Privacy Policy
Last updated: 7 May 2026
This Privacy Policy explains how ALTification (“we”, “us”) collects, uses and protects your information when you use altification.ai and the ALTification WordPress plugin.
Who we are
ALTification is operated by A Fine Studio, United Kingdom. For any privacy questions contact us at privacy@altification.ai.
What we collect
Account information
When you register: your email address, a hashed password, and your account preferences. We do not store passwords in plain text.
Billing information
Lemon Squeezy acts as the Merchant of Record for all purchases on altification.ai. They process your payment, issue your invoice and handle sales tax and VAT. We do not see or store your card details. We receive from Lemon Squeezy: your name, email address, country, the product you purchased, an order ID and (for subscriptions) a subscription ID and renewal date. We use this to credit your account, send you a receipt and manage your subscription.
API key data
The API keys you generate, the first site URL each key is used on, and a fingerprint hash of that site (so a key cannot be silently used across multiple sites).
Usage data
Counts of how many alt texts, captions and descriptions you have generated, and your credit balance. We use this to operate the credit system and to improve the service.
Generation requests
When you generate content, your image and any context you have chosen to send (page keyword, meta description, site name, product details, etc.) are transmitted to our server and forwarded to Anthropic for processing. We do not store the image, the prompt or the response after the generation is complete.
Website content for generation context
To generate accurate, page-relevant alt text, the ALTification plugin sends contextual data from the user’s WordPress site to our server. This may include page titles, focus keyphrases, meta descriptions, product names, categories, custom field content, and image filenames. This data is used solely to construct the generation prompt and is forwarded to Anthropic for processing. We do not store this content after the generation is complete.
Users are responsible for ensuring they have the right to process any content on their WordPress sites using a third-party service. If a WordPress site contains personal data belonging to third parties (e.g. customer names in product descriptions), that data is subject to the same retention terms as generation requests — not stored after the response is returned.
Email correspondence and account events
Verification, password resets, billing receipts and similar transactional emails are sent through Postmark.
Server logs
Our hosting provider keeps standard web server access logs (IP address, request URL, timestamp) for security and debugging. These are retained for up to 30 days. We do not use them for advertising or analytics.
What we do not do
- We do not sell your data
- We do not run advertising or use third-party tracking beyond Google Analytics, which users can opt out of via the cookie banner
- We do not retain the images you submit for generation
- We do not use your generation data to train AI models
- We do not store, analyse or use website content sent via the plugin for any purpose other than generating the requested output”
Sub-processors
We share the minimum necessary data with:
| Provider | Purpose | Location |
|---|---|---|
| Anthropic | AI model that generates text from your image and prompt | United States |
| Lemon Squeezy | Merchant of Record — payment processing, tax compliance, invoicing | United States |
| Postmark | Sending transactional emails | United States |
| Digital Ocean | Web hosting | London |
Where data is transferred outside the UK or EEA, transfers are made under appropriate safeguards (Standard Contractual Clauses or equivalent).
How long we keep your data
- Account data: while your account is active, plus 90 days after deletion
- Billing records: 7 years (UK tax law)
- Usage statistics: indefinitely, but tied to the account — deleted when the account is deleted
- Generation requests: not stored after the response is returned
Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and data (you can also delete your account directly from your dashboard)
- Request a copy of your data in portable format
- Object to or restrict processing
- Lodge a complaint with the Information Commissioner’s Office (ico.org.uk)
To exercise any of these rights, email privacy@altification.ai.
Cookies
Necessary cookies
These cookies are required for the site to function and are always active. They include WordPress login and session cookies (wordpress_logged_in_*, wp-settings-*), Wordfence security cookies (wfwaf-authcookie-*), and WP Rocket performance cookies. No consent is required for these.
Analytics cookies
With your consent, we use Google Analytics to understand how people find and use ALTification. This sets two cookies: _ga (expires 2 years) and _ga_TFH1XKX2LF (expires 2 years). These cookies do not identify you personally. Legal basis: consent.
You can accept or decline analytics cookies using the banner shown on your first visit, or change your preference at any time via the Cookie preferences link in the footer. Declining analytics cookies does not affect your use of the site in any way.
We do not use advertising, marketing or profiling cookies.
Changes
We may update this policy occasionally. The “Last updated” date at the top will reflect any changes. Material changes will be notified by email to active accounts.