PluginProbe
wpForo Forum / 3.2.0
wpForo Forum v3.2.0
3.2.1 3.2.0 3.1.7 3.1.6 3.1.5 3.1.4 3.1.2 3.1.1 3.1.0 3.0.9 3.0.8 3.0.7 trunk 1.0.0 1.0.1 1.0.2 1.1.0 1.1.1 1.1.2 1.2.0 1.3.0 1.3.1 1.4.0 1.4.1 1.4.10 All 141 releases
wpforo / admin / pages / legal / privacy-policy.php

privacy-policy.php in wpForo Forum 3.2.0, at admin/pages/legal/privacy-policy.php

565 lines 23.7 KB
No matching file
Up and down to move Enter to open Esc to close
Raw Download Zip
1 <?php
2 /**
3 * wpForo AI Features - Privacy Policy
4 *
5 * This document describes how we collect, use, and protect your data.
6 * Last updated: March 2026
7 *
8 * @since 3.0.0
9 */
10
11 if( ! defined( 'ABSPATH' ) ) exit;
12 ?>
13
14 <div class="wpforo-ai-legal-document">
15 <h1>wpForo AI Features - Privacy Policy</h1>
16 <p class="wpforo-ai-legal-updated"><strong>Last Updated:</strong> March 23, 2026</p>
17 <p class="wpforo-ai-legal-updated"><strong>Effective Date:</strong> March 23, 2026</p>
18
19 <div class="wpforo-ai-legal-toc">
20 <h3>Table of Contents</h3>
21 <ol>
22 <li><a href="#introduction">Introduction</a></li>
23 <li><a href="#definitions">Definitions</a></li>
24 <li><a href="#data-controller">Data Controller and Processor Roles</a></li>
25 <li><a href="#local-data">Data Stored Locally (Your Server)</a></li>
26 <li><a href="#cloud-data">Data Processed in the Cloud</a></li>
27 <li><a href="#how-we-use">How We Use Your Data</a></li>
28 <li><a href="#ai-processing">AI and Machine Learning Processing</a></li>
29 <li><a href="#data-sharing">Data Sharing and Third Parties</a></li>
30 <li><a href="#data-retention">Data Retention</a></li>
31 <li><a href="#data-security">Data Security</a></li>
32 <li><a href="#your-rights">Your Rights</a></li>
33 <li><a href="#international">International Data Transfers</a></li>
34 <li><a href="#children">Children's Privacy</a></li>
35 <li><a href="#changes">Changes to This Policy</a></li>
36 <li><a href="#contact">Contact Us</a></li>
37 </ol>
38 </div>
39
40 <hr>
41
42 <h2 id="introduction">1. Introduction</h2>
43 <p>wpForo AI features are provided by <a href="https://wpforo.com/gvectors-ai/" target="_blank">gVectors AI</a>. This Privacy Policy explains how gVectors Team ("we", "us", "our") collects, uses, stores, and protects information when you use the wpForo AI Features service ("Service").</p>
44 <p>By using the Service, you agree to the collection and use of information as described in this Privacy Policy. This policy should be read in conjunction with our Terms of Service.</p>
45 <p><strong>Important:</strong> This Privacy Policy covers data processed by our Service. As a forum operator, you are responsible for your own privacy policy that governs how you collect and process your forum users' data.</p>
46
47 <h2 id="definitions">2. Definitions</h2>
48 <ul>
49 <li><strong>"Personal Data"</strong> means any information relating to an identified or identifiable natural person.</li>
50 <li><strong>"Forum Content"</strong> means topics, posts, replies, and other content created by users on your forum.</li>
51 <li><strong>"Vector Embeddings"</strong> means mathematical representations of text content used for semantic search.</li>
52 <li><strong>"Customer"</strong> means the forum administrator who registers for and uses the Service.</li>
53 <li><strong>"End Users"</strong> means visitors and registered users of your forum.</li>
54 <li><strong>"Processing"</strong> means any operation performed on data, including collection, storage, and deletion.</li>
55 </ul>
56
57 <h2 id="data-controller">3. Data Controller and Processor Roles</h2>
58
59 <h3>3.1 Your Role as Data Controller</h3>
60 <p>As the forum operator, <strong>you are the Data Controller</strong> for:</p>
61 <ul>
62 <li>Your forum users' personal data</li>
