Privacy Policy

Last updated: 3 July 2026. Written for a UK-based operator under UK GDPR / the Data Protection Act 2018.

Who we are. AltoFAQ ("we", "us") provides a WordPress plugin and a hosted API that generate AI FAQ sections (question-and-answer pairs) and FAQPage structured data for your posts and pages. The data controller is The Really Useful App Company Ltd (company no. 17088198), Chandos House, School Lane, Buckingham, England, MK18 1HD. For data-protection queries contact privacy@thereallyusefulappcompany.com.

What we process and why

When you use the AltoFAQ plugin, the plugin sends the following to the AltoFAQ API so we can generate an FAQ for you:

Data	Purpose	Lawful basis (UK GDPR)
Post title and content	Generate FAQ questions and answers	Contract (Art. 6(1)(b)) — providing the service you installed
Site ID (a hash of your site URL)	Count usage against your plan	Legitimate interests (Art. 6(1)(f)) — billing integrity and abuse prevention
Pro licence key, billing details	Manage your subscription	Contract; legal obligation (tax)

We do not ask for or require names, emails of your site visitors, or other personal data to generate FAQs. Post content may incidentally contain personal data if you have placed it there; we process it only to return the requested FAQ and do not use it to train models.

Sub-processors

Anthropic — provides the AI that generates the text. Post titles and content are sent to Anthropic to produce a result and are not used by them to train models under their commercial terms.
Render — hosts the AltoFAQ API.
Freemius — our merchant of record for Pro subscriptions; it processes your billing details and is the seller of record for tax purposes.

Where any sub-processor processes data outside the UK, we rely on appropriate safeguards (UK International Data Transfer Agreement / Addendum).

Retention

Generated text is returned and not stored beyond what's needed to serve the request and logs.
Usage counts are kept per site per month for billing and abuse prevention.
Operational logs are kept for a limited period (e.g. 30 days) and then deleted.

Your rights

Under UK GDPR you may request access to, correction of, or deletion of your personal data, object to processing, or complain to the Information Commissioner's Office (ICO) at ico.org.uk. To exercise any right, contact privacy@thereallyusefulappcompany.com.

Security

Data is sent over HTTPS. Access to the AltoFAQ API and its data is restricted. The plugin sends a hashed site ID rather than identifying your site directly.

Changes

We'll update this policy as the service evolves and post the new version here with a revised date.