Data, Accounts and Creative Assets
Account data
Only collect the information required to provide subscriptions, support, platform access and account security.
Prompts and uploads
Explain how prompts, source images and generated outputs are processed, stored and removed. Avoid uploading confidential material unless your service configuration explicitly supports it.
Payments
Payment details should be handled by the configured payment provider rather than stored directly by the theme.
Access control
Use strong passwords, current WordPress and plugin versions, HTTPS, backups and least-privilege administrator access.