Privacy policy

In short

• This website has no analytics, no advertising and no tracking cookies.
• The TurtleReport plugin runs on your own WordPress site. It sends nothing to us.
• The plugin only contacts Google, Slack or an AI provider when you set that up, and Slack and AI only when someone uses them.

This website

This website is a set of static pages. It doesn't use analytics, advertising, tracking pixels or cookies, has no sign-up or contact forms, and loads its fonts, images and videos from its own server rather than from third parties.

Like any website, the company hosting it may keep standard access logs, such as your IP address, browser type and the pages you request, for security and to keep the site running.

Downloading the plugin is a direct file download. We don't ask for your name or email.

The TurtleReport plugin

TurtleReport is installed on your own WordPress site and runs on your server. It adds nothing to your public pages and collects nothing from your visitors.

It reads reporting data from Google using your own Google Cloud credentials, and stores connections, sites, access grants, delivery history and cached report data in your WordPress database. Credentials are stored encrypted. None of this is sent to the plugin author or any other party.

The plugin adds suggested text to WordPress's own Privacy Policy guide (Settings → Privacy), which you can use for your site's policy.

Services the plugin contacts

Requests are made from your server, and only for features you set up:

• Google (OAuth, Search Console, Analytics Data and Admin, and Business Profile APIs): after an administrator adds a connection, to read data for the sites and sections they choose. Google's Terms of Service, Privacy Policy and API Services User Data Policy apply.
• Slack: only if an administrator saves a webhook, and only when someone presses Send to Slack or sends a test message. The message contains the client's name, the issue, its numbers, the recommended checks, the optional note, the sharer's name and a link to the report.
• AI providers (OpenAI, Anthropic, Google Gemini or xAI): only while the AI Advisor is switched on and someone asks a question, using your own API key. It sends the question, the earlier turns of that conversation and the client numbers it needs. It never sends email addresses, WordPress user names, Google account details, tokens or keys. Each provider's own terms and privacy policy apply.
• Email: scheduled reports go through your site's own mail setup, to the addresses an administrator enters.

The full list, with what each request contains, is in Data and external services.

Your clients' data

When you use TurtleReport for clients, you decide which data is fetched, who can see it and who receives reports. You are responsible for having the right to process your clients' data and for telling them how you use it. Search queries, page addresses and other report content can contain personal data, so review it before switching on the AI Advisor or sharing to Slack.

Keeping and deleting data

Data stays in your WordPress database until you delete it. Reports are cached for up to three hours for recent days and up to a day for older periods. Deleting the plugin revokes Google sign-ins where possible and removes all connections, credentials, sites, access grants, cached data and the Report viewer role.

Changes to this policy

If this policy changes, we'll update this page and the date at the top.

Contact

Questions about this policy: jaher5881@gmail.com.