Privacy Policy for Uncanny Automator WordPress Plugin

Last updated: 2026-04-28

At a glance

We don’t ask for personal information unless we truly need it. We don’t share your personal information except to comply with the law, to provide our Services, and to protect our rights. We don’t sell your personal information. This Privacy Policy explains what we collect, why we collect it, who we share it with, and what choices you have.

This policy applies to automatorplugin.com, the Uncanny Automator WordPress plugin, Uncanny Agent, and the related Services described in our Terms & Conditions. Capitalized terms not defined here have the meanings given in the Terms.

When you use the Services to process personal data of your end users (for example, in an Automator recipe that handles your customers’ data, or in an Uncanny Agent conversation that reads data from your site), you act as the controller (or business) and we act as the processor (or service provider). In that role, our Data Processing Addendum governs how we handle that data on your behalf.

Who we are

Uncanny Owl Inc. is a Canadian corporation, with our main office in Markham, Ontario. For privacy questions, data-subject rights requests, and DPA requests, contact us at:

[email protected]

1. What we collect and why

1.1 Website visitors

When you visit automatorplugin.com, we (and our analytics providers) automatically collect:

Browser type, language preference, operating system
Referring URL and pages viewed
IP address and approximate geolocation derived from it
Request timestamps
Interactions with pages, forms, and on-screen content (via session replay — see §3 below)

Why: to operate and secure the Site, prevent fraud and abuse, understand how the Site is used, and improve it. Legal basis (where GDPR applies): legitimate interests (operating and improving the Site) and, for analytics and session replay, your consent through our cookie banner.

1.2 Account, billing, and license data

When you create an account or purchase a Subscription, we collect:

Name, email address, billing address
Payment information (processed by Stripe or PayPal — we do not store full card numbers)
License Key and entitlements
Tax information where required

Why: to provide the Services, process payments, deliver License Keys, send transactional emails, comply with tax and accounting obligations. Legal basis: contract (to provide what you bought) and legal obligation (tax, accounting, fraud prevention).

1.3 Support communications

When you contact us for support, we receive whatever you choose to share — typically your email, account details, and the question itself, along with any logs, screenshots, or attachments you send. Support tickets are stored in Help Scout.

Why: to respond to and resolve your request, train our team, and improve the Services. Legal basis: contract and legitimate interests.

1.4 Newsletter and marketing

If you sign up for our newsletter or you’re an existing customer, we may send you product updates, promotions, and educational content. We process your name and email through Lindris.

Why: to keep you informed about updates and offers relevant to you. Legal basis: consent (where required) or legitimate interests, with the right to opt out at any time.

1.5 Plugin usage telemetry

The Plugin can transmit limited usage data back to us, including:

Active plugins and themes on your WordPress site
Plugin settings (excluding sensitive values such as API keys, tokens, and passwords)
Recipe statistics (counts and types — not contents)
Onboarding and walkthrough completion

Why: to improve the product, prioritize integrations, and reproduce issues in customer environments. Legal basis: legitimate interests.

Opt-out: Free users with a connected account or paid users can opt out by contacting support. Free users without an account can enable telemetry under Automator → Settings → Improve Automator.

1.6 Uncanny Agent conversations

When you use Uncanny Agent, we process the Inputs you provide via the chat interface and the Outputs the Agent generates, together with the data the Agent reads from your WordPress site or connected services to complete your requests. Uncanny Agent does not access data outside the scope of what is needed for your request. The full data terms for Uncanny Agent are in §6 of this policy and §9 of the Terms.

1.7 Affiliate program data

If you join the affiliate program, we collect your name, email, PayPal account, referral activity, and commission balances. Why: to operate the affiliate program. Legal basis: contract.

2. How we use the data we collect

We use the data we collect to:

Provide, secure, and improve the Services
Process transactions, deliver License Keys, and provide support
Send transactional, service, and (with your consent or where permitted) marketing communications
Monitor and analyze use of the Site and Services
Detect, prevent, and respond to fraud, abuse, and security incidents
Comply with legal obligations and enforce our Terms
For Uncanny Agent specifically, to fulfill your requests (see §6)

We do not sell personal information, and we do not use your Uncanny Agent Inputs or Outputs to train, fine-tune, or otherwise develop machine-learning models.

3. Cookies, analytics, and session replay

We use cookies and similar technologies to operate the Site, remember your preferences, understand how the Site is used, and (where you consent) measure marketing performance.

3.1 Categories of cookies and technologies

Category	Purpose	Examples
Strictly necessary	Authentication, cart/checkout, security	Login session, CSRF tokens, Cloudflare security cookies
Functional	Remember preferences and settings	Language, theme, dismissed banners
Analytics	Measure usage and improve the Site	Google Analytics 4, Microsoft Clarity
Marketing / advertising	Measure and target marketing	Meta (Facebook) Pixel, Google DoubleClick / Google Ads remarketing

You can manage your cookie preferences through our cookie banner or your browser settings. Disabling cookies may affect Site functionality.

3.2 Affiliate cookies

If you click an affiliate link, an affiliate cookie may be set so that we can credit a referring affiliate for any subsequent purchase. Affiliate cookies do not collect personal information beyond what is necessary to attribute the referral.

3.3 Do Not Track

Some browsers send a “Do Not Track” signal. There’s no industry standard for honoring DNT, so we don’t respond to it. We do honor opt-out preferences expressed through our cookie banner and through opt-out signals required by applicable law (including the Global Privacy Control / GPC, where required by California law).

