VellumUp SEO

VellumUp analyses your website, builds a keyword and content plan, writes full
articles in your brand voice, and — with this plugin — publishes them straight
to your WordPress blog.

This plugin is a connector. It does two things: it connects this site to your
VellumUp account, and it lets you disconnect again. The writing and publishing
happen in the VellumUp service.

Requires a VellumUp account

This plugin requires an account on VellumUp, a third-party service, and does
nothing on its own. You can create one for free during setup — clicking
“Connect to VellumUp” takes you there.

External service disclosure

This plugin connects your site to VellumUp, a service operated by VellumUp at
https://vellumup.com.

When data is sent: only when you click the “Connect to VellumUp” button.
Nothing is sent on installation, on activation, or in the background.

What is sent, in a single HTTPS request to
https://vellumup.com/api/integrations/wordpress/plugin/ticket:

• Your site address (home_url()) and REST API address (get_rest_url())
• Your site name
• The WordPress username of the administrator clicking the button
• A newly created WordPress Application Password, scoped to VellumUp
• Your WordPress version and this plugin’s version

What VellumUp does with it: it uses the Application Password to create and
update posts on this site through the WordPress REST API, on your instruction
from the VellumUp dashboard. Your actual WordPress password is never shared —
Application Passwords are a WordPress core feature designed exactly for this,
and can be revoked independently at any time.

Nothing else leaves your site. This plugin adds no analytics, no tracking,
and no background requests.

Terms of use: https://vellumup.com/terms
Privacy policy: https://vellumup.com/privacy

Revoking access

Any of the following immediately ends VellumUp’s access to this site:

• Click Disconnect on the VellumUp screen
• Go to Users → Profile → Application Passwords and revoke the “VellumUp” entry
• Delete this plugin — it revokes the Application Password it created on uninstall

Requirements

• WordPress 5.6 or newer (Application Passwords were added in 5.6)
• An HTTPS site — VellumUp will not send credentials over plain HTTP
• The WordPress REST API reachable from the internet