Security & your data

Your content, handled with care

AIRA reads a site and rebuilds its content in your WordPress install. Here’s exactly what that means for your data, your old site, and your clients’.

visibility

Read-only on your old site

AIRA only reads the public front-end of the site you migrate from. It never logs in, writes, or makes changes to the source.

edit_note

Imported as drafts

Content is created on your new WordPress build as drafts. Nothing is published until you review and choose to.

dns

AI runs on our servers

Classification runs server-side. There's no AI key in your browser, and your content is never exposed client-side.

model_training

Not used to train models

Your content is processed only to classify it into your blocks for your migration — it isn't used to train AI models.

lock

Encrypted in transit

All traffic to AIRA and the app is served over HTTPS/TLS.

delete

You stay in control

You can delete your projects and account data. Purchased credits and your data are yours — email us any time.

How AIRA handles your content

When you run a migration, AIRA fetches the public pages of the site you point it at — exactly as a visitor or search engine would — and reads the rendered content. That content is processed to classify each section into your ACF blocks and to build the import bundle you download. The destination is always your own WordPress site, where everything arrives as drafts for you to review.

AIRA does not modify, log into, or store credentials for the source site. The AI classification runs on our servers, not in your browser, so there are no API keys to manage and your content is never exposed client-side. We use your content to perform your migration — not to train AI models.

What we store, and for how long

We store your account details, your saved mapping specs, and the projects and bundles you create, so you can return to them. You can delete projects at any time, and request deletion of your account data by emailing support@wpaira.com. Full detail on what we collect and your rights is in our privacy policy.

UK GDPR & data protection

RDH Digital Ltd (United Kingdom) is the data controller for personal data processed through AIRA. We process data lawfully under the UK GDPR and Data Protection Act 2018, hold only what we need, and give you access, correction and deletion rights. For any data-protection request, contact support@wpaira.com.

Sub-processors

We rely on a small number of trusted providers to run the service. Current sub-processors:

ProviderPurpose
NetlifyMarketing site hosting and form handling
Anthropic (Claude)AI classification of crawled content
StripePayments and subscription billing
Google Tag ManagerConsent-gated analytics
Microsoft ClarityConsent-gated usage analytics

Reporting a security issue

Found a vulnerability or have a security question? Email support@wpaira.com and we’ll respond promptly.