, device metadata, and engagement events; IPs are anonymized. Search Console is a server-to-server feed and does not interact with your browser. No PII is transmitted to Google. See Google's Privacy Policy. To opt out of Analytics across all sites, install the official Google Analytics Opt-out Browser Add-on. - Lemon Squeezy: processes all payments and manages license delivery as merchant of record. Lemon Squeezy is the data controller for your purchase and billing information. See lemonsqueezy.com/privacy.
- AI provider (optional, your own): if you enable the “Ask RecapWP” assistant (Pro) and configure a provider and API key in Plugin Settings, the context of the findings you ask about (your site's own audit data, never your visitors' personal data) is sent to the AI service you choose (for example OpenAI, OpenRouter, Groq, or a self-hosted model) to explain and prioritize the findings in plain English. The assistant never applies a fix. Entirely optional and off by default; nothing is sent without your own key, and the provider you pick operates under its own privacy policy.
API keys you provide are stored in your own WordPress database, displayed only in masked form in the admin interface, and are never transmitted to RecapWP or any party other than the respective service.
Data retention.
Plugin data stays on your site. Deleting the plugin removes everything: it reverts every applied fix and permanently wipes all plugin data from your database (deactivating changes nothing). We keep license keys + emails for activation, and support emails for up to two years. Billing data is held by Lemon Squeezy.
5.1 On your WordPress site
RecapWP stores its findings, fix history, scan-run records, and activity log in your WordPress database for as long as the Plugin is installed. Deactivating the Plugin never touches this data. Deleting the Plugin performs a clean uninstall: it reverts every fix the Plugin applied (returning your site to its pre-fix state), permanently removes all stored findings, fix history, scan-run records, logs, settings, and license information from your database, and releases the site's license activation.
5.2 Purchase and billing data
We do not maintain a marketing or billing database. We store only active license keys and the email addresses associated with them, strictly for the purpose of validating software activation and delivering updates. All core purchase history, billing addresses, and payment information are held and controlled by Lemon Squeezy. For questions about how long they retain your data or to request deletion, refer to Lemon Squeezy's Privacy Policy.
5.3 Support correspondence
If you contact us by email, that correspondence is retained in our inbox for as long as reasonably necessary to resolve your issue, and for no longer than two (2) years.
Security.
HTTPS everywhere. No payment data on our servers. Access to support correspondence is restricted. Nothing on the internet is 100% secure, but we take reasonable precautions.
We take reasonable precautions to protect any personal information we hold. This website is served over HTTPS. We do not store payment card information; all payment data is controlled by Lemon Squeezy. Access to any correspondence we hold is limited to authorised personnel only.
No method of transmission over the internet is completely secure. While we take these measures seriously, we cannot guarantee absolute security and accept no liability for unauthorised access that occurs despite our reasonable precautions.
Your privacy rights.
You can access, correct, delete, or port your data. Most of it is with Lemon Squeezy; contact them for billing data. For support emails we hold, email hello@recapwp.com.
Depending on your location, you may have rights in relation to personal data held about you, including the right to access, correct, delete, restrict, or port that data.
Because we do not maintain a customer database, most data associated with your purchase, including your name, billing email, and order history, is held by Lemon Squeezy. To exercise rights over that data, contact Lemon Squeezy directly through their Privacy Policy page.
For any support correspondence we hold directly, email hello@recapwp.com. We will respond within the timeframe required by applicable law: within 30 days for GDPR requests and within 45 days for CCPA requests. If you are in the EU or UK and are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.
7.1 California residents (CCPA)
You have the right to know what personal information we hold about you, to request its deletion, to opt out of its sale or sharing (we do not sell or share personal information for advertising), and to not be discriminated against for exercising these rights. Because purchase data is held by Lemon Squeezy, please direct billing-related CCPA requests to them. For support correspondence we hold, email hello@recapwp.com with "CCPA Request" in the subject line.
Cookies.
This site sets two first-party analytics cookies (_ga and
_ga_*) via Google Analytics 4. No advertising cookies, no cross-site tracking, no
third-party retargeting. You can opt out using your browser's controls or Google's official
opt-out add-on.
This website uses Google Analytics 4 (via the Site Kit plugin) to measure traffic and understand how visitors find and use the marketing site. To do this, Google Analytics sets the following first-party cookies in your browser:
_ga: stores a randomly generated client ID used to distinguish unique visitors. Expires after 2 years._ga_<container-id>: stores session state for the specific Analytics property on this site. Expires after 2 years.
These cookies do not contain personal information. They hold only a random identifier so Google Analytics can recognise return visits and aggregate session data. IPs are anonymized by Google Analytics before being recorded.
This website does not use advertising cookies, retargeting cookies, or any form of cross-site tracking. We do not run Google Ads, Facebook Pixel, LinkedIn Insight Tag, or any equivalent advertising or marketing pixel.
WordPress also sets functional session cookies only for authenticated administrators logged in to the WordPress dashboard; these do not affect public visitors and are not used to track anyone across other websites.
8.1 How to opt out
You can disable analytics cookies in three ways:
- Use your browser's built-in cookie controls to block third-party or all cookies for this site.
- Install Google's official Google Analytics Opt-out Browser Add-on, which prevents Analytics from running on any website.
- Enable your browser's "Do Not Track" / "Global Privacy Control" setting; while not all sites honour these signals, many privacy-focused extensions use them to block trackers.
Children's privacy.
RecapWP is a business tool for adults. We don't knowingly collect information from anyone under 16.
RecapWP is a business tool intended for use by adults managing WordPress websites. We do not knowingly collect personal information from anyone under the age of 16. We do not maintain a customer database, so we do not hold minors' personal data directly; any purchase data is held by Lemon Squeezy. If you believe a minor has contacted us via support email, contact us at hello@recapwp.com and we will remove that correspondence immediately.
International transfers.
We're in the US. If you're outside the US, your data may be transferred here. Lemon Squeezy handles purchase data under their own safeguards. Google Analytics data is processed by Google under its own transfer mechanisms.
RecapWP is operated from the United States. If you are accessing this website or purchasing a license from outside the US, your personal information may be transferred to and processed in the United States. Where required by applicable law, we ensure such transfers are subject to appropriate safeguards. Because Lemon Squeezy is the data controller for purchase and billing data, their transfer mechanisms and safeguards apply to that information. Similarly, because Google is the data controller for the Analytics data collected through Site Kit, your visit data may be transferred to and processed by Google on servers located outside your home country; Google's own data-transfer safeguards (including Standard Contractual Clauses where applicable) apply to that processing.
Changes to this policy.
We'll update the "Last updated" date at the top when this policy changes. For significant changes, we'll make reasonable efforts to notify users beforehand.
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will update the "Last updated" date at the top of this page when changes are made. For significant changes that affect how personal data is handled, we will make reasonable efforts to notify users before the changes take effect.
Contact.
Email hello@recapwp.com.
Questions, requests, or concerns about this policy? Email us at hello@recapwp.com.