Stored in your database
CRM records and SEO settings live in your own WordPress database on your hosting. We do not keep a copy.
Security and Data Privacy
Your Data Stays on Your Own Site
This page explains, in plain words, where the IT Nirman plugins keep your data, who can reach it, and what leaves your site only when you choose to connect a service.
What We Do to Protect Your Data
Admin-only by default
CRM screens are limited to administrators. Staff can be added with limited access through the CRM Staff role, and the SEO plugin has a Role Manager to decide which roles can do what.
Request protection
CRM actions are protected with WordPress security tokens (nonces), so a request must come from a signed-in, authorised user.
Encrypted credentials
Credentials the SEO plugin stores, for example for connected services, are saved encrypted.
Minimal AI crawler data
The AI Reach Tracker records only the name of the AI crawler that read a page. IP addresses and user agents are not stored.
No telemetry in the SEO plugin
As of IT Nirman SEO 1.1.48, the plugin sends no usage telemetry. We will update this page before any release that changes that.
What Leaves Your Site, and When
Nothing here is switched on for you. Data goes to these services only if you connect them.
Only if you connect it
- Google Search Console, GA4 and Bing Webmaster for SEO reports
- Email delivery through SMTP, Brevo or Amazon SES
- Backups to your own Google Drive
- Online payment gateways you choose
- IndexNow pings to search engines when you publish
Stays on your site
- ✓ Client records, deals, invoices and reports
- ✓ SEO titles, descriptions and schema settings
- ✓ Client portal content
- ✓ Backup files you download
- ✓ CRM and SEO settings
If a Release Adds Licence Verification
We will update this page before any release that adds licence verification. It will state exactly what is sent, which is limited to the licence key, your site domain and the plugin version, and it will confirm that no CRM or customer data is included.
Good Habits That Keep Any WordPress Site Safe
No plugin can protect a site that is poorly maintained.
Keep everything updated
WordPress, your theme and all plugins, including ours.
Keep tested backups
A backup you have never restored is only a hope. Test one now and then.
Protect logins
Use strong, unique passwords and two-factor authentication, and remove access the day someone leaves.
Found a problem?
Report a Security Concern
Please tell us privately through our contact page and do not post details publicly. Include the plugin, its version and clear steps to reproduce it.