Privacy
AI Visibility, WordPress and WooCommerce plugin, version 1.7.11. Last updated: 5 September 2026.
The plugin runs entirely on your own server. It reads your product pages, writes what it extracts back into your own database, and publishes it from your own domain. Nothing about your products, your orders, your customers or your visitors is ever sent to us or to anyone else. Every outbound connection it can make is listed below, with what it carries and how to switch it off.
What leaves your website
Six destinations. Each one exists for a feature, and none of them carries anything about your visitors.
| Destination | Data sent | When | Can it be turned off? |
|---|---|---|---|
api.lemonsqueezy.com | Your licence key, your site address and the installed plugin version | When you activate a licence, then once every 30 days to re-check it. If the check cannot be reached, the plugin keeps working for 45 days before it asks again | Only by not using a licence |
mrdigital.ro | The same three things: licence key, site address, installed version | At most every six hours, to ask whether a newer version exists, so updates appear in your normal WordPress updates screen | Only by not using a licence |
openai.com and www.perplexity.ai | Nothing. These are plain reads of five public files listing the address ranges those companies publish for their crawlers | At most once a day, cached for 24 hours. Used to tell a real GPTBot or PerplexityBot from something wearing its name | No, and nothing is sent |
api.indexnow.org | The address of a page you just published or changed | On publish or update, only while the module is on | Yes, in Modules, Instant indexing (IndexNow) |
| Your own website | An HTTP request to one of your own pages, sent with an AI crawler’s user agent | Only when you run the crawler reachability check or the speed and content checks on the Status screen. One request per crawler checked | Yes, it only runs when you click it |
| An AppSumo licence endpoint | Licence key, site address, installed version | Only on an installation configured for AppSumo licences. On an ordinary installation this address is not set and no call is ever made | Not applicable to a normal licence |
The weekly report digest, when you turn it on in the Report tab, is an email your own WordPress installation sends to your site’s admin address, through whatever mail setup your site already uses. It goes to you, not to us.
What we do not do
- No analytics, telemetry or usage tracking. We do not know how you use the plugin.
- No content, customer data or order data ever leaves your site. The plugin does not read orders, customers or payments at all.
- No third-party scripts loaded in your admin or on your storefront. The Google Preferred Source button, when you enable it, is a plain link in the form Google documents; nothing is loaded from Google.
- No account required beyond the licence key itself.
- No cookies. The plugin sets no cookies, on the storefront or in the admin.
- No IP addresses stored. The two counters below work from daily totals.
What the plugin counts, and how
Two screens show you numbers about who reads your site. Both are computed on your server from the request WordPress is already handling, and both keep totals, not visits.
AI crawler requests
When a request identifies itself as one of the known AI crawlers, the plugin adds one to that crawler’s count for the day, per surface (text version, llms.txt, AI sitemap, ordinary page), and one to the count for that page address. It keeps 180 days of daily totals and the most requested addresses. No user agent string, no IP address and no timestamp of an individual request is stored.
To tell a genuine crawler from a fake, the request’s address is checked against the crawler owner’s published address ranges or reverse DNS. The verdict is cached for 24 hours under a one-way hash of the crawler name and the address, so the same crawler is not looked up on every request. The address itself is not stored, and the cache expires on its own.
Visits from AI assistants
When a human visitor arrives from chatgpt.com, perplexity.ai, claude.ai, Copilot or Gemini, recognised by the Referer header the browser sends on its own or by the utm_source tag ChatGPT adds to its links, the plugin adds one to that source’s total for the day, and one to the landing page’s count. Daily totals per source, up to 200 landing pages, and nothing else. No cookie, no IP address, no record of an individual visit. There is nothing to consent to and nothing to explain to your visitors.
What the plugin stores on your site
- Settings, in the WordPress options table.
- The AI fields you or the bulk pass have filled in (summary, attributes, buyer questions, alt text), as post meta and term meta on your own products, pages and categories.
- Licence status, the IndexNow key, the cached crawler address ranges and the two counters above, in the options table.
- Alt text written for images that had none, in your media library.
One thing worth reading twice
The bulk fill writes alt text into your media library for images that have none. This is a real, permanent change to your data. It is the point of the feature, and it is not undone when the plugin is removed. Alt text you wrote yourself is never touched or overwritten.
Everything else the plugin writes is removed on uninstall if you tick “Delete all plugin data when the plugin is deleted” in the Import / Export tab. That option is off by default, so uninstalling never destroys your work by accident. Deactivating the plugin without uninstalling it keeps everything in place.
The free check
When you ask for a free check at mrdigital.ro/ai-visibility, we store the shop address you typed, the email address you gave us, and what our scanner read from the shop: which crawlers it could reach, what robots.txt and llms.txt say, what structured data and product pages it found, and the score. The email address is used once, to send you the private link to your report, and for nothing else. No list, no follow up.
The email address and the private link are deleted 90 days after the check, and the link stops working. The measurement itself, that is the shop address, what was found and the score, is kept after that so we can see how shops in general are doing; once the email address is gone, none of it identifies anybody. You can ask for the address and the link to be removed sooner by writing to hello@mrdigital.ro from the address you used, or through the data export and erasure tools WordPress offers on request.
Data processors
Payments and licensing are handled by Lemon Squeezy, acting as Merchant of Record. Their privacy policy governs the purchase itself, including your billing details, which we never see or store. The licence check described above is the only contact between your site and Lemon Squeezy after purchase.
Updates are served from mrdigital.ro. The update check carries your licence key, your site address and the installed version, and nothing else.
Your rights
The data the plugin holds about your products lives on your server, under your control. The data we hold about you as a customer is what Lemon Squeezy passes on at purchase, your email address and your licence, and the site address your licence is activated on. If you used the free check, we also hold what the section above describes, for 90 days. You can ask us to see it, correct it or delete it at any time. Deleting it deactivates the licence.
Contact
Questions about your data, or a request to delete it: hello@mrdigital.ro. RHEADIGITAL S.R.L., Romania.