Security & Trust Center

Security overview

Insightistic is designed as separate public marketing, application/API and WordPress connection surfaces. This page describes the public control model; it is not a certification, penetration-test report or guarantee.

Data minimisation and access

The connector is intended to send the business data needed for selected analytics and reporting features. Payment-card details are not required for the WordPress analytics workflow. Use unique credentials, least privilege, role-based access and multi-factor authentication where available.

Transport, storage and secrets

Connections should use HTTPS and authenticated requests. Secrets belong in protected configuration and must not be placed in public page content, browser code or support messages. Retention and deletion follow the applicable account and privacy terms.

Report a vulnerability

Report suspected security issues privately to [email protected] with the affected URL, concise description and safe reproduction details. Do not include passwords, payment details or unnecessary personal data.