Security & Privacy

What data moves, what stays local.

WP Chat AI connects your WordPress site to OpenAI using your API key. Potent Pages does not receive or store visitor questions, conversations, API keys, usage logs, or rate-limit data from the plugin.

01 Conversations and usage data stay on your WordPress site
02 You use your own OpenAI API key and account
03 No Potent Pages visitor data collection or plugin telemetry
04 Rate limiting and usage controls are maintained locally

Website content sent to OpenAI

To answer questions, WP Chat AI may send relevant excerpts from your WordPress posts, pages, configured business context, and indexed content to OpenAI as prompt context. Content may also be sent to OpenAI when embeddings are generated for site search.

Visitor questions sent to OpenAI

Visitor questions are sent to OpenAI so OpenAI can generate a response. The plugin uses your OpenAI API key, so those requests belong to your own OpenAI account.

Local conversation storage

Chat conversations are stored locally by the plugin on your WordPress site. They are available to you through your site and are not transmitted to or stored by Potent Pages.

Usage data stays local

The plugin collects usage data for your site, but that information is stored locally in your WordPress database. Plugin usage data is not sent to Potent Pages.

No Potent Pages visitor data collection

WP Chat AI itself does not send visitor data, chat history, API keys, usage records, or rate-limit records to Potent Pages. Potent Pages does not operate a separate service that receives or stores this plugin data.

API key protection

Your OpenAI API key is stored in your WordPress database as a plugin setting. Access should be limited through normal WordPress administrator permissions, secure hosting, database access controls, and HTTPS for admin sessions.

Rate limiting identifiers stay local

The plugin uses visitor IP addresses or related request identifiers locally to enforce per-minute and per-hour rate limits. This helps reduce abuse, maintain fair access, and control OpenAI API costs.

No plugin telemetry or tracking

The plugin does not include third-party analytics, telemetry, advertising pixels, or tracking scripts. WP Chat AI is not designed to create an additional advertising or analytics profile of your visitors.

Your OpenAI account terms apply

Because AI requests are made through your OpenAI account, OpenAI’s API policies, data handling, account settings, and billing terms apply to the content and visitor questions sent to OpenAI.

Your WordPress site stays in control

The plugin runs on your WordPress installation. Your site controls its own stored conversations, usage information, plugin configuration, database access, administrative permissions, backups, retention practices, and OpenAI API credentials.

A straightforward data flow.

WP Chat AI runs on your WordPress installation and connects your website to OpenAI using the credentials you configure. Potent Pages does not operate an intermediary conversation-processing service between your website and OpenAI.

Step 01

A visitor asks a question

The question is submitted through the chatbot running on your WordPress website.

Step 02

Your site retrieves relevant context

WP Chat AI searches indexed website content and may combine relevant excerpts with configured business context.

Step 03

OpenAI generates the response

The visitor question and relevant context are sent to OpenAI using your API key, and the generated answer is returned to your website.

Stored on your installation

Plugin data remains under your control.

The information maintained by WP Chat AI for operating and managing the plugin is stored on your own WordPress installation rather than being sent to Potent Pages.

Chat conversations

Conversations stored by the plugin remain in your WordPress site database and are available to you through your site.

Usage and rate-limit data

Usage records and locally maintained request-limit information remain on your WordPress installation.

Your OpenAI API key

Your API key is saved as a plugin setting in your WordPress database and is not sent to Potent Pages.

Security and privacy also depend on your configuration.

WP Chat AI is designed so your WordPress site remains in control of locally stored plugin data. Site owners are responsible for securing their WordPress installation, administrator accounts, hosting environment, database, backups, HTTPS configuration, and OpenAI account. Site owners should also ensure that their own privacy notices accurately explain their use of the chatbot and the transmission of relevant website content and visitor questions to OpenAI.