Privacy Policy
Last updated: April 20, 2026
Wigmorean Inc. (“Wigmorean,” “we,” “us,” or “our”), a Delaware corporation, respects your privacy. This Privacy Policy explains what personal information we collect, how we use it, with whom we share it, and the rights you have over it.
This policy applies to:
- Our website at wigmorean.com, including the client portal hosted there
- The Wigmorean Suite WordPress plugin ecosystem running on sites we host or manage
- The Wigmorean Cloud content infrastructure
- Support, billing, and related services
If you are a client of a business that uses Wigmorean to host their site (for example, a student, member, or customer of one of our clients), this policy explains Wigmorean’s role in processing your data. Your primary relationship is with that client, who is the data controller for your information. Please consult that client’s own privacy policy for the terms that govern your relationship with them.
1. Information We Collect
1.1 Information You Provide Directly
When you create an account, purchase a subscription, or contact us, we collect:
- Identity and contact information — name, email address, mailing address, phone number, organization name
- Account credentials — username, password (stored hashed), security question answers, passkey credentials where applicable
- Billing and payment information — billing address, tax identifiers where applicable, and payment method details. Full card numbers are handled directly by Stripe, Inc.; we store only a token and the last four digits of the card for reference.
- Communications — messages you send through our support channels, feedback forms, or client portal
1.2 Information We Collect Automatically
When you use our Services, we automatically collect:
- Technical data — IP address, browser type and version, operating system, device identifiers, referring URLs
- Usage data — pages viewed, features used, time and duration of sessions, click paths, error reports
- Cookies and similar technologies — see Section 7 for details
- Hosting telemetry — for hosted sites, we collect standard server logs (requests, response codes, timing), bandwidth consumption, storage usage, database performance metrics
1.3 Information from Third Parties
We may receive information about you from:
- Payment processors (Stripe) — transaction confirmations, fraud signals
- Hosting vendors (WPMU DEV / Incsub, LLC) — provisioning status, site health data, usage limits
- Authentication providers (Microsoft, Google) — where you sign in using single sign-on or OAuth
- Domain registries and DNS providers — registration confirmations, WHOIS data
- Email service providers — bounce and delivery status
1.4 Client-Provided End-User Content
For sites hosted on our platform, our clients upload content, configure features, and often collect information from their own end users (for example, student enrollments on an education platform or subscribers on a membership site). Wigmorean processes this end-user information only on behalf of our client and under their direction. We do not use end-user content to market our own services or share it with unrelated third parties.
2. How We Use Your Information
We use the information we collect to:
- Provide the Services — create your account, provision hosted sites, render your content, deliver media, process storage and bandwidth usage
- Process payments — charge subscriptions, handle renewals, issue refunds where due, prevent payment fraud
- Communicate — respond to support requests, send transactional emails (receipts, service notices, security alerts), notify you of material changes to these policies or to the Services
- Improve the Services — analyze usage patterns, diagnose errors, develop new features, optimize performance
- Keep the Services safe — detect and prevent fraud, abuse, security incidents, and violations of our Terms of Service
- Comply with legal obligations — respond to lawful requests from authorities, enforce our Terms, exercise legal claims or defenses
- Send marketing communications — only where you have opted in, and always with an unsubscribe option
We do not sell personal information. We do not rent personal information. We do not share personal information with advertising networks for behavioral targeting.
3. Our Role: Controller vs. Processor
Understanding our role under data-protection law matters for your rights.
3.1 When We Are a Controller
For information collected directly from you — for example, when you create a Wigmorean account, purchase a subscription, or contact support — Wigmorean is the data controller. We decide what data is collected and why.
3.2 When We Are a Processor
For content and end-user data on sites we host for our clients (for example, student records on a learning platform, member information on a community site, or reader accounts on a content platform) — our client is the data controller and Wigmorean is a data processor. We process that data only on the client’s documented instructions.
If you are an end user of one of our clients’ sites and you want to exercise your data rights (access, correction, deletion, etc.), contact the client directly. They, not we, decide how to respond. We will support them as their processor.
