Server-side credentials
AI and integration keys are stored and used in WordPress—not exposed to the customer-facing browser.
Explore section ↓SECURITY & DATA OWNERSHIP
Your site. Your data. Your provider accounts.
NextlerAI is designed around customer-controlled WordPress data, explicit integrations and credentials that stay on the server.
DATA FLOW PRINCIPLES
Explicit connections. Limited purpose. Visible controls.
Bring your own supported AI-provider accountCredentials remain server-sideWordPress content stays under your administrationOnly required request data is sent to the configured providerProduct data can be removed using the documented workflowNo inference usage is resold by NextlerAI
Uses selected WordPress content and live WooCommerce catalogue facts to answer visitors. Customer-facing responses are constrained by the configured knowledge and actions.
Uses site inventory, configured research sources and publishing rules to create WordPress content. Draft, approval and automatic modes remain under administrator control.
API credentials are saved in WordPress and are not rendered into public page source. Never include complete keys, passwords or customer-sensitive data in a support request.
The site owner controls hosting, WordPress users, provider accounts, backups, retention and the final use or publication of generated output.
Security depends on the complete deployment: current WordPress and plugin versions, HTTPS, strong administrator authentication, least-privilege access, tested backups and correctly configured third-party accounts.