Privacy policy
PressHelm is a service by CodeSolz ("we"). It has three parts: the PressHelm Vibe AI plugin on your WordPress site, PressHelm Cloud (app.presshelmai.com), and your own chat channel (your Telegram bot, or Claude / ChatGPT). This policy explains what we collect, why, where it is kept and for how long.
What we collect
- Account: your email address and a hashed password, plus optional two-factor settings.
- Connected sites: the site address and name, the site's public signing key, and a short site report (WordPress and PHP versions, active theme and plugins, content counts, the limits you set, recent PHP fatal errors with secrets masked).
- Credentials: your AI provider key or sign-in token and your Telegram bot token, encrypted in our vault. They are not kept on your site.
- Conversations and tasks: your messages to your developer, its replies, the tasks it runs, approvals, results and the record of changes, so it can continue a conversation, show you what changed and let you undo it.
- Files you send: photos and files you send in Telegram are held briefly so your site can fetch them (about 24 hours in the cloud); files in your site's private file box are kept about 7 days.
- AI usage: tokens and estimated cost per day and model, to show you usage and enforce your spend limits.
- Connected apps: for Claude / ChatGPT connections, the app, who allowed it and when it was last used.
- Security logs: an audit log of sensitive actions and technical logs (IP addresses are stored only as hashes in request logs).
Why we use it
- To run the service you asked for: understand your request, act on your site, ask for approvals, report results and let you undo changes.
- To keep it safe: signed commands, approvals, site checks, monitoring alerts and abuse prevention.
- To show usage and enforce the limits you set.
The legal basis is the performance of our contract with you, and our legitimate interest in keeping the service secure.
Who else receives data
- Your AI provider (OpenAI, Anthropic, Google, OpenRouter or a service you choose): the conversation and site details a request needs, sent with your own key under your agreement with them.
- Telegram: messages between you and your bot.
- Claude / ChatGPT: when you connect PressHelm there, the results of the tools it uses, under your agreement with Anthropic or OpenAI.
- Google PageSpeed Insights: the page address when you ask for a speed test.
- Hosting: PressHelm Cloud runs on servers of Hetzner Online GmbH in the European Union.
We do not sell personal data and do not share it for advertising.
How long we keep it
- Credentials: until you change them, disconnect the site or close your account.
- Telegram files in the cloud: about 24 hours. Approval requests expire after 30 minutes.
- Conversations, tasks and usage records: while your account is active, so you can review them; deleted when you close your account.
- Encrypted backups of the cloud database: up to 14 days.
- On your site, saved copies for undo are kept 30 days and are deleted when you uninstall the plugin's data.
Security
Credentials are encrypted at rest, every command to your site is signed and checked, data in transit uses HTTPS, and each customer's data is separated at the database level. Your bot answers only the Telegram account you linked.
Your rights
You can ask for a copy of your data, its correction or deletion, object to processing, or ask us to restrict it. Disconnecting a site in WordPress deletes its credentials in the cloud. To use your rights or ask a question, write to hello@presshelmai.com. You can also complain to your data protection authority.
Cookies
This website sets no tracking cookies. PressHelm Cloud uses only the cookies needed to sign you in and keep a sign-in step secure.
Changes
We will update this page when the service changes, and tell account holders about important changes.