Privacy Policy

1. Introduction & Scope

This Privacy Policy explains how Wiki of Automation ("we," "our," or "us") manages technical and operational information regarding the DirectRelay WordPress plugin (Free and Pro editions), the DirectRelay Licensing Server, and our support portal at https://directrelay.wikiofautomation.com.

2. Information We DO NOT Collect

Unlike centralized SaaS middleware platforms that route your entire blog pipeline through foreign cloud proxies, DirectRelay executes on your own server. We strictly do not collect:

3. Information We Collect & How It Is Used

We process only the minimum technical parameters necessary to facilitate software license activations, deliver automatic security updates, and process support requests:

A. License Validation & Fleet Telemetry (Pro Tier)

When you input your DirectRelay Pro license key, the plugin transmits an HMAC-signed heartbeat request to directrelay-licenses.wikiofautomation.com:

• License Key & Status: Cryptographic token verifying entitlement tier.
• Activation Domain Name: To ensure license slot compliance (e.g. 1-site, 3-site, or unlimited).
• Environment Versions: WordPress core, PHP, and DirectRelay plugin versions to deliver compatible updates.
• Originating Server IP: Used strictly for rate-limiting and preventing DDoS attacks on the license gateway.

B. Technical Support Desk

When submitting a support ticket via our portal or emailing inquiry@directrelay.wikiofautomation.com, we collect your name, email address, topic, and voluntarily submitted error stack traces.

4. Human Approval Gateway Architecture

DirectRelay Pro features Human-in-the-Loop review tokens. When content is submitted for review:

• Approval magic links are signed locally using your site's private cryptographic secret.
• The staging queue, token validation, and revision approvals occur entirely within your local WordPress database.
• No editorial drafts or reviewer comments are ever routed to Wiki of Automation servers.

5. Cryptographic Security Standards

We implement enterprise-grade security protocols across all software and licensing communications:

• TLS 1.3 / HTTPS: Mandatory end-to-end transport encryption.
• HMAC-SHA256 Signatures: Telemetry exchanges are signed with time-based tokens to defeat replay exploits.
• WordPress Native Sanitization: All REST inputs undergo rigorous capability verification (current_user_can), nonce checks, and sanitization routines (sanitize_text_field, wp_kses_post).

6. Third-Party Integrations & Automation Engines

DirectRelay connects directly to your automation stack (n8n self-hosted, n8n Cloud, Make, Zapier, LangChain agents). Payload transfers between your automation nodes and DirectRelay occur over direct point-to-point connections governed by your own infrastructure security policies.

7. GDPR, CCPA / CPRA & International Privacy Rights

In accordance with global privacy regulations (GDPR, UK GDPR, California CCPA/CPRA):

• Right of Access & Portability: You may request an export of all license and ticket records associated with your email.
• Right to Erasure ("Right to be Forgotten"): You may request the permanent deletion of license activation history and archived support emails.
• Right to Opt-Out: Optional telemetry pings can be disabled directly from your WordPress DirectRelay settings menu.

8. Data Controller Contact & Privacy Desk

To exercise your data privacy rights or submit questions regarding data handling, please contact our Data Governance Officer: