What the WordPress plugin sends

The PlanBatch plugin is a thin client for your PlanBatch account. It holds no settings that change what we do with your data, and it makes no request to us at all until you connect the site yourself.

This page is a plain-language explanation, not a separate agreement. Our Privacy Policy and Terms of Use are what govern.

Before you connect

Nothing. The plugin makes no external request until you click Connect in Settings, PlanBatch. Installing and activating it sends us nothing at all.

When you connect

Your site's address and its name, so you can recognise the site when you approve the connection in your PlanBatch dashboard. Approving issues an API key scoped to one of your brands, which the plugin stores in your site's options table.

We also count connection attempts per site and per IP address for a minute at a time, to stop a misconfigured site flooding the endpoint. Those counters are deleted after 24 hours.

When a post is published

If you turned on auto-share for that post type: an identifier built from your site address and the post ID, the post's title, excerpt, permalink and featured image URL, its tag names (these fill the {hashtags} placeholder), and for a WooCommerce product its formatted price. Alongside those go the settings you chose: caption pattern, first comment pattern, link tracking parameters, platform and placement choices, the template, any template field values, and a scheduled time if you set one. Nothing is sent for drafts, private posts, or post types you did not select.

When you use Bulk Share

The same fields, for each item you selected, in one request. If you turned on gallery images, that includes the product gallery images of a WooCommerce product, which become the slides of a carousel. Template field values are sent per item, read from the post where you left "use the post's own text" ticked and as typed otherwise. A post you gave its own template, caption, first comment or networks under Each post carries those with it.

On every request

The plugin sends its own version number in a header. We record it against the API key the site is using, so support can tell which version a site is running when something goes wrong. Once the plugin is in the WordPress directory we no longer control which version a site runs, and a site that never updates is the one whose version is most worth knowing. It identifies the key, not a person, and it is used for nothing else.

While you have the settings page open

Authenticated requests for your plan, your connected channels, your templates and your Pinterest boards, to fill in the form. These read your PlanBatch account; they send us nothing about your site.

Searching an icon field sends the text you typed, to list matching icon names, and your browser then loads small pictures of icons from planbatch.com. A template thumbnail asks us for that template's picture, which your browser then loads from our image storage through a link that expires within the hour. The live preview while you edit sends the template and the values on screen, to draw the picture; nothing is stored.

Prepare for AI, in Bulk Share, sends us each selected post's title, link, summary, subheadings with their first sentence, categories, tags, whether it has a featured image, and the post's own text (up to 6,000 characters, as plain text), so we can write the prompt. The text is there because the prompt tells the assistant to write only from it. We store none of it and send nothing to any AI service: you copy the prompt into the assistant you choose. Import sends us the answer you paste, to check it against your templates; nothing is stored or scheduled until you press Schedule.

When an imported answer names a photo for a post, your browser loads it from Unsplash (images.unsplash.com) to show it and check that it exists. If you schedule that post, the photo's link reaches us in place of the featured image's, and we keep our own copy as with any image.

The Prompt brief in Settings reads and saves five lines with your PlanBatch brand: business, language, tone, audience and offer. The suggestions shown for an empty line come from your site's title, tagline, language and address, and reach us only if you save them.

Images

We download the images a shared post references and keep our own copy, rather than linking to your site. This is deliberate: a scheduled post publishes hours or days later, and an image that has been moved, renamed or deleted in the meantime would otherwise publish blank. The copies live in your brand's asset library and you can delete them there.

What is never sent

Visitor or analytics data, the content of unpublished posts, your WordPress user accounts or passwords, and anything from post types you did not select. The plugin does not track anyone visiting your site.

Stopping it

Disconnect in the plugin's settings, or revoke the site's key from Connected Sites in your PlanBatch settings. Either takes effect immediately and the key stops working. Posts already scheduled stay on your PlanBatch calendar, where you can delete them. Deleting the plugin removes the stored key from your site.

Questions

The full detail, including your rights under the GDPR and how to have your data deleted, is in our Privacy Policy.