3.3 Data Processing Addendum
If you are a Wigmorean client who needs a formal Data Processing Addendum (DPA) for your own compliance program (GDPR, CCPA, HIPAA-adjacent workflows, etc.), contact privacy@wigmorean.com. We offer a standard DPA template and can negotiate specific terms where business needs justify it.
4. How We Share Information
We share information only in the limited circumstances described below.
4.1 Service Providers
We work with third parties that help us operate the Services. These providers access personal information only to perform services on our behalf and are contractually bound to protect it. Current key providers include:
| Provider | Purpose |
|---|---|
| Incsub, LLC (WPMU DEV) | Managed WordPress hosting, client portal, reseller billing infrastructure |
| Stripe, Inc. | Payment processing, billing, subscription management |
| Bunny.net (BunnyWay d.o.o.) | Content delivery network, object storage for media and files |
| Cloudflare, Inc. | DNS, edge security, and traffic routing |
| Google LLC | OAuth authentication and, where clients opt in, Google Drive integration for rendering client content |
| Microsoft Corporation | Microsoft 365 single sign-on for clients that use it |
| Brevo (Sendinblue SAS) | Transactional and marketing email delivery |
| 8×8 (Jitsi as a Service) | Video conferencing infrastructure where clients use live-session features |
| Twilio Inc. | SMS notifications where enabled |
This list evolves as we improve the platform. We review each provider for security and privacy practices before integrating them.
4.2 Legal and Safety
We may disclose information when we reasonably believe it is necessary to:
- comply with applicable law, regulation, legal process, or a binding governmental request
- enforce our Terms of Service
- prevent fraud, security incidents, or harm to rights, property, or safety
- protect Wigmorean, our users, or the public
Where permitted, we will notify you of legal requests affecting your data and will challenge requests we consider overbroad or improper.
4.3 Business Transfers
If we are involved in a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you (by email or through the client portal) before your information becomes subject to a different privacy policy.
4.4 With Your Consent
We may share information for other purposes with your explicit consent.
4.5 Aggregated or De-Identified Data
We may use and share aggregated or de-identified data — information that cannot reasonably be linked to an individual — for analytics, research, reporting, and product improvement.
5. International Data Transfers
Wigmorean is headquartered in the United States. Our service providers operate data centers in the US, EU, and other regions. When we transfer personal information across borders, we rely on appropriate safeguards:
- Standard Contractual Clauses approved by the European Commission, where applicable
- Adequacy decisions where recognized
- Vendor-specific transfer mechanisms (for example, Stripe’s and Cloudflare’s published frameworks)
If you are in the European Economic Area, the United Kingdom, or another jurisdiction with data-export restrictions and want more detail on our transfer mechanisms, contact privacy@wigmorean.com.
6. Data Retention
We retain information only as long as necessary for the purposes described in this policy:
- Account data — for the life of your account plus a reasonable period afterward to handle renewal, dispute resolution, and recordkeeping (typically up to 7 years for tax and accounting purposes)
- Billing records — at least 7 years, consistent with US tax requirements
- Site content — for the life of your subscription; on termination, we provide a 30-day export window, after which we may permanently delete it
- Support communications — up to 3 years
- Server logs and security telemetry — typically 30-90 days, longer where required for ongoing security investigations
- Backup copies — rotating backup windows with oldest backups expired on a rolling schedule
We may retain information longer where required by law, to establish or defend legal claims, or to comply with regulatory obligations.
7. Cookies and Similar Technologies
7.1 What We Use
We use cookies, local storage, and similar technologies to:
- keep you signed in
- remember your preferences
- protect against fraud and abuse
- measure aggregated usage (in a privacy-respecting way)
We do not use third-party advertising cookies or behavioral retargeting pixels on wigmorean.com.
7.2 Your Choices
Most browsers let you refuse or delete cookies through settings. Refusing essential cookies may prevent certain features from working (for example, signing in). See your browser’s help documentation for instructions.
