Updated on 23 July, 2026
Welcome to WP UMBRELLA!
Before exploring our solution, please read and accept these general terms and conditions of sale and use.
The WP UMBRELLA solution (the “Solution”) is designed for professionals, freelance developers, web agencies, hosting providers, who build and maintain WordPress websites. It comprises: (i) a web application at https://app.wp-umbrella.com/; (ii) a WordPress plugin freely downloadable from WordPress.org; (iii) a public API and an MCP server providing programmatic access to account data.
The Solution is published by LIVEN STUDIO, a French simplified joint-stock company (SAS) with a share capital of €2,353, registered with the Lyon Trade and Companies Register under no. 901 423 434, headquartered at 4 rue de la République, 69001 Lyon, France, represented by its President, Aurelio Volle. EU VAT: FR39901423434. Contact: support@wp-umbrella.com.
The Solution is reserved for professionals, i.e. any natural or legal person acting for purposes relating to their commercial, industrial, craft, liberal or agricultural activity, within the meaning of the introductory article of the French Consumer Code. By creating an account, the User represents that they subscribe for the purposes of their professional activity. LIVEN STUDIO reserves the right to refuse any subscription, or terminate any account, that proves not to be used for professional purposes; in that case, prepaid and unused amounts are refunded. Consumer-specific provisions of the French Consumer Code do not apply.
4.1. The contract consists of, in decreasing order of precedence: (1) these T&C; (2) the personal data processing agreement (DPA); (3) the privacy policy. The cookie policy is informational. In case of contradiction, the higher-ranking document prevails. These documents replace all prior versions. LIVEN STUDIO may amend them; substantial changes are notified in writing at least one (1) month before taking effect, and the User may terminate if they refuse them.
4.2. On-demand Services. The optional, per-unit services — Security Audit, Malware Removal — are governed by Annex 1 to these T&C (Special Conditions) and, for the processing of personal data, by article 4 bis of the DPA. These provisions apply only to a User who orders such an On-demand Service, are accepted at the point of order, and, for those services only, Annex 1 prevails over the body of these T&C in case of contradiction. Absent an order, they have no effect.
5.1. The account is created with an email address and a strong password (or via Google). Credentials are personal; the User shall notify LIVEN STUDIO without delay of any loss, theft or unauthorized access.
5.2. Team. The account holder (the “Owner”) may invite an unlimited number of team members and assign them roles and access rights. Each member must comply with these T&C. The Owner remains solely liable towards LIVEN STUDIO for the acts and omissions of invited members, for managing their rights and for revoking their access.
5.3. Inactive accounts: after three (3) years of inactivity (excluding active subscriptions), an email is sent to the User; absent a positive response, data is deleted or anonymized.
A fourteen (14) day free trial, with no credit card required, is offered upon account creation, with access to all features. If no subscription is taken, dashboard data, backups and reports are deleted ninety (90) days after the end of the trial.
7.1. Monthly plan. The Solution is offered as a monthly subscription at the per-site rate displayed in the Application on the order date (for information, as of this version: €1.99 excl. tax or $2.19 excl. tax per site per month).
7.2. Optional add-ons. Offered per site per month at the rates displayed in the Application: (i) the Security add-on (application firewall with virtual patching, daily malware scanning, IP blocklist, security activity log); (ii) the Hourly Backups add-on. The Security add-on is an obligation of means (art. 13): it does not guarantee the detection, prevention or remediation of any threat, vulnerability or intrusion, does not replace the User’s own security measures, and the User remains responsible for acting on the alerts sent to them.
7.3. Annual prepayment plan. The User may prepay a credit corresponding to at least twelve (12) months of estimated usage and receives a ten percent (10%) discount. The prepaid credit is drawn down monthly against actual usage; once exhausted, standard monthly billing resumes. The prepaid credit is firm and non-refundable, including upon early termination by the User, except in case of (i) termination for LIVEN STUDIO’s breach, (ii) the User’s refusal of a price revision (art. 8.3) or (iii) refusal of a change significantly degrading the Services (art. 12), in which cases the unused balance is refunded.