63 <li>Forum content created by your users</li>
64 <li>Decisions about what data to index and process</li>
65 </ul>
66 <p>You are responsible for:</p>
67 <ul>
68 <li>Obtaining necessary consents from your forum users</li>
69 <li>Updating your own privacy policy to disclose use of AI services</li>
70 <li>Responding to your users' data subject requests</li>
71 <li>Ensuring lawful basis for processing forum content</li>
72 </ul>
73
74 <h3>3.2 Our Role as Data Processor</h3>
75 <p>gVectors Team (through <a href="https://wpforo.com/gvectors-ai/" target="_blank">gVectors AI</a>) acts as a <strong>Data Processor</strong> for forum content you submit to the Service. We:</p>
76 <ul>
77 <li>Process data only according to your instructions (indexing requests)</li>
78 <li>Implement appropriate security measures</li>
79 <li>Assist you in responding to data subject requests</li>
80 <li>Delete data upon your request or service termination</li>
81 </ul>
82
83 <h3>3.3 Our Role as Data Controller</h3>
84 <p>We are the <strong>Data Controller</strong> for:</p>
85 <ul>
86 <li>Your account information (email, site URL)</li>
87 <li>Billing and subscription data</li>
88 <li>Service usage analytics</li>
89 <li>Technical logs and operational data</li>
90 </ul>
91
92 <h2 id="local-data">4. Data Stored Locally (Your Server)</h2>
93 <p><strong>The following data is stored only on your WordPress server and is NOT transmitted to our cloud services:</strong></p>
94
95 <h3>4.1 Plugin Configuration</h3>
96 <ul>
97 <li>Feature enable/disable settings</li>
98 <li>Display preferences and customizations</li>
99 <li>Search result formatting options</li>
100 </ul>
101
102 <h3>4.2 Credentials (Encrypted)</h3>
103 <ul>
104 <li>API key (stored encrypted in WordPress database)</li>
105 <li>Tenant ID</li>
106 <li>Connection status</li>
107 </ul>
108
109 <h3>4.3 Cache Data</h3>
110 <ul>
111 <li>Temporary search results cache</li>
112 <li>Performance optimization data</li>
113 </ul>
114
115 <h3>4.4 Your Control Over Local Data</h3>
116 <p>You have complete control over locally stored data:</p>
117 <ul>
118 <li>Delete via plugin settings at any time</li>
119 <li>Included in standard WordPress backup procedures</li>
120 <li>Subject to your server's security measures</li>
121 <li>Never shared with us without explicit API calls</li>
122 </ul>
123
124 <h2 id="cloud-data">5. Data Processed in the Cloud</h2>
125 <p><strong>IMPORTANT: The following data IS transmitted to and processed by our cloud infrastructure when you use the Service.</strong></p>
126
127 <h3>5.1 Forum Content Data</h3>
128 <table class="wpforo-ai-legal-table">
129 <thead>
130 <tr>
131 <th>Data Type</th>
132 <th>Examples</th>
133 <th>Purpose</th>
134 </tr>
135 </thead>
136 <tbody>
137 <tr>
138 <td>Topic Content</td>
139 <td>Titles, descriptions, body text</td>
140 <td>Indexing for semantic search</td>
141 </tr>
142 <tr>
143 <td>Replies</td>
144 <td>User responses, comments</td>
145 <td>Indexing for semantic search</td>
146 </tr>
147 <tr>
148 <td>Metadata</td>
149 <td>Post IDs, timestamps, forum categories</td>
150 <td>Result organization and filtering</td>
151 </tr>
152 <tr>
153 <td>Status Flags</td>
154 <td>Solved, best answer, closed</td>
155 <td>Search result ranking</td>
156 </tr>
157 </tbody>
158 </table>
159
160 <h3>5.2 Account Information</h3>
161 <table class="wpforo-ai-legal-table">
162 <thead>
163 <tr>
164 <th>Data Type</th>
165 <th>Examples</th>
166 <th>Purpose</th>
167 </tr>
168 </thead>
169 <tbody>
170 <tr>
171 <td>Administrator Email</td>
172 <td>admin@yourforum.com</td>
173 <td>Account identification, notifications</td>
174 </tr>
175 <tr>
176 <td>Site URL</td>
177 <td>https://yourforum.com</td>
178 <td>Origin validation, tenant identification</td>
179 </tr>
