Version: March 2026
1. Introduction
This Privacy Policy explains how Ipportunities B.V. (“Ipportunities”, “we”, “us”) handles personal data in connection with the Inqyra WordPress plugin (“Software”).
Ipportunities B.V.
KvK: 74455109
Address: Van Oldenbarneveldtstraat 90, 6827AN Arnhem, The Netherlands
Email: info@inqyra.com
2. Our Role
The Inqyra plugin runs entirely on the Customer’s own WordPress server. Ipportunities does not receive, store, or have access to chat messages, visitor data, or website content processed by the plugin.
| Context | Data Controller | Explanation |
|---|---|---|
| Plugin on Customer’s server | The Customer (website operator) | All chat, visitor, and content data stays on the Customer’s server |
| Freemius (payments, licensing, updates) | Freemius Inc. (independent controller) | Handles purchases, license keys, and plugin updates. See Freemius Privacy Policy |
| Inqyra website and support | Ipportunities B.V. | Contact via email or support channels |
3. Data Ipportunities Processes
Ipportunities only processes personal data when you interact with us directly:
| Data Category | Examples | Purpose | Legal Basis |
|---|---|---|---|
| Support inquiries | Name, email, message content | Providing support | Art. 6(1)(b) — Contract performance |
| Website contact | Name, email | Responding to inquiries | Art. 6(1)(f) — Legitimate interest |
We do not operate a license server. All license management is handled by Freemius.
4. Freemius
The Software uses the Freemius SDK for license management, plugin updates, and optional usage analytics. Freemius acts as an independent data controller for the data it processes.
Data Freemius may collect:
- Customer name and email (at purchase)
- Payment and billing information
- Site URL, WordPress version, PHP version, plugin version (for updates and compatibility)
- Optional: anonymous usage analytics (opt-in only)
Freemius Inc. is certified under the EU-US Data Privacy Framework (DPF), which provides the legal basis for transferring personal data from the EU to the United States.
For details, see the Freemius Privacy Policy.
5. Plugin Data — Customer Transparency
Note: This section describes data processed by the plugin on the Customer’s server. The Customer is the data controller for this data. This information is provided to help Customers understand the plugin’s data flows and fulfill their own privacy obligations.
5.1 Data Processed by the Plugin
| Data Category | Storage | Purpose |
|---|---|---|
| Visitor IP hash | HMAC-SHA256 hash (first 45 chars). Original IP is not stored | Rate limiting, abuse prevention |
| User agent | Stored per session | Analytics, debugging |
| Chat messages | Stored in Customer’s database | Conversation history, context |
| Session ID | Random identifier per conversation | Session management |
| Lead data (Premium) | Email, phone, name, company — extracted from conversations | Lead generation (Customer-configured) |
| Website content | Crawled pages stored as knowledge chunks | RAG knowledge base |
| Uploaded documents (Premium) | PDF/DOCX content stored in Customer’s database | RAG knowledge base |
5.2 Embeddings
The Software generates text embeddings using the Xenova/paraphrase-multilingual-MiniLM-L12-v2 model. Embeddings are generated entirely in the visitor’s browser via the Transformers.js library. No content is sent to any external embedding API. Embedding vectors (384 dimensions) are stored in the Customer’s database.
5.3 AI Provider Data Flows
When a visitor sends a chat message, the Software sends a request directly from the Customer’s server to the Customer’s chosen AI provider. Ipportunities does not intermediate, proxy, or have access to these API calls.
Data sent to AI providers includes:
- The visitor’s message
- Relevant knowledge base context (RAG retrieval results)
- The rewritten search query (for query optimization)
- System prompt configured by the Customer
- Conversation history for the current session
Each AI provider processes this data under its own privacy policy and terms:
| Provider | Headquarters | Data Processing Location |
|---|---|---|
| Anthropic (Claude) | USA | USA |
| OpenAI | USA | USA |
| Google (Gemini) | USA | Global |
| Mistral | France | EU |
| DeepSeek | China | China |
DeepSeek: DeepSeek processes data in China. China is not recognized by the European Commission as providing an adequate level of data protection. Customers using DeepSeek must independently assess the legal basis for this transfer.
5.4 Cookies
The Inqyra plugin does not set any cookies. Session management uses server-side session IDs transmitted via the REST API.
5.5 Recommendations for Customers
Customers deploying the plugin should:
- Mention the chatbot’s AI-powered nature in their own privacy policy
- Inform visitors that chat messages are sent to a third-party AI provider
- Name the specific AI provider used (e.g. “Anthropic Claude”)
- If lead extraction is enabled, disclose the automated collection of personal data from conversations
- Consider whether a Data Protection Impact Assessment (DPIA) is required
- If using DeepSeek, assess the implications of data transfers to China
6. Data Subject Rights
6.1 Data Held by Ipportunities
If you have contacted us via email or support, you have the following rights under the GDPR:
- Access (Art. 15) — Request a copy of your personal data
- Rectification (Art. 16) — Request correction of inaccurate data
- Erasure (Art. 17) — Request deletion of your data
- Restriction (Art. 18) — Request restriction of processing
- Data portability (Art. 20) — Receive your data in a structured, machine-readable format
- Objection (Art. 21) — Object to processing based on legitimate interest
To exercise these rights, contact info@inqyra.com. We will respond within 30 days.
6.2 Data Held by Freemius
For data processed by Freemius (purchase, license, billing data), contact Freemius directly via their privacy page.
6.3 Plugin Data (Visitors)
Visitors who wish to exercise their data rights regarding chat messages or other data collected by the plugin should contact the website operator (the Customer), who is the data controller for that data.
7. Children’s Privacy
The Software is not directed at children under the age of 16. Ipportunities does not knowingly collect personal data from children. Customers are responsible for ensuring their use of the chatbot complies with applicable age-related data protection requirements.
8. Supervisory Authority
You have the right to lodge a complaint with a supervisory authority. The lead supervisory authority for Ipportunities B.V. is:
Autoriteit Persoonsgegevens
PO Box 93374, 2509 AJ The Hague, The Netherlands
https://autoriteitpersoonsgegevens.nl
9. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via the plugin’s admin interface and/or email at least 30 days before they take effect. The version date at the top of this document indicates the last revision.
10. Contact
For privacy-related inquiries:
Ipportunities B.V.
Email: info@inqyra.com
Address: Van Oldenbarneveldtstraat 90, 6827AN Arnhem, The Netherlands