7.4. Orders are confirmed by email. LIVEN STUDIO may block an order in case of suspected or proven fraud.
8.1. Prices are exclusive of taxes; applicable taxes depend on the country of residence. The price is payable in advance. Invoices are made available electronically in the User space, which the User accepts.
8.2. Late payment: late-payment interest at the rate applied by the European Central Bank to its most recent refinancing operation plus ten (10) percentage points, due without prior formal notice, plus the flat-rate recovery indemnity of forty (40) euros (art. L441-10 French Commercial Code). LIVEN STUDIO may suspend access or terminate in case of unresolved payment incidents.
8.3. Price revision: rates may be revised by LIVEN STUDIO on the monthly anniversary date, subject to prior written notice of at least one (1) month. In case of express disagreement, the User may terminate; any unused prepaid balance is refunded (art. 7.3).
The subscription takes effect upon payment for a term of one (1) calendar month, tacitly renewed for identical periods. Either party may terminate at any time, without notice period or fees — the User via the dedicated feature of their space; termination takes effect at the end of the current monthly period. Termination for breach is governed by article 18.
10.1. Core services included: automatic backups (daily, weekly or monthly, at the User’s choice) and restoration; uptime, performance and PHP error monitoring; known-vulnerability detection (periodic checks — indicatively every six (6) hours); security-hardening options; database optimization; bulk updates (plugins, themes, WordPress core); customizable, white-label maintenance reports for the User’s end clients; domain and SSL certificate expiration alerts.
10.2. Retention: backups are retained and available for fifty (50) days, then deleted. Backups of a deleted project are deleted. Maintenance reports are retained for the duration of the paid subscription.
10.3. API and MCP. Access to the public API and MCP server is included. API keys are personal and confidential. The User shall refrain from any abusive use (unreasonable volumes, circumvention of technical limits, resale of access). LIVEN STUDIO may suspend API access in case of abuse, with notice except in urgent cases.
10.4. Ancillary services: support via https://wp-umbrella.com/support/ or the User space, during French business hours (Monday–Friday, excluding public holidays).
11.1. The User may at any time, free of charge: (i) export their exportable data (configurations, backups, reports, dashboard data) in a structured, commonly used and machine-readable format (CSV, JSON, backup archives) via their space or the API; (ii) terminate (art. 9) to migrate to another provider or to their own infrastructure.
11.2. In case of switching, LIVEN STUDIO provides reasonable assistance free of charge and makes the User’s exportable data available within a maximum of thirty (30) calendar days from the request. The migration itself to the new provider or destination infrastructure is the User’s responsibility; LIVEN STUDIO does not perform the onboarding of data at the destination provider. If this availability period is technically unfeasible, LIVEN STUDIO gives notice within fourteen (14) working days, indicating the necessary alternative period.
11.3. No switching charges are billed. At the end of the retrieval period (50 days for backups; 90 days for account data), data is deleted in accordance with the DPA.
LIVEN STUDIO may change the Solution’s features. Any change that significantly degrades or diminishes the Services is notified by email at least one (1) month before implementation; the User may then terminate by contacting support@wp-umbrella.com (unused prepaid credit refunded, art. 7.3).
LIVEN STUDIO is bound by an obligation of means (best efforts). It applies the diligence and care required for proper performance of the Services and keeps the User informed of difficulties. It guarantees neither full compatibility of the Solution with the User’s software and systems, nor the absence of vulnerabilities on the User’s sites, nor — including under the Security add-on, which is an obligation of means — the interception of every attack or malware. LIVEN STUDIO is not responsible for the User’s sites or their content and has no general monitoring obligation.
14.1. Suitability and activation. The User is responsible for ensuring that the Solution meets the needs and activities of their site(s). The Services are not automatic and must be activated by the User from the Application. The User shall verify that the server configurations hosting the sites allow backups to run, and remains solely responsible for the backup configurations they set.
