{"id":3,"date":"2026-08-06T02:43:25","date_gmt":"2026-08-06T02:43:25","guid":{"rendered":"https:\/\/web.bird.digital\/wingmind-ai\/?page_id=3"},"modified":"2026-10-12T13:40:53","modified_gmt":"2026-10-12T02:40:53","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/web.bird.digital\/wingmind-ai\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\n<h1 class=\"wp-block-heading\">Privacy Policy<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\"><em>Last updated: October 12, 2026<\/em><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This Privacy Policy explains how <strong>WingMind AI by Web Bird<\/strong>, developed by <strong>Web Bird Digital<\/strong> (<a href=\"https:\/\/web.bird.digital\/\">https:\/\/web.bird.digital\/<\/a>), collects, handles, stores, and protects data when you use the WingMind AI WordPress plugin, our website at <a href=\"https:\/\/web.bird.digital\/wingmind-ai\/\">https:\/\/web.bird.digital\/wingmind-ai\/<\/a>, and related subscription services. For our broader agency privacy practices, please refer to the <a href=\"https:\/\/web.bird.digital\/privacy-policy-2\/\">Web Bird Digital Company Privacy Policy<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">1. Who We Are<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Web Bird Digital is a Sydney-based digital agency providing web development, digital strategy, and WordPress software solutions. WingMind AI by Web Bird is an intelligent WordPress assistant plugin designed to help website owners, editors, and administrators manage content, design, and site configurations using Anthropic Claude or Google Gemini AI models directly from the WordPress admin dashboard.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">2. Public Website Visitors (No Front-End Tracking)<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">WingMind AI runs exclusively inside the WordPress administrative interface (<code>wp-admin<\/code>) for authenticated users who possess content editing permissions (such as <code>edit_posts<\/code>). <strong>The plugin does not track, collect personal information from, or execute external AI scripts on public website visitors.<\/strong><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">3. Data Processed When Using the AI Assistant<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">When an authenticated site administrator or editor interacts with the WingMind AI assistant (via the Fullscreen Admin Agent or Block Editor Sidebar), the following types of information may be processed to fulfil prompt requests:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Prompt Input &amp; Chat History:<\/strong> The text instructions and questions you enter into the chat interface.<\/li>\n\n\n\n<li><strong>Uploaded Chat Attachments:<\/strong> Images, PDFs, and text files uploaded into the chat window to provide context or content for your site.<\/li>\n\n\n\n<li><strong>Site Context &amp; Metadata:<\/strong> Necessary context assembled to carry out editing instructions, including site settings, active theme details, block library summaries, the currently edited post\/page markup, and active skill playbooks.<\/li>\n\n\n\n<li><strong>Tool Results:<\/strong> Execution responses from WordPress tools (e.g. post query results, media metadata, taxonomy terms) returned during agent turns.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">4. External Services &amp; Third-Party Processing<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">To deliver AI functionality and manage subscriptions, WingMind AI communicates with specific third-party endpoints:<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">A. AI Providers: Anthropic Claude and Google Gemini<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">WingMind AI streams prompts, chat attachments, and tool calls to the AI provider in use: Anthropic Claude or Google Gemini. Requests are routed as follows:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Bring Your Own Key (BYOK) \/ Personal Browser Key:<\/strong> API calls connect directly from your browser or server to Anthropic or Google using the API key you provide. Your key is not transmitted to Web Bird servers.<\/li>\n\n\n\n<li><strong>Managed Subscription:<\/strong> On Anthropic Claude, your browser sends each request with a short-lived site token to the Web Bird relay, which forwards it unchanged to Anthropic and records its token counts and model for billing. On Google Gemini, Web Bird provisions short-lived authentication keys for your site to communicate with Google directly.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">For information regarding how Anthropic and Google process and protect API data, please review Anthropic&#8217;s Commercial Terms of Service and Privacy Policy, and the <a href=\"https:\/\/ai.google.dev\/\" target=\"_blank\" rel=\"noreferrer noopener\">Google AI Terms of Service<\/a> and Google Privacy Policy.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">B. Web Bird Subscription Backend (aibackend.webbird.net.au)<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Used exclusively when you activate a <strong>Managed Subscription<\/strong>. Transmitted data includes:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Licence &amp; Activation:<\/strong> Site URL, subscription token, and secret key for license verification and key minting\/refresh.<\/li>\n\n\n\n<li><strong>Telemetry &amp; Usage Metrics:<\/strong> Per-turn usage metadata including unique event IDs, token counts, and model inference tier (e.g. Flex inference) used solely for quota enforcement and billing. On Anthropic Claude, the Web Bird relay records these usage details as it forwards each request, instead of your browser sending them. Telemetry data is never used for advertising or marketing tracking.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><em>Note: Sites using BYOK (Bring Your Own Key) only do not send telemetry or usage events to Web Bird backend servers.<\/em><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">5. Local Data Storage &amp; AI Audit Logging<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">WingMind AI stores operational data locally within your WordPress installation&#8217;s database:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Plugin Settings:<\/strong> Site description, design tokens, tone preferences, and setup state.<\/li>\n\n\n\n<li><strong>Chat Sessions:<\/strong> Saved conversation history for admin user sessions.<\/li>\n\n\n\n<li><strong>AI Audit Log:<\/strong> A tamper-evident log containing before-and-after snapshots of content and settings modified by the AI. Audit log entries are retained locally for a default period of 90 days to support inspection and rollbacks.