# Security Policy

## Supported Versions

Security reports are accepted for the latest public version of AIT Multilingual Translate.

Current public version: **0.3.40**

## Reporting a Vulnerability

Please report security issues privately by email:

**info@itdesign.biz**

Include:

- A short description of the issue.
- Steps to reproduce.
- Affected plugin version.
- WordPress version.
- PHP version.
- Browser and server details when relevant.
- Relevant logs with secrets removed.

Please do not publicly disclose a vulnerability before we have had a reasonable opportunity to investigate and prepare a fix.

## Sensitive Data

AIT Multilingual Translate masks provider API keys in the debugger and redacts sensitive values from exported diagnostic logs. Do not send API keys, passwords, cookies, billing data, shipping data, customer personal data, or private provider responses in support messages.

## External Services

The plugin sends site text to external translation services only after a site administrator configures a provider API key and starts a provider action, queue run, background translation, or frontend auto-translation request.

## Official Links

- Website: https://wp-ai.itdesign.biz/
- WordPress.org: https://wordpress.org/plugins/ait-multilingual-translate/
- GitHub: https://github.com/IT-Design-s-r-o/wp-ai-translate
- License: https://www.gnu.org/licenses/gpl-2.0.html