14.2. Updates and security interventions. The User is responsible for keeping the WP UMBRELLA plugin and their sites’ components (plugins, themes, WordPress core) up to date, and is solely responsible for security interventions on their sites. Where WP UMBRELLA detects a vulnerability, the User is solely responsible for alerting their own client(s) and for intervening on the affected site(s) to remedy it.
14.3. Sole responsibility. As a professional in the creation and maintenance of WordPress websites, the User is solely responsible for: the use they make of the Solution; the purposes for which they use it; the use of the results it provides; and the data and Content they upload to it.
14.4. Prohibited high-risk uses. The Solution is not intended for use in sensitive or high-risk activities, in particular: nuclear installations; activities of vital importance; installations classified for environmental protection; air navigation; the safety or health of persons; and the storage or processing of health data or of data classified as defence secrets under applicable law.
14.5. Lawful use and Content. The User shall not use the Solution to hinder or alter its operation, including by overloading it with the untimely transfer of Content outside the intended use cases. The User shall comply with, and ensure that anyone benefiting from the Services complies with, applicable law, and in particular shall not save Content that: (i) contravenes applicable laws, regulations, usage charters or ethical rules — notably Content inciting crimes, offences, hatred, discrimination or violence (in particular on grounds of ethnicity, nationality, alleged race, religion, sex, sexual orientation or identity, or disability), condoning crimes against humanity, inciting or condoning acts of terrorism, or containing child-pornography material; (ii) is violent, incites terrorism, seriously harms human dignity, or is liable to expose minors to dangerous or pornographic material; or (iii) infringes the rights of third parties, in particular personality rights and third-party intellectual-property rights (copyright, patents, trademarks).
14.6. Interruption for security. LIVEN STUDIO has no knowledge of the saved Content. It may interrupt the connection to all or part of the Services if a saved site is likely to endanger the security of its equipment and infrastructure; it will, as far as possible, limit the impact of that interruption on normal operation and inform the User as soon as possible.
14.7. Team. The Owner is responsible for the compliance of the members of their Team (art. 5.2) with these T&C.
LIVEN STUDIO holds the intellectual property rights in the Solution; the subscription grants a right of access and use, with no transfer of ownership (art. L122-1, L122-6, L122-7 French IP Code). The WP UMBRELLA plugin is distributed under the GNU GPL v2 license attached to WordPress.
LIVEN STUDIO processes personal data as controller or processor, as the case may be, under the conditions detailed in the privacy policy and the DPA.
Each party (the “Receiving Party”) shall keep confidential the other party’s (the “Disclosing Party”) non-public information obtained in connection with the contract — in particular, for LIVEN STUDIO, the User’s and its clients’ Content, account data and backups, and, for the User, non-public technical, pricing and security information relating to the Solution. The Receiving Party shall use it solely to perform the contract and disclose it only to its staff, subcontractors (art. 17) and advisers bound by an equivalent confidentiality obligation, or where required by law or a competent authority. Excluded is information that is public, already known without a duty of confidence, lawfully received from a third party, or independently developed. This obligation applies during the term of the contract and for three (3) years after its end; personal data remains governed by the DPA and the privacy policy, and trade secrets remain protected for as long as they qualify as such.
The User grants LIVEN STUDIO a general authorization to subcontract all or part of the Services, LIVEN STUDIO remaining liable for their performance. LIVEN STUDIO may assign the contract to any assignee of its choice; the User consents in advance to LIVEN STUDIO being released for the future from the assigned obligations (art. 1216-1 French Civil Code). If, following such assignment, the assignee substantially amends these T&C to the User’s detriment, the User may terminate free of charge and obtain a refund of the unused prepaid credit (art. 7.3). Any assignment by the User requires LIVEN STUDIO’s prior written consent.