<\/li>\n\n\n\n<li><strong>Browser Storage:<\/strong> If an administrator inputs a personal Claude or Gemini key in the browser, it is stored strictly within browser <code>localStorage<\/code> (scoped to your origin) and is not synchronised to external servers.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">6. Standard WordPress Cookies &amp; Comments<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">When interacting with standard WordPress features on this website:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Comments:<\/strong> If visitors submit comments, we collect the data shown in the comments form, along with the visitor\u2019s IP address and browser user agent string to aid in automated spam detection.<\/li>\n\n\n\n<li><strong>Cookies:<\/strong> Standard administrative session cookies are set upon logging in to manage your session and screen preferences. Commenters may opt-in to saving their name and email in cookies for convenience.<\/li>\n\n\n\n<li><strong>Embedded Content:<\/strong> Articles or documentation on this site may include embedded media (e.g. videos). Embedded content from third-party websites behaves in the exact same manner as if the visitor visited the source site directly.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">7. Data Retention &amp; Plugin Uninstallation<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">You maintain full ownership and control over your WordPress data:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Deactivation:<\/strong> Deactivating the plugin preserves all settings, audit logs, and chat histories so you can reactivate without losing configuration.<\/li>\n\n\n\n<li><strong>Uninstallation (Delete):<\/strong> Deleting the plugin via the WordPress admin permanently deletes all plugin settings, stored subscription keys, chat histories, and custom AI audit log database tables. Content modifications (e.g. published pages, blog posts, and SEO meta) remain intact on your site.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">8. Your Rights &amp; Contact Information<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Under applicable privacy laws, including the Australian Privacy Principles (APPs) and GDPR where applicable, you have the right to request access to, correction of, or deletion of the personal information we hold about you. You may also request an export of your stored personal data.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you have any questions, concerns, or requests regarding this Privacy Policy or data handling in WingMind AI, please contact us:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Email:<\/strong> <a href=\"mailto:support@webbird.com.au\">support@webbird.com.au<\/a><\/li>\n\n\n\n<li><strong>Contact Page:<\/strong> <a href=\"https:\/\/web.bird.digital\/wingmind-ai\/contact-us\/\">https:\/\/web.bird.digital\/wingmind-ai\/contact-us\/<\/a><\/li>\n\n\n\n<li><strong>Website:<\/strong> <a href=\"https:\/\/web.bird.digital\/\">Web Bird Digital<\/a><\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Who we are<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong class=\"privacy-policy-tutorial\">Suggested text: <\/strong>Our website address is: https:\/\/web.bird.digital\/wingmind-ai.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Comments<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong class=\"privacy-policy-tutorial\">Suggested text: <\/strong>When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor\u2019s IP address and browser user agent string to help spam detection.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https:\/\/automattic.com\/privacy\/. After approval of your comment, your profile picture is visible to the public in the context of your comment.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Media<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong class=\"privacy-policy-tutorial\">Suggested text: <\/strong>If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Cookies<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong class=\"privacy-policy-tutorial\">Suggested text: <\/strong>If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select &#8220;Remember Me&#8221;, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Embedded content from other websites<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong class=\"privacy-policy-tutorial\">Suggested text: <\/strong>Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Who we share your data with<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong class=\"privacy-policy-tutorial\">Suggested text: <\/strong>If you request a password reset, your IP address will be included in the reset email.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">How long we retain your data<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong class=\"privacy-policy-tutorial\">Suggested text: <\/strong>If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What rights you have over your data<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong class=\"privacy-policy-tutorial\">Suggested text: <\/strong>If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Where your data is sent<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong class=\"privacy-policy-tutorial\">Suggested text: <\/strong>Visitor comments may be checked through an automated spam detection service.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Privacy Policy Last updated: October 12, 2026 This Privacy Policy explains how WingMind AI by Web Bird, developed by Web Bird Digital (https:\/\/web.bird.digital\/), collects, handles, stores, and protects data when you use the WingMind AI WordPress plugin, our website at https:\/\/web.bird.digital\/wingmind-ai\/, and related subscription services. For our broader agency privacy practices, please refer to the [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"open","template":"","meta":{"footnotes":""},"class_list":["post-3","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/web.bird.digital\/wingmind-ai\/wp-json\/wp\/v2\/pages\/3","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/web.bird.digital\/wingmind-ai\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/web.bird.digital\/wingmind-ai\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/web.bird.digital\/wingmind-ai\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/web.bird.digital\/wingmind-ai\/wp-json\/wp\/v2\/comments?post=3"}],"version-history":[{"count":11,"href":"https:\/\/web.bird.digital\/wingmind-ai\/wp-json\/wp\/v2\/pages\/3\/revisions"}],"predecessor-version":[{"id":273,"href":"https:\/\/web.bird.digital\/wingmind-ai\/wp-json\/wp\/v2\/pages\/3\/revisions\/273"}],"wp:attachment":[{"href":"https:\/\/web.bird.digital\/wingmind-ai\/wp-json\/wp\/v2\/media?parent=3"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}