180 <tr>
181 <td>Software Versions</td>
182 <td>WordPress 6+, wpForo 3+</td>
183 <td>Compatibility and support</td>
184 </tr>
185 </tbody>
186 </table>
187
188 <h3>5.3 Search Query Data</h3>
189 <table class="wpforo-ai-legal-table">
190 <thead>
191 <tr>
192 <th>Data Type</th>
193 <th>Examples</th>
194 <th>Purpose</th>
195 </tr>
196 </thead>
197 <tbody>
198 <tr>
199 <td>Search Queries</td>
200 <td>"how to configure email notifications"</td>
201 <td>Processing search requests</td>
202 </tr>
203 <tr>
204 <td>Query Metadata</td>
205 <td>Timestamp, results count</td>
206 <td>Analytics and billing</td>
207 </tr>
208 </tbody>
209 </table>
210
211 <h3>5.4 Usage and Billing Data</h3>
212 <table class="wpforo-ai-legal-table">
213 <thead>
214 <tr>
215 <th>Data Type</th>
216 <th>Examples</th>
217 <th>Purpose</th>
218 </tr>
219 </thead>
220 <tbody>
221 <tr>
222 <td>Credit Usage</td>
223 <td>Credits consumed per operation</td>
224 <td>Billing and limits enforcement</td>
225 </tr>
226 <tr>
227 <td>API Calls</td>
228 <td>Request counts, endpoints accessed</td>
229 <td>Usage analytics, troubleshooting</td>
230 </tr>
231 <tr>
232 <td>Subscription Status</td>
233 <td>Plan type, expiration date</td>
234 <td>Service access control</td>
235 </tr>
236 </tbody>
237 </table>
238
239 <h2 id="how-we-use">6. How We Use Your Data</h2>
240
241 <h3>6.1 Primary Purposes</h3>
242 <ul>
243 <li><strong>Providing the Service:</strong> Processing forum content to enable semantic search</li>
244 <li><strong>AI Features:</strong> Powering topic suggestions, related content, and search</li>
245 <li><strong>Account Management:</strong> Managing your subscription and authentication</li>
246 <li><strong>Billing:</strong> Tracking usage and processing payments</li>
247 </ul>
248
249 <h3>6.2 Operational Purposes</h3>
250 <ul>
251 <li><strong>Service Improvement:</strong> Analyzing aggregated usage patterns</li>
252 <li><strong>Technical Support:</strong> Diagnosing issues when you contact support</li>
253 <li><strong>Security:</strong> Detecting and preventing abuse or unauthorized access</li>
254 <li><strong>Legal Compliance:</strong> Meeting legal obligations</li>
255 </ul>
256
257 <h3>6.3 What We Do NOT Do</h3>
258 <ul>
259 <li style="color: #1e7e34">Sell your data to third parties</li>
260 <li style="color: #1e7e34">Use your forum content for advertising</li>
261 <li style="color: #1e7e34">Share your data with other customers</li>
262 <li style="color: #1e7e34">Train our own AI models on your specific content (without explicit consent)</li>
263 <li style="color: #1e7e34">Access your content except as needed to provide the Service</li>
264 </ul>
265
266 <h2 id="ai-processing">7. AI and Machine Learning Processing</h2>
267
268 <h3>7.1 AI Services Used</h3>
269 <p>Your forum content is processed using the following AI technologies:</p>
270
271 <h4>Amazon Bedrock</h4>
272 <ul>
273 <li><strong>Purpose:</strong> Managed AI/ML service for text embeddings</li>
274 <li><strong>Data Handling:</strong> Content processed in real-time; not stored by Amazon Bedrock</li>
275 <li><strong>Privacy:</strong> Subject to <a href="https://aws.amazon.com/bedrock/faqs/" target="_blank" rel="noopener">AWS Bedrock privacy practices</a></li>
276 </ul>
277
278 <h4>Amazon Nova Models</h4>
279 <ul>
280 <li><strong>Purpose:</strong> Foundation models for semantic understanding</li>
281 <li><strong>Data Handling:</strong> Content processed temporarily for embedding generation</li>
282 <li><strong>Training:</strong> Your content is NOT used to train Nova models</li>
283 </ul>
284
285 <h4>Anthropic Claude (via Bedrock)</h4>
286 <ul>
287 <li><strong>Purpose:</strong> Advanced language understanding for AI features</li>
288 <li><strong>Data Handling:</strong> Content processed temporarily; not stored by Anthropic</li>
