Last updated: September 27, 2026
WPilot is operated by BF Development. This policy explains how WPilot processes information when you use the WPilot WordPress plugin, backend service, and AI-assistant connection.
Information WPilot processes
When you connect a WordPress site, WPilot may process the site URL, a random installation identifier, the WordPress administrator email address, WordPress/PHP/theme/plugin metadata, and an encrypted site connection credential.
When you ask an AI assistant to perform an action, WPilot processes only the site data needed to complete that request. Depending on the feature, this can include page/post content, media metadata, plugin information, WooCommerce product data, and limited order summary data. The current order-listing feature does not return customer addresses.
WPilot also offers an optional onboarding survey. Survey information such as email, role, discovery source, and primary use case is sent only when the WordPress administrator explicitly opts in.
Why we process this information
We use the information to provide and secure the WPilot connection, route authorized requests, maintain connected-site state, troubleshoot the service, provide support, and—only for opted-in survey responses—understand how people discover and use WPilot.
AI providers
If you use WPilot through ChatGPT, Claude, or another compatible AI assistant, information you choose to send through that assistant may also be processed by that provider according to your agreement and its privacy policy. WPilot does not control the AI provider’s independent processing.
Infrastructure and service providers
WPilot currently uses hosting/database infrastructure provided through Hostinger and email delivery through Titan Email. These providers may process limited technical data necessary to operate those services.
Retention
Connected-site and authentication data is retained while needed to provide WPilot and for reasonable security/troubleshooting periods. Optional survey responses are retained for product research unless deleted earlier on request. We aim to minimize retained data and may shorten these periods as the service evolves.
Security
WPilot uses HTTPS for service communications. Site connection credentials are stored encrypted at rest by the WPilot backend. Access tokens and connection credentials should be treated as secrets.
Your choices
The optional product survey is not required to use WPilot. You can disconnect WPilot from WordPress at any time. Uninstalling the plugin removes WPilot’s local WordPress options and action history.
To request access to or deletion of data stored by the WPilot service, contact support@bfdevelopment.tech. Please include the website domain or WPilot Site ID needed to identify the relevant record.
Contact
BF Development
Support: support@bfdevelopment.tech
This draft should be reviewed for the legal requirements that apply to BF Development and its users before publication.
To pick up a draggable item, press the space bar. While dragging, use the arrow keys to move the item. Press space again to drop the item in its new position, or press escape to cancel.