Legal
Privacy Policy.
How Total CMS 3 and totalcms.co collect, use, and protect information — for the software, your license, this website, and our AI connector.
Overview
Total CMS is self-hosted, flat-file software — your site content, collections, and uploads live on your own server and are never transmitted to us. This policy covers the limited data that does pass through our systems: license validation, store purchases, our AI connector, and your use of this marketing site.
Information We Collect
License & trial validation
To confirm a license or trial is active, your Total CMS installation periodically checks in with license.totalcms.co. This check sends the domain the software is running on and the associated license or trial identifier. No page content, collection data, or file uploads are included in this check.
Store purchases
When you buy or upgrade a license through the in-dashboard store, your purchase is processed by our license and store service. Payment details are handled by Stripe — we do not store full card numbers on our own servers.
Community forum & support
The community forum and support ticketing are provided by a third party, weavers.space. Accounts, posts, and support conversations there are governed by weavers.space's own privacy policy, not this one.
Documentation site
Docs at docs.totalcms.co are a separate property. Standard web server logs (such as request IP and user agent) may be recorded for operational purposes.
This website (totalcms.co)
We do not run advertising trackers or sell visitor data on totalcms.co. We may use minimal, privacy-respecting server logs or aggregate analytics to understand traffic and improve the site. We use Cloudflare Web Analytics to understand aggregate traffic. It doesn't use cookies or track visitors across sites.
AI connector (MCP server)
Our public MCP server at https://totalcms.co/mcp lets AI assistants such as ChatGPT and Claude search the Total CMS documentation and read this website's published product content. It is read-only and requires no account, login, or API key.
What we receive. When your assistant calls one of the connector's tools, we receive the tool name and the inputs the assistant sends with it — a search phrase, a documentation path, or the id of a published page. Each request also carries standard request data: IP address, user agent, and time. We do not receive your conversation, your prompts beyond those tool inputs, or any details of your account with the AI provider.
How we use it. Tool inputs are used only to answer that request. They are not stored alongside your identity, used for profiling or advertising, or used to train any model. Your IP address is also used for rate limiting to keep the service available; those counters expire after 60 seconds.
What the connector returns. Only product content already published on totalcms.co: documentation and reference pages, release notes, the extensions catalog, and product comparisons and buying guides. None of it contains personal information — the connector never returns data about you, other users, or our customers.
Your AI provider's handling of your conversation is governed by that provider's own privacy policy, not this one.
Your own Total CMS site
Every Total CMS installation includes its own MCP server, run by that site's owner on their own hosting. Requests to it never reach us, and this policy does not cover them.
Cookies
totalcms.co uses only the cookies strictly necessary for the site to function (for example, remembering a theme preference). We do not use third-party advertising or cross-site tracking cookies. The AI connector does not use cookies.
How We Use Information
- To validate active licenses and trials against the domain they’re running on
- To process store purchases and upgrades
- To answer requests made through the AI connector, and to rate-limit abuse
- To provide support when you contact us directly
- To maintain and improve totalcms.co and the license/store service
Data Sharing
We share information only as needed to operate the services above: with our payment processor to complete purchases, with weavers.space where you choose to use the community forum or support, and with Cloudflare, which carries all traffic to totalcms.co (including AI connector requests) as our network and security provider. We do not sell personal information.
Data Retention
We retain license and purchase records for as long as needed to support your license and meet legal and accounting obligations. Server request logs for totalcms.co and the AI connector are kept for 14 days, then deleted. AI connector rate-limit counters expire after 60 seconds. Tool inputs are not kept beyond those request logs.
Your Rights & Data Requests
You can request a copy of, or the deletion of, personal information we hold about your license or purchases by contacting us. You can stop using the AI connector at any time by disconnecting it in your AI assistant's settings. Depending on your location, you may have additional rights under local law; we'll honor applicable requests.
Children's Privacy
Total CMS and totalcms.co are not directed at children, and we do not knowingly collect personal information from children.
Changes to This Policy
We may update this policy from time to time. Material changes will be reflected by updating the effective date above.
Contact
Questions about this document can be sent to .
Aspect Services, LLC — California, United States