4. Who we share data with

We share data only with subprocessors who help us provide the Services, with the limited categories of recipients described below, and where required by law.

4.1 Subprocessors

The current list of subprocessors that process personal data on our behalf is published at our subprocessors page.

4.2 Other recipients

We may share personal data:

With our professional advisors (legal, accounting, insurance) under duties of confidentiality.
In connection with a corporate transaction (merger, acquisition, financing, sale of assets), in which case the recipient will be bound by terms substantially similar to this policy.
To comply with law (subpoena, court order, lawful government request, or to investigate fraud or security incidents).
To protect our rights, property, or safety, or those of our users or others.

4.3 What we do not do

We do not sell your personal information for money.
We do not use Uncanny Agent Inputs or Outputs to train, fine-tune, or otherwise develop machine-learning models.
We do not share Uncanny Agent Inputs or Outputs with our subprocessors except as necessary to provide the Service.

5. Plugin and recipe integrations

Uncanny Automator lets you connect third-party services (“apps”) to your WordPress site and pass data between them through your recipes.

Data flow: Data passes between your WordPress site, our API server (where required for the integration), and the connected third-party service. Our role is to relay or transform the data as configured by your recipes.
What we log: We log a minimal record of API requests for billing, abuse-prevention, and troubleshooting purposes. We do not log the contents of personal data passing through recipes except where required to diagnose a specific issue you report.
Third-party services: Data passed to a third-party service is governed by that service’s terms and privacy policy, not this policy.
Webhook integration: When you configure a Google Sheets webhook, modified rows are sent to the URL you specify.

5.1 Google API services

Where you connect Google APIs (Drive, Sheets, Calendar, Contacts, YouTube, Workspace), Uncanny Automator’s use and transfer of information from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

Google API data is used solely to perform the automation you have configured.
Google API data is not used to develop, improve, or train AI/ML models.
You can revoke our access to your Google account at any time through your Google security settings.

5.2 BYOK AI integrations

Uncanny Automator includes “AI Actions” that let you connect AI services (OpenAI, Anthropic, DeepSeek, and others) using your own API key. These integrations are separate from Uncanny Agent.

Only data you explicitly configure in a recipe is sent to the AI service.
The AI service processes that data under your account and your contractual relationship with that provider — not ours.
Use of these integrations is optional.

5.3 Facebook / Meta integrations

We do not share Facebook Restricted Platform Data with any third party.

6. Uncanny Agent

This section applies specifically to Uncanny Agent. The full terms governing Uncanny Agent are in §9 of the Terms.

6.1 What we process

Uncanny Agent processes:

Your Inputs — the messages and instructions you provide via the chat interface
Your Outputs — the responses Uncanny Agent generates
Data Uncanny Agent reads from your WordPress site or connected services to complete your requests
Metadata about the conversation (timestamps, model used, token counts, billing meters)

Uncanny Agent does not access data outside the scope of what is needed for your request.

6.2 How we use Inputs and Outputs

We may review and sample Inputs and Outputs to operate, secure, troubleshoot, and improve Uncanny Agent — including for internal evaluation, quality assurance, prompt iteration, and red-teaming. We do not use Inputs or Outputs to train, fine-tune, or otherwise develop machine-learning models, and we do not use them to build retrieval indexes or training datasets.

6.3 Third-party AI providers

To provide Uncanny Agent’s functionality, your Inputs and related data may be transmitted to:

Anthropic, PBC (Claude)
Google LLC (Cloud Vertex AI)
Amazon Web Services, Inc. (Bedrock)
DeepInfra, Inc.

Each of these providers operates under their commercial enterprise terms with us. Under those terms, none of these providers uses your Inputs or Outputs to train their foundation models, and data is retained only for the limited periods needed to operate the service and meet abuse-monitoring or legal-compliance obligations.

6.4 Retention

You may delete your Uncanny Agent conversation history at any time from within the product, or by emailing [email protected]; deletion requests are processed within 30 days. We may retain a minimal record of the fact that a conversation occurred (without its contents) for legal, tax, accounting, fraud-prevention, or audit purposes.

6.5 Accuracy and high-risk uses

Uncanny Agent may produce inaccurate or incomplete Output. You should not rely on Output as a sole source of truth or as a substitute for professional advice, and you may not use Uncanny Agent or its Output as the sole or material basis for decisions with legal or similarly significant effect on a person (credit, employment, education, housing, insurance, immigration, public benefits, legal rights, medical diagnosis or treatment). See §9.3 of the Terms.

6.6 Children

Uncanny Agent is not intended for, and may not be used by, anyone under 13. Users between 13 and 18 may use it only with parental or guardian involvement and consent. See §9 below.

7. Retention

We keep personal data only as long as we need it for the purpose we collected it, to comply with legal obligations, to resolve disputes, and to enforce our agreements.

11. Your rights

Your privacy rights depend on where you live. In all cases, you can exercise them by emailing [email protected]. We’ll respond within the timeframes required by applicable law — generally within 30 days.

12. Affiliate disclosure

Some pages on our Site contain affiliate links. If you click one and make a purchase, we may earn a commission.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top tells you when the current version took effect. Uncanny Owl encourages visitors to frequently check this page for any changes to this privacy policy. If you keep using the Services after a change takes effect, that counts as accepting the updated policy.

This Privacy Policy supersedes the version dated 2025-12-18.