Privacy Policy

1. Information We Collect

1.1 Information You Provide

We collect information that you voluntarily provide when using our Services:

• Account Information: Name, email address, username, password, and profile information
• Business Information: Company name, business type, industry, and contact details
• Payment Information: Billing address, payment method details (processed securely by our payment providers)
• Content Data: Website content, images, text, designs, and customizations you create
• Communications: Messages, feedback, support requests, and survey responses
• Marketing Preferences: Email subscription choices and communication preferences

1.2 Information Collected Automatically

When you use our Services, we automatically collect certain information:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, features used, time spent, click patterns, and navigation paths
• Location Data: General geographic location based on IP address
• Cookies and Tracking: Information collected through cookies, web beacons, and similar technologies
• Performance Data: Service performance metrics, error logs, and diagnostic information

1.3 Information from Third Parties

We may receive information from third-party sources:

• Authentication Services: If you sign in through Google, GitHub, or other OAuth providers
• Analytics Providers: Aggregated usage statistics and insights
• Business Partners: Information from referral programs or integrations
• Public Sources: Publicly available information to verify business details

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 Service Delivery

• Provide, operate, and maintain our Services
• Process your website creation requests and AI-generated content
• Manage your account and provide customer support
• Process payments and maintain billing records
• Store and host your website content and data

2.2 Service Improvement

• Analyze usage patterns to improve our AI models and features
• Develop new features and enhance user experience
• Conduct research and analytics to optimize performance
• Test new functionality and troubleshoot issues

2.3 Communication

• Send service-related notifications and updates
• Respond to your inquiries and support requests
• Send marketing communications (with your consent)
• Provide educational content and feature announcements

2.4 Security and Legal Compliance

• Protect against fraud, abuse, and security threats
• Enforce our Terms of Service and other policies
• Comply with legal obligations and respond to lawful requests
• Resolve disputes and protect our rights

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

3.1 Service Providers

We share information with trusted third-party service providers who assist us in operating our Services:

• Cloud Hosting: AWS, Google Cloud, or similar providers for data storage and hosting
• Payment Processing: Stripe, PayPal, or other payment processors
• Email Services: SendGrid, Mailchimp, or similar for communications
• Analytics: Google Analytics, Mixpanel, or similar for usage analytics
• AI Services: OpenAI and other AI providers for content generation
• Customer Support: Zendesk, Intercom, or similar support platforms

3.2 Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and choices you may have.

3.3 Legal Requirements

We may disclose your information if required by law, court order, subpoena, or to protect our rights, property, or safety, or that of our users or others.

3.4 With Your Consent

We may share your information for any other purpose with your explicit consent.

4. Data Security

We implement appropriate technical and organizational security measures to protect your information:

• Encryption: Data encrypted in transit (TLS/SSL) and at rest (AES-256)
• Access Controls: Strict access controls and authentication requirements
• Regular Audits: Security audits and vulnerability assessments
• Employee Training: Staff trained on data protection and privacy practices
• Incident Response: Procedures for detecting and responding to security incidents
• Backup Systems: Regular backups and disaster recovery procedures

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but will notify you of any data breaches as required by law.

5. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

5.1 Access and Portability

• Request access to your personal information
• Receive a copy of your data in a portable format
• Export your website content and data at any time

5.2 Correction and Deletion

• Correct inaccurate or incomplete information
• Request deletion of your personal information (subject to legal requirements)
• Delete your account and associated data

5.3 Objection and Restriction

• Object to processing of your personal information
• Restrict how we use your information
• Opt-out of marketing communications
• Withdraw consent where processing is based on consent

5.4 Cookie Controls

You can control cookies through your browser settings. Note that disabling cookies may affect your ability to use certain features. See our Cookie Policy for more information.

5.5 How to Exercise Your Rights

To exercise any of these rights, please contact us at info@webese.ai or through your account settings. We will respond to your request within 30 days.

6. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from your country.

When we transfer data internationally, we use appropriate safeguards including:

• Standard Contractual Clauses approved by the European Commission
• Data Processing Agreements with all service providers
• Adequacy decisions for transfers to certain countries
• Privacy Shield certification where applicable

For EU residents, we comply with GDPR requirements for international data transfers. See our GDPR Information page for details.

7. Data Retention

We retain your personal information for as long as necessary to provide our Services and fulfill the purposes described in this Privacy Policy:

• Active Accounts: While your account is active and as needed to provide Services
• Closed Accounts: Up to 90 days after account closure for backup and recovery purposes
• Legal Obligations: As required by law, regulation, or legal proceedings
• Business Records: Financial records retained for 7 years as required by tax laws
• Marketing Data: Until you unsubscribe or request deletion
• Analytics Data: Aggregated data may be retained indefinitely

When we no longer need your information, we securely delete or anonymize it in accordance with our data retention policies.

8. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: