BridgLegal
How purchases work
Bridgistic is part of WPistic, the family of WordPress products from WordPressistic LLC. This page explains what happens from checkout to a working license, and which part of the system does what. It is based on the current source code.
The parts
| Part | Role |
|---|---|
| bridgistic.app, pay.bridgistic.app | Show the plans and open Paddle checkout with the email you enter |
| Paddle | Merchant of record. Takes payment, issues the receipt and sends a signed notification to WPistic |
| api.wpistic.com | The WPistic license server. Issues and verifies Bridgistic licenses |
| Bridgistic plugin | Runs on your WordPress site. Holds your keys, approvals, snapshots and audit log, and activates your license |
| dashboard.bridgistic.app | A browser dashboard that talks directly to your site with signed requests |
| mcp.bridgistic.app | Optional relay for AI clients that connect over the web |
From checkout to license
- Choose a plan. On bridgistic.app or pay.bridgistic.app, pick the Lifetime Deal or, after the welcome offer, monthly or yearly. Enter the email that should receive your license.
- Pay with Paddle. Paddle checkout opens on the page. Your payment details go to Paddle, which is the merchant of record for the sale.
- Paddle notifies WPistic. Paddle sends a signed
transaction.completednotification to api.wpistic.com. The license server rejects any notification whose signature does not verify. - The license is issued by price. The license server looks up the Paddle price in its catalog. The Lifetime Deal price
pri_01m58k6epsqzbr3qbab84t6p90issues a license with no expiry. Lifetime Deal: 1 license · 1 site. Monthlypri_01m1ykar8aq033865h68a4b9hhand yearlypri_01m1ykaqyaaeewsbah07akmpkaissue a Bridgistic Pro license. Monthly and Yearly: 1 license · 5 sites. The same price issues the same license whether you bought on bridgistic.app, pay.bridgistic.app or app.wpistic.com. - You receive the key by email. The license server keeps only a hash of the key, and sends the key to you once.
- Activate it on your site. In dashboard.bridgistic.app, connect your site and open License. Paste the key and the dashboard asks the plugin on your site to activate it. The plugin sends the key with your site's domain and installation ID to api.wpistic.com, checks the signature on the reply, and stores the activation. The same key and the same license are then shown in the plugin and in the dashboard.
- Re-checks. Check now in the dashboard re-validates the license with the license server. Deactivating frees the site's activation slot.
- Refunds and support. Every purchase has a 7-day refund guarantee. Write to [email protected], and Paddle processes the refund as merchant of record. A refund ends the license, which may be done by hand rather than instantly. See the Refund Policy.
Using AI clients
AI clients reach your site in one of two ways:
- through the Bridgistic MCP server running on your own computer, which signs requests with a key you create in the plugin;
- through the optional relay at mcp.bridgistic.app, which keeps that key encrypted and forwards each call to your site as a signed request.
In both cases the plugin checks the signature, the key's scopes and your approval rules before anything changes, and records the action in its audit log.
What each part stores or sends
| Part | Stores | Sends |
|---|---|---|
| bridgistic.app | Your colour theme, in your browser | Your email and chosen price to Paddle when you start checkout |
| Paddle | Payment details and checkout information, under Paddle's terms | A signed notification, including your email, to api.wpistic.com |
| api.wpistic.com | The notification, your organization and billing email, order, subscription or lifetime record, the license (key stored hashed), site activations (domain, URLs, installation ID, environment, versions) and license events (IP address, user agent) | Your license key by email; signed responses to the plugin |
| Plugin | Keys (secret encrypted), an audit log pruned after 90 days (including IP addresses), approvals, snapshots (only on your site), usage, memory, playbooks, schedules, and the license activation | Only to api.wpistic.com, for license activation, re-checks and deactivation |
| Dashboard | Site connections in your browser's session storage | Signed requests directly to your site |
| Relay | Site URL, key ID, encrypted key secret, scopes, timestamps and OAuth grants; rate-limit counters that expire within two minutes | Signed tool calls to your site. Request and response bodies are not stored |
More detail is in the Bridgistic Privacy Policy. Account, billing and data-rights matters are covered by the WPistic Privacy Policy, the WPistic Terms of Service and the WPistic Refund Policy.
Contact
WordPressistic LLC1209 Mountain Road PL NE, STE N
Albuquerque, NM 87110, US
Support and refunds, for Bridgistic and the whole WPistic ecosystem: [email protected].
General company enquiries: [email protected].