Privacy Policy
Last updated: 6 August 2026
DashWP is a service for managing WordPress websites. This policy explains what personal data we process, why, and the rights you have. If anything is unclear, contact us at [email protected].
1. Who we are
The DashWP service ("DashWP", "we", "us") is operated by Reducto Ltd, registered in Bulgaria, company number (UIC) 208651488, VAT No. BG208651488, registered address 6, Osma St., Malina 9559, Dobrich, Bulgaria. We are the data controller for the personal data described below.
Contact for privacy matters: [email protected].
2. What data we collect
- Waitlist - if you join the early-access waitlist, we collect the email address you submit.
- Account data - for registered users: name, email address and a securely hashed password.
- Managed-site data - the URLs and technical metadata of the WordPress sites you connect (versions, plugins, themes, update and security status), and the credentials needed to manage them, which are stored encrypted.
- Technical data - IP address, browser type and server logs, collected to run and secure the service.
- Cookies - a strictly necessary session cookie to keep you signed in. See section 9.
3. Why we process it (legal bases)
- To provide the service - performance of a contract with you (Art. 6(1)(b) GDPR).
- Security, fraud prevention and product improvement - our legitimate interests (Art. 6(1)(f) GDPR).
- Waitlist and product updates - your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
- Legal obligations - where we must keep records (Art. 6(1)(c) GDPR).
4. Who we share it with
We do not sell your data. We use a small number of trusted providers (sub-processors) that process data on our behalf:
| Provider | Purpose | Location |
|---|---|---|
| Hetzner Online GmbH | Server hosting | EU (Germany) |
| Amazon Web Services (SES) | Transactional email delivery | EU |
| Cloudflare, Inc. | DNS, network and encrypted backups | EU region |
We may also disclose data where required by law.
Google user data (Google Analytics)
When you connect a Google account, DashWP requests read-only access to your Google Analytics (the analytics.readonly scope) solely to show your website traffic statistics inside DashWP and in the reports you generate. DashWP's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell this data, do not use it for advertising, and do not share it with third parties except as needed to provide the service to you. You can disconnect the Google account at any time from Settings.
5. International transfers
We aim to keep data within the EU/EEA. Where a provider processes data outside the EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
6. How long we keep it
- Waitlist emails - until we launch and you either sign up or ask to be removed, and no longer than 24 months.
- Account and managed-site data - for as long as your account is active, then deleted or anonymised within a reasonable period after closure.
- Backups - encrypted backups are rotated and expire on a rolling schedule (up to a few months).
7. How we protect it
Credentials and connection tokens are encrypted (AES-256-GCM). Access is restricted, connections use TLS, and data is backed up in encrypted form. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data.
8. Your rights
Under the GDPR you have the right to access, rectify, erase, restrict or object to processing, and to data portability. To exercise any of these, email [email protected]. You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP, cpdp.bg).
9. Cookies
We use only strictly necessary cookies required to sign you in and keep your session secure. We do not use advertising cookies. If we later add analytics, we will ask for your consent first.
10. Changes to this policy
We may update this policy from time to time. The "last updated" date above shows the latest version, and material changes will be communicated where appropriate.
11. Contact
Questions about this policy or your data: [email protected].