Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") governs the collection, use, and disclosure of personal information by SitePulse, operated by Nilbug LLC ("we," "us," or "our"), a limited liability company registered in the State of New York, in connection with our WordPress performance monitoring plugin and related services ("Service").

This Policy applies to:

• Users of the SitePulse WordPress plugin
• Visitors to our website and dashboard
• Subscribers to our services and communications
• Anyone who interacts with our Service

2. Information We Collect

Important: SitePulse Free stores monitoring data locally and only transmits diagnostic data after you enable PageSpeed and AI Reports. SitePulse Pro has cloud diagnostics enabled by default, explains the data categories before the first upload, and lets you disable the service in plugin settings.

2.1 Local Performance Data (Stored on Your Server)

The plugin collects and stores the following data locally in your WordPress database. While the SitePulse Pro external API service is enabled, documented portions of this data can also be transmitted to SitePulse for cloud diagnostics:

• Page Load Metrics: Load times, response codes, page sizes — for performance monitoring
• Server Performance: CPU usage, memory consumption, database queries — for resource optimization
• Plugin/Theme Data: Plugin names, load times, hook execution — for performance analysis
• Error Logs: PHP errors, database errors, failed requests — for troubleshooting and debugging
• API Requests: External API calls, response times — for third-party integration monitoring

2.2 Account and Service Information

When you create an account, start a Pro trial, purchase a plan, or enable optional Free cloud services, we may collect:

• Email address
• Name (first and last)
• Company name (optional)
• Website URL being monitored
• Account preferences and settings

The local monitoring features in SitePulse Free can be used without a SitePulse account. PageSpeed, AI reports, the Pro portal, billing, and other cloud services require the information needed to provide those services.

2.3 Technical Information (Website Only)

When you visit our website (sitepulse.me), we may automatically collect standard technical information including:

• IP address and approximate location data
• Browser type and version
• Operating system information
• Device identifiers and characteristics
• Usage patterns and interaction data

This website data is collected via standard web server logs and analytics tools. The WordPress plugin does not intentionally collect or transmit visitor IP addresses, browser fingerprints, or geolocation data. SitePulse Pro does transmit the monitored server IP when its external API service is enabled.

3. How We Use Your Information

3.1 Service Provision

When you use account or cloud diagnostic features, we use the information they process to:

• Monitor and analyze your website performance
• Generate performance reports and recommendations
• Send alerts and notifications about performance issues (if enabled)
• Provide customer support and technical assistance
• Maintain and improve our service quality

3.2 Communication (Opt-In Only)

Only with your explicit consent, we may use your contact information to:

• Send service-related notifications and updates
• Provide customer support responses
• Share important service announcements
• Send marketing communications (requires separate consent; you may unsubscribe at any time)

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share information in the following circumstances:

4.1 Service Providers

We use contracted service providers only as needed to operate SitePulse. Categories include:

• Cloud hosting, database operations, and weekly service backups
• Payment processing and subscription management
• Email delivery and customer communications
• AI diagnostic processing through SitePulse models and a paid fallback processor; customer diagnostic data is not used to train models

4.2 Legal Requirements

We may disclose information when required by law or to:

• Comply with legal processes or court orders
• Protect our rights and property
• Ensure user safety and security
• Investigate fraudulent activities

5. Data Security

We implement comprehensive security measures to protect your information. However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

5.1 Technical Safeguards

• TLS encryption for data transmitted to SitePulse services
• WordPress capability checks and nonces for privileged plugin actions
• Least-privilege access controls for service administration
• Weekly SitePulse infrastructure backups that expire within 90 days
• Dependency and static security checks where configured in the development workflow

5.2 Administrative Safeguards

• Limited access to personal data on need-to-know basis
• Employee training on data protection
• Confidentiality agreements with all staff
• Regular security awareness updates

5.3 Limitation of Liability for Data Security

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, SITEPULSE, NILBUG LLC, ITS DEVELOPER(S), OFFICERS, DIRECTORS, EMPLOYEES, AND AGENTS SHALL NOT BE LIABLE FOR ANY UNAUTHORIZED ACCESS TO, OR ALTERATION, THEFT, OR DESTRUCTION OF YOUR DATA, WHETHER THROUGH ACCIDENT, FRAUDULENT MEANS, OR ANY OTHER METHOD. YOU ACKNOWLEDGE THAT YOU USE THE SERVICE AND PROVIDE YOUR DATA AT YOUR OWN RISK.

6. Your Rights and Choices

You may disable cloud processing in plugin settings or request deletion of data held by SitePulse. Disabling cloud processing stops future diagnostic uploads but does not automatically erase prior portal records. After a verified deletion request, production records are deleted within 30 days and backup copies expire within 90 days.

6.1 GDPR Rights (EU Residents)

If you are located in the European Union, you have the following rights:

• Right of Access: Request information about personal data we hold
• Right to Rectification: Correct inaccurate personal data
• Right to Erasure: Request deletion of personal data
• Right to Portability: Receive data in a structured, machine-readable format
• Right to Restriction: Limit the processing of personal data
• Right to Object: Object to processing for marketing purposes

6.2 CCPA Rights (California Residents)

California residents have additional rights:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising privacy rights

7. Data Retention

We retain information according to the service and plan involved:

• Cloud diagnostic history: 30 or 90 days, depending on your Pro plan
• Account records: Deleted from production systems within 30 days after a verified deletion request
• Support messages: Deleted when the support matter is closed
• Security logs: 30 or 90 days, depending on your plan
• Billing records: 5 years for accounting and legal obligations
• SitePulse infrastructure backups: Created weekly and expired within 90 days; these are service backups, not backups of customer WordPress websites

8. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

8.1 Essential Cookies

Required for basic site functionality including authentication and security.

8.2 Analytics Cookies

Help us understand how users interact with our service to improve functionality.

8.3 Cookie Management

You can control cookies through your browser settings, but this may affect service functionality.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your residence. We ensure appropriate safeguards including:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions by regulatory authorities
• Certification schemes and codes of conduct
• Binding corporate rules for intra-group transfers

10. Children's Privacy

Our Service is not directed to individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided personal information, please contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Email notification to registered users
• Prominent notice on our website
• In-app notifications for plugin users

Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

Contact Us

For privacy-related questions, concerns, or requests:

• Email: info@sitepulse.me or info@nilbug.com
• Subject Line: "Privacy Request"
• Response Time: Within the period required by applicable law

Business Entity: Nilbug LLC

Address: 418 Broadway, #5716 Albany, NY 12207

Support: info@sitepulse.me

GitHub: github.com/nilbugllc

WordPress.org: Support Forum