If a party fails to perform its obligations and does not cure within fifteen (15) days of formal notice by registered letter with acknowledgment of receipt, the other party may terminate as of right, without prejudice to damages.
Credentials, API keys, orders, entered data, backups, reports, notifications, IP addresses, logs and electronic signatures are admissible and constitute evidence between the parties, regardless of their medium. Each party nonetheless remains free to adduce evidence to the contrary by any means.
20.1. LIVEN STUDIO’s liability may only be incurred upon proven fault. It is not liable, in particular, for: configuration or activation failures attributable to the User; vulnerabilities or illegal content of the sites; the User’s failure, insufficiency or delay in intervening; malfunction of third-party property; accidental loss or destruction of data by the User, their clients or third parties; interruptions due to abnormal or fraudulent use, or third-party intrusion despite state-of-the-art security measures; force majeure (art. 1218 French Civil Code).
20.2. Cap: LIVEN STUDIO’s liability is limited, for all direct damages combined, to the amount excluding tax paid by the User during the twelve (12) months preceding the triggering event. Indirect damages (loss of revenue, profit, orders, data, opportunity, harm to image) are excluded. Any claim is time-barred one (1) year after the triggering event.
20.3. Nothing in these T&C excludes or limits either party’s liability for willful misconduct (dol) or gross negligence (faute lourde), or for personal injury.
20.4. The User remains solely responsible for the Solution’s suitability for their needs, their configurations, their plugin updates, the lawfulness of their Content and the security of their sites, and indemnifies LIVEN STUDIO against any resulting claim.
If a clause is held unlawful or unenforceable, it is deemed unwritten without affecting the other provisions and is replaced by a valid provision of equivalent effect. Failure to enforce a right is not a waiver.
The contract is governed by French law. Any dispute shall first be subject to an attempt at amicable resolution; failing agreement within thirty (30) days of notification of the dispute, exclusive jurisdiction is granted to the courts within the jurisdiction of the Lyon Court of Appeal, notwithstanding multiple defendants or third-party claims.
Preamble. This Annex forms an integral part of the T&C. It governs two services offered on demand, outside the monthly subscription: the Security Audit and the Malware Removal (together, the “On-demand Services”). It applies only to a User who orders an On-demand Service through our customer support, from the moment of that order, which constitutes acceptance of this Annex. For those On-demand Services only, the Annex prevails over the body of the T&C in case of contradiction; for the remainder, the body of the T&C applies (in particular art. 2 Publisher, art. 8 financial terms, art. 16 bis confidentiality, art. 19 evidence, art. 20 liability, art. 21 miscellaneous, art. 22 governing law and jurisdiction). The related processing of personal data is governed by article 4 bis of the DPA.
The On-demand Services are strictly reserved to Users holding an active WP UMBRELLA account, acting for the purposes of their professional activity (art. 3). They are not offered to consumers or to non-subscribing third parties. LIVEN STUDIO may refuse or interrupt any order outside this scope.
A.2.1. Security Audit. A one-off diagnostic service. With AI assistance (A.4), LIVEN STUDIO analyses the elements of the designated site (files, database, logs, configuration) to identify indicators of compromise, known vulnerabilities and malware signatures, then delivers a detailed written report of findings and recommendations. The audit does not modify the site and removes nothing.
A.2.2. Malware Removal. A one-off remediation service. LIVEN STUDIO searches for and endeavours, under a best-efforts obligation (A.6), to remove the malware detected on the designated site. The Malware Removal does not guarantee: (i) the exhaustive removal of every compromise, including threats undetectable by the state of the art; (ii) the absence of reinfection; (iii) correction of the original vulnerability (updates and hardening being the User’s responsibility); nor (iv) restoration of data altered or deleted as a result of the intrusion.
A.2.3. The On-demand Services are one-off: they do not constitute a subscription, are not renewed, and are ordered and billed separately.