289 <li><strong>Training:</strong> Your content is NOT used to train Claude models (API usage)</li>
290 </ul>
291
292 <h3>7.2 Vector Embeddings</h3>
293 <p>When we process your forum content:</p>
294 <ol>
295 <li>Text is converted into numerical vectors (by Amazon embedding models)</li>
296 <li>Original text is NOT stored in the vector database</li>
297 <li>Vectors capture semantic meaning but cannot be reversed to original text</li>
298 <li>Metadata (IDs, timestamps) is stored alongside vectors for result retrieval</li>
299 </ol>
300
301 <h3>7.3 AI Processing Limitations</h3>
302 <p>We commit to:</p>
303 <ul>
304 <li style="color: #1e7e34">Using AI only for providing Service features</li>
305 <li style="color: #1e7e34">Not using your content to train proprietary models</li>
306 <li style="color: #1e7e34">Not sharing your content with AI providers beyond processing needs</li>
307 <li style="color: #1e7e34">Providing transparency about AI processing methods</li>
308 </ul>
309
310 <h2 id="data-sharing">8. Data Sharing and Third Parties</h2>
311
312 <h3>8.1 Service Providers (Sub-processors)</h3>
313 <p>We share data with the following service providers who process data on our behalf:</p>
314
315 <table class="wpforo-ai-legal-table">
316 <thead>
317 <tr>
318 <th>Provider</th>
319 <th>Purpose</th>
320 <th>Data Shared</th>
321 <th>Location</th>
322 </tr>
323 </thead>
324 <tbody>
325 <tr>
326 <td>Amazon Web Services (AWS)</td>
327 <td>Cloud infrastructure, AI processing</td>
328 <td>All cloud-processed data</td>
329 <td>United States (us-east-1) / Can be changed for customers with Enterprise Subscription Plan</td>
330 </tr>
331 <tr>
332 <td>Amazon Bedrock</td>
333 <td>AI embedding generation</td>
334 <td>Forum content (temporary)</td>
335 <td>United States</td>
336 </tr>
337 <tr>
338 <td>Freemius</td>
339 <td>Payment processing</td>
340 <td>Email, site URL, billing info</td>
341 <td>Israel/United States</td>
342 </tr>
343 <tr>
344 <td>Paddle</td>
345 <td>Payment processing (Merchant of Record)</td>
346 <td>Email, site URL, billing info</td>
347 <td>United Kingdom/United States</td>
348 </tr>
349 </tbody>
350 </table>
351
352 <h3>8.2 Legal Requirements</h3>
353 <p>We may disclose data when required by:</p>
354 <ul>
355 <li>Valid legal process (court order, subpoena)</li>
356 <li>Law enforcement requests with proper authority</li>
357 <li>Protection of our rights, property, or safety</li>
358 <li>Emergency situations involving potential harm</li>
359 </ul>
360
361 <h3>8.3 Business Transfers</h3>
362 <p>In case of merger, acquisition, or sale of assets:</p>
363 <ul>
364 <li>Your data may be transferred to the acquiring entity</li>
365 <li>You will be notified of any such transfer</li>
366 <li>This Privacy Policy will continue to apply until you are notified otherwise</li>
367 </ul>
368
369 <h3>8.4 No Sale of Personal Data</h3>
370 <p style="color: #1e7e34">We do NOT sell, rent, or trade your personal data or forum content to any third parties for their marketing purposes.</p>
371
372 <h2 id="data-retention">9. Data Retention</h2>
373
374 <h3>9.1 Retention Periods</h3>
375 <table class="wpforo-ai-legal-table">
376 <thead>
377 <tr>
378 <th>Data Type</th>
379 <th>Retention Period</th>
380 <th>Deletion Method</th>
381 </tr>
382 </thead>
383 <tbody>
384 <tr>
385 <td>Vector Embeddings</td>
386 <td>Until deletion request or account termination</td>
387 <td>Automatic on disconnect + 30 days</td>
388 </tr>
389 <tr>
390 <td>Account Information</td>
391 <td>Duration of subscription + 30 days</td>
392 <td>Automatic after grace period</td>
393 </tr>
394 <tr>
395 <td>API Logs</td>
396 <td>90 days</td>
397 <td>Automatic TTL deletion</td>
398 </tr>
399 <tr>
400 <td>Usage Analytics</td>
