Last updated: 2026-10-20
This policy covers two things: this website, and the KanbanWP plugin you install on your own site.
This website
- The website is static. It has no user accounts, no logins and no shopping cart.
- We do not run analytics or advertising trackers on the site.
- If you email us, or write to [email protected], we receive your email address and your message. We use them only to reply to you and to handle the issue you raised. Emailing us does not put you on the mailing list, and we do not sell or share your details.
- We keep correspondence only as long as it is useful for support, and you can ask us to delete it.
- Downloading the plugin does not require an account or a license key.
- Our hosting provider may keep standard server logs, such as IP address and requested page, for security and reliability.
Mailing list
If you join the mailing list at the bottom of any page, we keep:
- your email address
- when you joined
- which page you joined from
- the country your request came from, worked out by our hosting provider. We do not keep your IP address with it.
We use the list only to send KanbanWP release notes, new features and guides. We do not sell or share it. It is stored with our hosting provider, Cloudflare. To leave the list, email [email protected] and we will remove you.
The KanbanWP plugin
The plugin runs on your WordPress site. We do not host it and we do not receive your data.
What it stores
Boards, stages, tasks, comments, attachment references, activity, notifications, saved views, labels and settings are stored in tables in your own WordPress database. You control that database and any backups of it. The plugin uses the kwp_ table prefix.
What it sends out
The plugin makes outgoing requests only to services you configure:
- AI provider. If you add an API key, requests for AI features go from your server to the provider you choose (OpenAI, Anthropic, Google Gemini, or an OpenAI-compatible endpoint you enter). The request includes the text needed for that feature, such as a task title and description. The provider’s own terms and privacy policy apply to that data. If you do not add a key, nothing is sent.
- Slack and Discord. If you enter a webhook URL, activity messages are posted to it.
- Outgoing webhooks. If you create webhooks, event data is sent to the URLs you specify.
- Email. Notifications and digests are sent through your site’s normal WordPress email setup.
The plugin does not phone home, check a license, or send usage statistics to us.
MCP access
If you enable the MCP server, anyone with your MCP token can read and change your boards. Keep the token secret and rotate it if it leaks. Calls are logged in your activity log.
Public links and clients
Public board links, if you turn them on, show a read-only snapshot of non-internal tasks and comments, with display names but not email addresses. You can revoke a link at any time. Users with the client role see only what you share with them.
Removing your data
Plugin data stays in your database when you uninstall unless you enable the Delete data on uninstall setting first. You can export your data as JSON at any time.
Your responsibilities
If you use KanbanWP to store information about other people, such as clients, leads or team members, you are responsible for how you collect and use it and for any notices or consents that your local rules require. This policy does not make any legal compliance claims about your use of the plugin.
Changes
If we change this policy, we will update the date at the top of this page.
Contact
Questions about this policy: [email protected].