The On-demand Services are ordered from the User space or at support@wp-umbrella.com; the order is confirmed by email (art. 7.4) and constitutes acceptance of this Annex. Price (per site, per intervention, for information): Security Audit €20 excl. tax; Malware Removal €180 excl. tax. Prices are exclusive of taxes (art. 8.1), payable in advance; electronic invoice in the User space. LIVEN STUDIO may block an order in case of fraud (art. 7.4).
A.4.1. The On-demand Services are performed with the assistance of an AI provider (Anthropic). Site data (files, database, logs, configuration) may be transmitted to that provider solely to perform the ordered service. No data is transmitted to Anthropic unless and until the User orders an On-demand Service: the order constitutes the User’s instruction and consent; absent an order, none of the User’s or its end clients’ data is transmitted to Anthropic.
A.4.2. Human oversight. The AI’s output is reviewed by LIVEN STUDIO; the User acknowledges that AI-assisted analysis is neither exhaustive nor infallible (consistent with the best-efforts obligation, A.6).
A.4.3. No training. Data transmitted to the AI provider is not used to train its models.
A.4.4. The associated processing of personal data (Anthropic’s sub-processor status, transfer outside the EU, retention) is governed by article 4 bis of the DPA.
Performance requires that the User, beforehand and during the intervention: (i) provides the necessary access (administration, hosting, FTP/SFTP/SSH, database); (ii) expressly authorises LIVEN STUDIO to access and modify the designated site beyond the usual scope of the Solution, solely to perform the service; (iii) warrants that it owns the site and its content, or is duly authorised; (iv) acknowledges that the site may already be compromised, any harm predating the intervention not being attributable to LIVEN STUDIO; (v) verifies that a recent, complete backup exists before any Malware Removal, LIVEN STUDIO endeavouring to use or create a prior backup via the Solution (art. 14); (vi) undertakes, after the intervention, to rotate all its credentials and to apply the recommended updates and hardening, failing which reinfection remains possible. Absent cooperation or sufficient access, LIVEN STUDIO’s obligations and timeframes are suspended accordingly.
For the On-demand Services, LIVEN STUDIO is bound by a best-efforts obligation (art. 13). It applies the necessary diligence and care and keeps the User informed of difficulties. It guarantees neither detection, nor exhaustive removal, nor the absence of reinfection or residual compromise, and has no general monitoring obligation after the intervention.
Article 20 applies, subject to this article. For any claim arising from an On-demand Service, LIVEN STUDIO’s liability, for all direct damages combined, is limited to the amount excluding tax paid by the User for the service giving rise to the claim (by way of derogation from the twelve-month cap of art. 20.2). Indirect damages are excluded (art. 20.2) and any claim is time-barred one (1) year after the triggering event. LIVEN STUDIO is not liable, in particular, for the pre-existing compromise and its consequences, for reinfection, for loss or alteration of data resulting from the intrusion or from a necessary removal action where a prior backup could be created, or for the User’s failure to rotate credentials or apply the recommended updates (A.5). Articles 20.3 (dol, faute lourde, personal injury) and 20.4 (User’s indemnity) remain applicable.
As the On-demand Services are reserved to professionals (A.1), the Consumer Code’s right of withdrawal is inapplicable in principle. In any event, the User expressly requests that performance begin immediately upon payment and, insofar as any such right were applicable, acknowledges that the service is fully performed on delivery and waives it for the service concerned.
The audit report and, for the Malware Removal, a summary of the actions taken are made available in the User space or by email, for the User’s internal use. LIVEN STUDIO retains the intellectual property rights in its methodology and report format (art. 15); the User has a right to use the deliverables concerning it.
Processing carried out for the On-demand Services is governed by article 4 bis of the DPA. If an On-demand Service reveals a personal data breach affecting the User’s site, the User is the controller (or its end clients’ processor) and bears the notifications under arts. 33 and 34 GDPR; LIVEN STUDIO assists under the DPA. LIVEN STUDIO’s notification obligation (48h, art. 11 of the DPA) concerns breaches of the processing it performs, not the site’s pre-existing compromise.
