Data controller

Oleg Kolesnyk (NagataPress), IČ 26336481, Konečná 902/19, 360 05 Karlovy Vary, Czech Republic. Contact for privacy matters: [email protected].

What we collect

Contact form: name, email, website (optional) and your message.

Customers: name, email, licence key, activated domains and order ID. Payment details are handled by Creem.io, we never see your card data.

Website: technically necessary cookies and anonymous usage statistics, if you consent.

What the plugin processes

NagataPress runs on your own WordPress installation. Content you translate is sent directly from your server to the AI provider you configured (e.g. Anthropic, OpenAI, Google, Mistral, OpenRouter) under your own API key. It does not pass through our servers. OpenRouter additionally receives your site address as the referer of each request.

The plugin contacts our licence API (api.nagatapress.com) to activate and deactivate a licence and to check for updates (the result is cached for 12 hours). The API is a proxy in front of our payment provider Creem.io, which acts as Merchant of Record. The plugin sends the licence key, your site address, the activation ID and the plugin version. It never sends page content, visitor data or your AI key.

The plugin sets no cookies for the visitors of your site. Its only cookie, nagatapress_edit, is set for an administrator who switches on the frontend editor and expires after one hour.

Language flags are bundled with the plugin, so the language switcher on your public pages makes no requests to an external CDN. The plugin screens in the WordPress admin load the font Space Grotesk from Google Fonts, so the administrator’s browser connects to Google when those screens are opened.

Purpose and legal basis

Performance of a contract, delivering licences, updates and support (Art. 6(1)(b)).

Legal obligation, accounting and tax records (Art. 6(1)(c)).

Legitimate interest, answering enquiries and securing our service (Art. 6(1)(f)).

Consent, analytics cookies and marketing emails (Art. 6(1)(a)), which you can withdraw anytime.

Processors

Creem.io (payments, Merchant of Record), our web hosting provider, and our email provider. Each processes data only on our instructions and under a data processing agreement.

Retention

Enquiries: up to 2 years. Customer and licence data: for the licence duration plus 3 years. Accounting records: 10 years as required by Czech law.

Your rights

You have the right to access, rectify, erase, restrict and port your data, to object to processing, and to withdraw consent. Write to [email protected], we respond within 30 days.

You may also lodge a complaint with the Czech Office for Personal Data Protection (ÚOOÚ), www.uoou.cz.