Privacy Policy — Source Code AI Manager
Last updated: September 12, 2026
This policy explains how Source Code AI Manager processes information when a WordPress administrator connects this site to ChatGPT or another compatible MCP client.
Information processed
- WordPress account and authorization data: user identifiers, approved OAuth scopes, authorization codes, access tokens, refresh tokens, token expiry information, and connection metadata needed to operate the integration.
- Site content and metadata: information requested through enabled tools, such as posts, pages, media metadata, SEO fields, revisions, plugin/theme update status, cache status, and supported WooCommerce product data.
- Operational logs: tool/action name, status, object identifiers, timestamps, and limited diagnostic details used for security, troubleshooting, and audit history.
- Technical data: request timing and rate-limit information required to protect the service.
How information is used
Information is processed only to authenticate authorized connections, return requested WordPress data, perform actions explicitly requested through enabled tools, protect the integration, and maintain an audit trail.
ChatGPT and third-party processing
When you connect the integration to ChatGPT, data returned by an MCP tool is transmitted to ChatGPT as necessary to answer your request or perform the requested action. Your use of ChatGPT is also subject to the terms and privacy practices of the ChatGPT provider. Source Code AI Manager does not sell personal information to advertisers.
Storage and retention
OAuth credentials, settings, approvals, and audit data are stored in the WordPress database of the connected site. Site administrators can revoke OAuth connections and remove the plugin. WordPress backups may retain historical copies according to the site owner’s backup policy.
Security
The integration uses HTTPS, OAuth 2.1, PKCE (S256), scope-based authorization, rate limiting, administrator capabilities, and approval gates for selected higher-impact actions. No system can guarantee absolute security; site administrators remain responsible for WordPress, hosting, administrator accounts, backups, and plugin updates.
Your choices
A WordPress administrator can disable individual write capabilities, revoke API credentials, revoke OAuth connections, reject pending approvals, and uninstall the integration.
Contact
Privacy or support questions: info@sourcecode-eg.com
Website: Source Code