Privacy Policy

Short and plain. Last updated 2026-10-13.

Last updated: 2026-10-13

This policy covers two things: this website, and the KanbanWP plugin you install on your own site.

This website

  • The website is static. It has no user accounts, no logins and no shopping cart.
  • We do not run analytics or advertising trackers on the site.
  • If you email us, or write to hello@kanbanwp.com, we receive your email address and your message. We use them only to reply to you and to handle the issue you raised. We do not add you to a mailing list or sell or share your details.
  • We keep correspondence only as long as it is useful for support, and you can ask us to delete it.
  • Downloading the plugin does not require an account or a license key.
  • Our hosting provider may keep standard server logs, such as IP address and requested page, for security and reliability.

The KanbanWP plugin

The plugin runs on your WordPress site. We do not host it and we do not receive your data.

What it stores

Boards, stages, tasks, comments, attachment references, activity, notifications, saved views, labels and settings are stored in tables in your own WordPress database. You control that database and any backups of it. The plugin uses the kwp_ table prefix.

What it sends out

The plugin makes outgoing requests only to services you configure:

  • AI provider. If you add an API key, requests for AI features go from your server to the provider you choose (OpenAI, Anthropic, Google Gemini, or an OpenAI-compatible endpoint you enter). The request includes the text needed for that feature, such as a task title and description. The provider’s own terms and privacy policy apply to that data. If you do not add a key, nothing is sent.
  • Slack and Discord. If you enter a webhook URL, activity messages are posted to it.
  • Outgoing webhooks. If you create webhooks, event data is sent to the URLs you specify.
  • Email. Notifications and digests are sent through your site’s normal WordPress email setup.

The plugin does not phone home, check a license, or send usage statistics to us.

MCP access

If you enable the MCP server, anyone with your MCP token can read and change your boards. Keep the token secret and rotate it if it leaks. Calls are logged in your activity log.

Public board links, if you turn them on, show a read-only snapshot of non-internal tasks and comments, with display names but not email addresses. You can revoke a link at any time. Users with the client role see only what you share with them.

Removing your data

Plugin data stays in your database when you uninstall unless you enable the Delete data on uninstall setting first. You can export your data as JSON at any time.

Your responsibilities

If you use KanbanWP to store information about other people, such as clients, leads or team members, you are responsible for how you collect and use it and for any notices or consents that your local rules require. This policy does not make any legal compliance claims about your use of the plugin.

Changes

If we change this policy, we will update the date at the top of this page.

Contact

Questions about this policy: hello@kanbanwp.com.