Compliance & Security Policy

Last Updated: November 2025

1. Introduction

At MetaMate, we take privacy, data protection, and user trust seriously. This Compliance & Security Policy outlines how we handle and protect data, maintain security standards, and comply with global privacy laws. MetaMate is developed and managed by RankRider Solutions, based in the United Kingdom. Our website and related services are securely hosted on Hostinger, a GDPR-compliant, ISO-certified hosting provider.

2. GDPR & Data Protection Compliance

MetaMate complies with the EU General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.

We ensure that:

Personal data is collected and processed lawfully, fairly, and transparently.
Only the minimum necessary data is collected (for billing, licensing, and communication).
You can request access, correction, or deletion of your data at any time.
All processing by third-party providers follows strict GDPR and security protocols.

Our key third-party processors include:

Hostinger (web hosting and security)
Stripe / PayPal (payment processing)
OpenAI (AI generation API)
Google Analytics (website analytics, optional)

For data requests or concerns, contact:

support@metamateplugin.com

3. Hosting & Infrastructure Security (Hostinger)

Our website is hosted on Hostinger’s GDPR-compliant infrastructure, which provides:

ISO 27001 & ISO 27017 certified data centers (EU and UK regions)
SSL certificates (HTTPS) securing all data exchanges
Automated daily backups and data recovery tools
24/7 infrastructure monitoring and DDoS protection
Access control and network-layer security

We do not operate an external firewall; instead, we rely on Hostinger’s built-in security layers, SSL encryption, and proactive monitoring to maintain data integrity and uptime.

4. Payment & Subscription Security

MetaMate uses Stripe and PayPal for all payment and subscription processing. Both providers are fully certified under the Payment Card Industry Data Security Standard (PCI DSS Level 1).

We:

Do not store or access any customer credit card or financial information.
Use secure, encrypted payment forms and redirect flows managed by our payment partners.
Allow customers to cancel subscriptions at any time through their account dashboard or by contacting support.

5. AI Transparency & Data Handling

MetaMate uses the OpenAI API to generate SEO content suggestions such as meta titles, descriptions, and alt text.

We guarantee that:

Only the text you provide is processed for generation.
No personal or sensitive data is included in API requests.
We do not store AI-generated content externally — it stays in your WordPress database.
MetaMate does not train any AI models using user data.

6. User Consent & Cookie Management

When you visit MetaMatePlugin.com, you will see a cookie banner allowing you to:

Accept all cookies
Reject non-essential cookies
Manage preferences

MetaMate only uses cookies for essential functions and anonymized analytics. You can modify your cookie preferences at any time.

7. Data Retention & Storage

We retain user data only as long as necessary to:<

Maintain billing and licensing records
Provide customer support
Meet tax or legal obligations

All plugin-generated data (e.g., SEO suggestions or AI results) is stored locally in your WordPress installation and can be deleted anytime by the user.

8. Security Maintenance & Updates

We follow WordPress and Hostinger security best practices, including:

Regular plugin updates and version testing
SSL-secured API communication
Prompt vulnerability patching when needed
Continuous monitoring for security alerts

MetaMate is designed to remain lightweight and secure without slowing your site.

9. Reporting a Security Concern

If you believe you’ve found a vulnerability or data issue, please report it to us immediately.

support@metamateplugin.com

10. Compliance Alignment & References

MetaMate’s ecosystem aligns with internationally recognized standards through its hosting, payment, and technology partners.

Framework / Standard	Managed By	Compliance Coverage
GDPR (EU Regulation 2016/679)	RankRider Solutions	Full user data protection rights
UK Data Protection Act 2018	RankRider Solutions	Applies to UK users and servers
EU ePrivacy Directive (Cookie Law)	RankRider Solutions	Managed via cookie banner consent
PCI DSS Level 1	Stripe / PayPal	Secure payment processing
ISO 27001 & 27017	Hostinger	Certified server infrastructure and data protection

MetaMate does not claim to hold these certifications directly. Instead, we align with these standards through the certified compliance of our trusted partners and infrastructure providers.

11. Contact Information

If you have questions about our compliance, data protection, or security measures, please contact:

support@metamateplugin.com

We respond to compliance inquiries within 72 hours (Mon–Fri).

12. Revision Policy

This policy is reviewed annually or when regulations or partnerships change. All updates will be published on this page with a revised “Last Updated” date.