401 <td>90 days</td>
402 <td>Automatic TTL deletion</td>
403 </tr>
404 <tr>
405 <td>Billing Records</td>
406 <td>7 years (legal requirement)</td>
407 <td>Manual after legal period</td>
408 </tr>
409 <tr>
410 <td>Support Tickets</td>
411 <td>2 years after resolution</td>
412 <td>Manual review and deletion</td>
413 </tr>
414 </tbody>
415 </table>
416
417 <h3>9.2 Deletion Upon Request</h3>
418 <p>You can request immediate deletion of your data:</p>
419 <ul>
420 <li><strong>Forum Content:</strong> Use "Clear All Indexed Data" in plugin settings</li>
421 <li><strong>Account Data:</strong> Disconnect and request full deletion via support</li>
422 <li><strong>All Data:</strong> Contact support for complete data erasure</li>
423 </ul>
424
425 <h3>9.3 Post-Termination</h3>
426 <ul>
427 <li>30-day grace period for reactivation</li>
428 <li>After 30 days: Permanent deletion of all cloud data</li>
429 <li>Billing records retained as legally required</li>
430 <li>Aggregated, anonymized statistics may be retained</li>
431 </ul>
432
433 <h2 id="data-security">10. Data Security</h2>
434
435 <h3>10.1 Technical Measures</h3>
436 <ul>
437 <li><strong>Encryption in Transit:</strong> TLS 1.2+ for all communications</li>
438 <li><strong>Encryption at Rest:</strong> AES-256 encryption for all stored data</li>
439 <li><strong>Access Control:</strong> IAM-based least-privilege access</li>
440 <li><strong>Network Security:</strong> AWS VPC isolation, security groups</li>
441 <li><strong>API Security:</strong> Origin validation, rate limiting, API key hashing</li>
442 </ul>
443
444 <h3>10.2 Organizational Measures</h3>
445 <ul>
446 <li>Access limited to authorized personnel only</li>
447 <li>Regular security reviews and updates</li>
448 <li>Incident response procedures in place</li>
449 <li>Vendor security assessments</li>
450 </ul>
451
452 <h3>10.3 Tenant Isolation</h3>
453 <ul>
454 <li>Each customer has a dedicated, isolated vector index</li>
455 <li>No customer can access another customer's data</li>
456 <li>API keys validated against registered domain</li>
457 </ul>
458
459 <h3>10.4 Breach Notification</h3>
460 <p>In the event of a data breach affecting your data:</p>
461 <ul>
462 <li>We will notify you within 72 hours of discovery</li>
463 <li>Notification will include nature of breach and affected data</li>
464 <li>We will provide guidance on protective measures</li>
465 <li>We will cooperate with any required regulatory notifications</li>
466 </ul>
467
468 <h2 id="your-rights">11. Your Rights</h2>
469
470 <h3>11.1 GDPR Rights (EEA Residents)</h3>
471 <p>If you are in the European Economic Area, you have the right to:</p>
472 <ul>
473 <li><strong>Access:</strong> Request a copy of your personal data</li>
474 <li><strong>Rectification:</strong> Request correction of inaccurate data</li>
475 <li><strong>Erasure:</strong> Request deletion of your data ("right to be forgotten")</li>
476 <li><strong>Restriction:</strong> Request limited processing of your data</li>
477 <li><strong>Portability:</strong> Receive your data in a machine-readable format</li>
478 <li><strong>Objection:</strong> Object to processing based on legitimate interests</li>
479 <li><strong>Withdraw Consent:</strong> Withdraw consent at any time</li>
480 </ul>
481
482 <h3>11.2 CCPA Rights (California Residents)</h3>
483 <p>If you are a California resident, you have the right to:</p>
484 <ul>
485 <li><strong>Know:</strong> What personal information we collect and how it's used</li>
486 <li><strong>Delete:</strong> Request deletion of your personal information</li>
487 <li><strong>Opt-Out:</strong> Opt-out of sale of personal information (we don't sell data)</li>
488 <li><strong>Non-Discrimination:</strong> Not be discriminated against for exercising rights</li>
