Privacy foundation draft

Privacy Policy

Draft last updated Aug 31, 2026.

Evidence basis for this draft

This draft is based on repository and runtime evidence available during implementation. The live AI The Architect WordPress blog currently uses the aithearchitect-site, esysapps-assistant, and wordpress-importer plugins with the Kadence theme. Runtime options show the ESysApps assistant is enabled in hosted Django widget mode with a configured dev.aitokenguard.com widget URL and legacy WordPress proxy mode disabled.

Claims about collection, retention, sharing, processors, cookies, analytics, and legal rights must be verified by the operator and a qualified attorney before publication as final policy.

WordPress site data

WordPress may process technical and account information needed to operate the site, administer logged-in users, secure the admin area, serve pages, manage comments if comments are enabled, and maintain ordinary CMS records. This can include login/session cookies, user account information for administrators or contributors, page requests, timestamps, IP addresses, browser or device details available to the server, and moderation or security records.

Server logs and security events

The WordPress host, web server, container infrastructure, security tooling, and related operational systems may record logs for availability, debugging, abuse prevention, security investigation, and maintenance. Exact log fields, retention periods, access controls, and downstream processors require operator confirmation before final publication.

AI Website Guide and assistant widget

The active AI Website Guide is loaded from a hosted AITokenGuard/Django widget, not from the legacy WordPress chat proxy. Repository evidence shows the legacy WordPress assistant can store a short-lived browser localStorage session identifier and can proxy message, page, site, metadata, and lead-form fields when legacy proxy mode is enabled. Runtime evidence for this site shows that legacy proxy mode is currently disabled and a hosted widget URL is configured.

The hosted widget may process visitor prompts, conversation state, feedback, citations, telemetry, page context, technical/session identifiers, and abuse-prevention signals according to the AITokenGuard/Django runtime configuration. Exact fields, retention, model/provider processing, subprocessors, and deletion/export behavior are marked needs_operator_or_attorney_review until verified from the runtime owner.

Contact, subscriptions, and forms

Repository evidence includes an assistant lead form in the legacy WordPress plugin, with name, email, optional company, message, page title, page URL, and site key routed by email when that legacy mode is active. Current runtime evidence does not show a separate AI The Architect newsletter subscription system in this plugin. Any active contact forms, newsletter tools, CRM integrations, email services, spam-prevention tools, or embedded forms must be inventoried before final policy claims.

Analytics and cookies

No AI The Architect-specific analytics provider was confirmed in the inspected plugin code. The broader WordPress theme and active plugins may still set operational, preference, admin, security, or embedded-service cookies. Any analytics, advertising, consent, or tracking tools enabled outside the inspected plugin code must be confirmed by the operator before this policy is finalized.

Third-party services and processors

Confirmed or expected services for review include WordPress hosting, the WordPress database, the Kadence theme, the hosted AITokenGuard/Django widget, email handling when forms are enabled, browser/device infrastructure, and any security/logging systems. Processor names, locations, agreements, retention terms, and data-request procedures require operator and attorney review.

Access, correction, deletion, and questions

For privacy questions or requests, email info@esysapps.com. Do not send passwords, credentials, confidential datasets, protected personal information, or identity documents until a secure verification process is confirmed. Applicable privacy rights depend on location, role, data type, and governing law, and require attorney review before final policy language is published.

Changes to this notice

This draft should be updated when site features, widgets, analytics, forms, processors, hosting, retention settings, or applicable legal requirements change. The final policy should include a reviewed effective date and a documented owner for future updates.