GDPR Compliance & Configurable PII Masking 🛡️
Privacy is not an afterthought in WooPilot AI — it is a foundational architectural constraint. We operate with a strict Zero-PII Storage Policy: Customer Personally Identifiable Information (names, emails, physical addresses, phone numbers) is never persistently stored on WooPilot cloud databases.🔒 Dynamic In-Memory PII Masking (Default Privacy Mode)
The WordPress connector plugin includes an active PII Anonymization Filter enabled by default, configurable directly inside WordPress Admin (WooCommerce WooPilot Settings):Anonymization Algorithm:
- Emails: Preserves only the first and last character of the username plus the domain:
m***k@gmail.com. - Phone Numbers: Masks middle digits while preserving country and carrier prefixes:
+1 (555) ***-**89. - Addresses: Truncates precise street addresses while keeping city, region, and postal codes for analytical aggregation.
Authentication credentials, passwords, and API keys are permanently masked at the dispatcher level regardless of the PII setting.
🇪🇺 GDPR Data Protection Standards
- No Cross-Tenant Data Contamination: Every tenant operates with cryptographically isolated credentials and tenant-specific database partitioning.
- Right to be Forgotten: Because customer data is not retained on cloud servers, WooCommerce merchant data deletions and WordPress privacy export tools work without friction.
- Encrypted Cloud Vault: Store metadata and HMAC secrets are encrypted at rest using industry-standard AES-256-GCM encryption.