7.3 Client Sites
Sites we host for our clients may set their own cookies. Those cookies are controlled by the client, not by us. Check the site’s own cookie notice.
8. Your Rights
Depending on your location, you may have rights over your personal information.
8.1 Rights Under GDPR (European Economic Area, UK)
- Access — request a copy of personal information we hold about you
- Rectification — correct inaccurate or incomplete information
- Erasure — request deletion, subject to legal and legitimate-interest exceptions
- Restriction — limit how we process your information
- Portability — receive your information in a structured, machine-readable format
- Objection — object to processing based on legitimate interests or direct marketing
- Withdrawal of consent — where processing is based on consent, withdraw at any time
- Complaint — lodge a complaint with a supervisory authority
8.2 Rights Under CCPA / CPRA (California)
- Know — what categories of personal information we collect, use, and share
- Access — specific pieces of personal information we have about you
- Delete — request deletion, subject to legal exceptions
- Correct — correct inaccurate information
- Opt out of sale or sharing — we do not sell or share personal information for cross-context behavioral advertising, but you have the right to opt out regardless
- Limit use of sensitive personal information — where applicable
- Non-discrimination — we will not discriminate against you for exercising these rights
8.3 Other Jurisdictions
Residents of Virginia, Colorado, Connecticut, Utah, and other US states with comprehensive privacy laws have rights similar to those listed above. We honor all applicable state-level privacy rights.
8.4 How to Exercise Your Rights
Email privacy@wigmorean.com with:
- your name and the email address associated with your account
- a description of the right you wish to exercise
- enough information for us to verify your identity
If you are an end user of a site we host for a client (for example, a student on an education platform), please direct your request to that client first. They are the data controller. We will support them as their processor.
We will respond within the timeframes required by applicable law (typically 30 days, extendable where permitted).
9. Security
We implement technical and organizational measures designed to protect personal information, including:
- encryption in transit (TLS 1.2+) for all web traffic
- encryption at rest for sensitive stored data (AES-256 for database credentials vaults, backups, and signed-URL tokens)
- principle-of-least-privilege access controls for our team
- signed-URL patterns for media delivery so that content URLs cannot be shared indefinitely
- watermarking of delivered document content to deter unauthorized redistribution
- regular backups with rotation schedules
- vulnerability scanning and security patching on managed sites
- incident response procedures
No method of transmission or storage is perfectly secure. We cannot guarantee absolute security. If we learn of a security incident affecting your personal information, we will notify you in accordance with applicable law.
10. Children’s Privacy
The Services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it promptly. If you believe a child has provided information to us, contact privacy@wigmorean.com.
For sites our clients operate that may collect information from minors (for example, K-12 education platforms), the client is responsible for complying with COPPA, FERPA, and other applicable laws. We support clients’ compliance programs as their processor.
11. Third-Party Links and Services
Our Services may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of those third parties. Review their privacy policies before providing them with personal information.
12. Do Not Track
Some browsers support a “Do Not Track” (DNT) signal. Because there is no industry consensus on how to interpret DNT signals, we do not currently respond to them. We honor specific opt-out rights as described in Section 8.
13. Changes to This Policy
We may update this Privacy Policy periodically. When we make material changes, we will notify you by email or through the client portal at least 30 days before the changes take effect. The “Last updated” date at the top of this policy reflects the most recent revision. Your continued use of the Services after the effective date constitutes acceptance.
14. Contact Us
Questions, concerns, or requests about privacy? Contact us:
Wigmorean Inc. Delaware corporation
- General privacy inquiries:
privacy@wigmorean.com - Data subject requests (GDPR, CCPA, etc.):
privacy@wigmorean.com - Security incident reporting:
security@wigmorean.com - General support:
support@wigmorean.com - Website: https://wigmorean.com/
We aim to respond to all privacy inquiries within 30 days.
This Privacy Policy is effective as of the date first set forth above. Wigmorean Inc. is a Delaware corporation.