Effective date: October 20, 2026
This policy explains how Otaku Financial Management LLC, operating as Otaku Solutions (“AnyPress”, “we”, “us”), 2019 Robinson St, Redondo Beach, CA 90278, handles personal data. It covers anypress.io, shop.anypress.io, app.anypress.io, the AnyPress API, and the WordPress websites we host for our customers (their “Sites”).
1. Two roles: our data and your Sites’ data
- Our own customers’ data. When you visit our sites, buy a plan or use our dashboard or API, we decide how your data is used. For this data, we are the controller.
- Your Sites’ visitors and customers. The people who visit, buy from, join or subscribe to a Site you run with us are your visitors. You decide what data your Site collects and why, so you are the controller and AnyPress is your processor. We handle that data only to host, back up, secure and support your Site, and only on your instructions. You are responsible for your own privacy notice, consents and cookie banner on your Site, and for answering your visitors’ requests. If one of your visitors contacts us, we will pass the request to you.
If you need a Data Processing Agreement (for example under GDPR), email support@anypress.io and we will provide one.
2. What we collect
When you buy a plan or use your account (shop.anypress.io):
- name, email address, and billing address;
- your account login (email or username and a hashed password);
- what you bought: plans, sizes, email packs, order and subscription history, Site names and domains;
- payment details: these go to Stripe. We see the card brand, last four digits and expiry, never the full card number;
- messages you send us, such as support emails.
When you use the dashboard or API (app.anypress.io):
- your sign-in details and the API keys issued to you;
- a log of each API call and dashboard change: who made it, what was called, the result, the time, IP address and browser user agent. It does not include the content you send.
About your Sites (for running the service):
- each Site’s name, domains, size, and usage (storage used and emails sent each month);
- the email addresses your Site sends from, and counts of emails sent.
Automatically, when you visit our sites:
- standard server and security logs (IP address, browser, pages requested, time).
- We do not use analytics or advertising pixels on anypress.io or the shop. If we add any, we will update this policy first.
3. How we use it
- to create and run your Sites, and process your payments, renewals and refunds (to perform our contract with you);
- to send receipts and important service emails, such as billing problems, usage warnings and notices that a Site is going offline;
- to provide support;
- to keep the service secure, prevent fraud and abuse, and enforce our Terms (our legitimate interests);
- to keep records required by tax and accounting law (legal obligation);
- to send marketing emails, only if you agreed, and you can unsubscribe at any time.
We do not sell your personal data, and we do not share it for cross-context behavioural advertising.
4. Sub-processors
We use these providers to run AnyPress. Each only gets the data it needs for its job.
| Provider | What it does for us | Data involved |
|---|---|---|
| Stripe | Payment processing for plans and email packs | Billing details, payment card data, transactions |
| Hostinger | Virtual private servers in the United States that run the shop, our API and customer Sites | All data stored on the shop and on Sites |
| Cloudflare | DNS for our domains; R2 storage for Site backups and our database backups | Backup copies of Site files and databases; DNS queries |
| toSend | Sending email: receipts from the shop (no-reply@anypress.io) and outgoing email from customer Sites | Recipient addresses and email content |
| Vercel | Hosting for anypress.io and the app.anypress.io dashboard | Visitor IP addresses and requests; dashboard sessions |
The shop runs on WordPress with FluentCart (checkout and subscriptions) and FluentCRM (customer email), which we host ourselves on the servers above; they don’t send your data to another company. We will update this list when we add or change providers. We will add any new provider to this list before it handles your data.
5. Where your data is stored
Our servers are in the United States. Some providers (such as Cloudflare, Stripe, toSend and Vercel) may process data in other countries. If you are outside the US, your data is transferred to the US. Where the law requires it, we rely on safeguards such as the providers’ Standard Contractual Clauses.
6. Cookies
We use a small number of cookies:
- Essential cookies on shop.anypress.io keep you signed in and keep your cart and checkout working.
- Sign-in cookies on app.anypress.io keep you signed in to the dashboard.
- Stripe may set cookies during checkout to prevent fraud.
These are needed for the service to work, so they can’t be switched off. We do not use analytics or marketing cookies.
Your Sites set their own cookies, which you control and must disclose to your visitors.
7. How long we keep data
| Data | How long |
|---|---|
| Account, order and subscription records | While your account is open, then as long as tax and accounting law requires. Financial records are kept for 7 years. |
| API and dashboard request logs | 30 days |
| Our own database backups (encrypted) | One per day for 14 days and one per week for 8 weeks |
| Site content (while your plan is active) | Until you delete it |
| Nightly Site backups (while your plan is active) | One per day for the last 7 days, and one per week for the last 4 weeks |
| A Site after its plan ends | Taken offline at the end of the paid period, deleted 30 days later |
| Backups of a deleted Site | 90 days after the Site is deleted, then permanently deleted |
| Support emails | 2 years from our last reply. |
8. Security
We use encryption in transit (HTTPS), encrypt our database backups before they leave the server, keep each Site in its own containers with its own database and password, and limit who can access production systems. No system is perfectly secure; if a breach affects your data, we will tell you as the law requires.
9. Your rights
Depending on where you live, you may have the right to:
- access the personal data we hold about you and get a copy;
- correct it;
- delete it (we may need to keep some records, such as invoices, by law);
- object to or restrict some uses, and withdraw consent where we rely on it;
- data portability: receive your data in a common format;
- complain to your local data protection authority (in the EU or UK).
EU and UK (GDPR). Our legal bases are listed in section 3: contract, legitimate interests, legal obligation and consent.
California (CCPA/CPRA). You have the right to know what we collect, to delete it, to correct it, and to opt out of the sale or sharing of personal data. We don’t sell or share personal data as those laws define it. We won’t treat you differently for using these rights.
To use any of these rights, email support@anypress.io. We may need to confirm your identity first. We will answer within the time the law requires (usually 30 days under GDPR, 45 days under CCPA).
If you are a visitor to a Site run by one of our customers, please contact that Site’s owner, who controls your data.
10. Children
AnyPress is for businesses and people aged 18 and over. We don’t knowingly collect data from children. Customers whose Sites are aimed at children are responsible for following the laws that apply to them, such as COPPA.
11. Changes to this policy
We may update this policy. If a change is material, we will email you or post a notice before it takes effect. The effective date at the top shows the latest version.
12. Contact
Otaku Solutions (Otaku Financial Management LLC) 2019 Robinson St, Redondo Beach, CA 90278 support@anypress.io