489 </ul>
490
491 <h3>11.3 Exercising Your Rights</h3>
492 <p>To exercise any of these rights:</p>
493 <ol>
494 <li>Use in-plugin controls for data deletion</li>
495 <li>Open a support ticket at <a href="https://wpforo.com/login-register/?tab=login" target="_blank" rel="noopener">our support portal</a></li>
496 <li>We will respond within 30 days (or sooner if required by law)</li>
497 <li>We may need to verify your identity before processing requests</li>
498 </ol>
499
500 <h3>11.4 Your Forum Users' Rights</h3>
501 <p>As the Data Controller for your forum users:</p>
502 <ul>
503 <li>You are responsible for handling their data requests</li>
504 <li>We will assist you in fulfilling requests related to indexed content</li>
505 <li>Contact us if you need to delete specific user content from our indexes</li>
506 </ul>
507
508 <h2 id="international">12. International Data Transfers</h2>
509
510 <h3>12.1 Data Location</h3>
511 <p>Our primary data processing occurs in:</p>
512 <ul>
513 <li><strong>United States:</strong> AWS us-east-1 region (Northern Virginia)</li>
514 </ul>
515
516 <h3>12.2 Transfer Mechanisms</h3>
517 <p>For data transferred from the EEA/UK to the US, we rely on:</p>
518 <ul>
519 <li>AWS's Standard Contractual Clauses (SCCs)</li>
520 <li>Data Processing Agreements with sub-processors</li>
521 <li>Appropriate supplementary measures as required</li>
522 </ul>
523
524 <h3>12.3 Data Processing Agreement</h3>
525 <p>Enterprise customers may request a formal Data Processing Agreement (DPA) that includes:</p>
526 <ul>
527 <li>Standard Contractual Clauses</li>
528 <li>Technical and organizational measures</li>
529 <li>Sub-processor list and notification procedures</li>
530 </ul>
531
532 <h2 id="children">13. Children's Privacy</h2>
533 <p>The Service is not directed at children under 18 years of age. We do not knowingly collect personal data from children.</p>
534 <p>If you become aware that a child has provided personal data through your forum that has been indexed by our Service, please contact us immediately, and we will delete such data.</p>
535
536 <h2 id="changes">14. Changes to This Policy</h2>
537 <p>We may update this Privacy Policy periodically. When we make changes:</p>
538 <ul>
539 <li>We will update the "Last Updated" date</li>
540 <li>For material changes, we will notify you via email or plugin notification</li>
541 <li>Continued use after changes constitutes acceptance</li>
542 <li>Previous versions will be archived and available upon request</li>
543 </ul>
544
545 <h2 id="contact">15. Contact Us</h2>
546 <p>For questions, concerns, or requests regarding this Privacy Policy:</p>
547 <ul>
548 <li><strong>Support Portal:</strong> <a href="https://wpforo.com/login-register/?tab=login" target="_blank" rel="noopener">Open Support Ticket</a></li>
549 <li><strong>wpForo Website:</strong> <a href="https://wpforo.com" target="_blank" rel="noopener">wpforo.com</a></li>
550 <li><strong>wpForo Community:</strong> <a href="https://wpforo.com/community/" target="_blank" rel="noopener">wpforo.com</a></li>
551 <li><strong>Company:</strong> gVectors Team</li>
552 <li><strong>Service:</strong> <a href="https://wpforo.com/gvectors-ai/" target="_blank">gVectors AI</a></li>
553 <li><strong>gVectors Website:</strong> <a href="https://gvectors.com" target="_blank">gvectors.com</a></li>
554 </ul>
555
556 <h3>Data Protection Inquiries</h3>
557 <p>For data protection specific inquiries or to exercise your rights, please open a support ticket with the subject line "Data Protection Request".</p>
558
559 <hr>
560
561 <p class="wpforo-ai-legal-footer">
562 <em>By using wpForo AI Features, you acknowledge that you have read and understood this Privacy Policy.</em>
563 </p>
564 </div>
565