Privacy & Security
Security Model
Last updated: October 23, 2026
- Administrator-only. The feature lives inside the Joomla back end. Nothing is added to your public website.
- Permission-aware. Generating a page requires the same login, CSRF token and page-edit rights Joomla already enforces for editing that page normally.
- One outbound destination. Data is sent only to the AI provider you configured: your prompt and the bundled SP Page Builder layout guide.
- Optional extras you control. Real site links add page titles and relative URLs, never page content. The business profile you fill in is sent with the prompt. A screenshot is shrunk in your browser, sent with the prompt and never stored. Regenerate, Improve, Translate and Show 3 options also send the current section or page JSON.
- Spend you control. Optional daily limits per user and for the site.
- No key of its own. The plugin reads SP Page Builder's stored API key at request time and never writes or copies it.
- Fails safe. If anything unexpected happens while the feature loads, the SP Page Builder editor keeps working normally.
- GPL-2.0-or-later, like every Joomla extension.