This policy describes how Bedrock Shield LLC ("we") handles information when you buy or use Bedrock Shield, a WordPress security service, at https://hub.shieldbedrock.com.

This is an operational template. A lawyer should review it before we charge live cards.

Who we are

The service is operated by Bedrock Shield LLC, in the United States. Questions: [email protected].

What we collect

• Account data. Work email, name, password hash (never the password itself), and the Site IDs we issue.
• Free PHP scan. If you use the free scan, we store your name, email, the site address you submit, the public PHP version we could see, and the time. We do not store card numbers. We do not log into the site.
• Billing data. Stripe handles cards. We store Stripe customer and subscription IDs, plan, quantity, and payment-event summaries. We do not store card numbers.
• Cleanup tickets. If you pay the $199 cleanup fee, or use the one included cleanup on Shield Care, we store your email, optional https site URL, a contact email, notes you typed, the Stripe payment id when you paid, and ticket status. We do not store WordPress passwords.
• Site telemetry. If you connect the WordPress plugin, the site sends signed security events (blocked requests, scan findings, login anomalies). That can include IP addresses, request paths, and user-agent strings from attackers or visitors hitting the site.
• Session cookies. A customer cookie (bshcust) keeps you signed in. An operator cookie (bshub) is only for our staff console.

How we use it

We use this information to run the service: create your account, enforce the plan you paid for, show your dashboard, send transactional email (receipts, payment failed, suspension), and keep the Hub secure (rate limits, abuse detection). A weekly security summary is optional and off until you turn it on in Account. Each summary includes an unsubscribe link.

Who we share with

Stripe (payments). Your WordPress host already sees the same request data the plugin may forward. We do not sell personal information. We do not use a marketing SDK on the Hub.

Retention

Security events are pruned after the Hub retention_days setting (default 90). Account and license rows stay while the subscription is active, then for the documented 60-day cancel window before purge. Backups follow the operator backup schedule.

Your choices

Update your card or cancel in the customer billing portal. Sign in and open Account to download a JSON export, turn the optional weekly summary on or off, or close the account (password plus DELETE). Close cancels the plan, revokes Site keys, and redacts your name and email. We keep Stripe billing records required for taxes and payment disputes. You can also write [email protected]. US state privacy laws (including the CCPA as amended) may give you rights to know, delete, or correct certain information. We will not discriminate against you for exercising those rights.

Security

Site keys are shown once on the connect page and stored hashed or encrypted as documented. Hub traffic is intended to run on HTTPS. No internet service is perfectly secure.

Children

The service is for business WordPress sites, not for children under 13 (or under 16 where that is the rule).

Changes

We will update the date at the top of this page when the policy changes.

Contact

Bedrock Shield LLC. Email: [email protected]. Governing region: the United States.