Privacy & AI Protocol

Last updated: July 14, 2026

This Privacy Policy explains how Webydo Inc. ("Webydo", "we", "us", or "our") collects, uses, discloses, and protects personal information when you visit webydo.com, use our website builder, AI tools, stores, CRM and related services (the "Services"), or otherwise interact with us. It also describes the rights you have over your personal information and how to exercise them.

1. Who We Are (Data Controller)

Webydo Inc. is the controller responsible for your personal information. Our registered address is Wilmington, Delaware, United States. For any privacy question or to exercise your rights, contact us at support@webydo.com.

2. Information We Collect

• Account & contact data — name, email address, phone number, company, billing details and the credentials you use to sign in.
• Content you provide — the sites, text, images, products, customer records and prompts you create or upload, including data you enter into our AI tools.
• Usage & device data — pages viewed, features used, IP address, browser and device type, and approximate location, collected through logs and privacy-friendly analytics.
• Cookies & similar technologies — as described in our Cookie Policy.
• Payment data — processed by our payment providers; we do not store full card numbers on our servers.

3. Legal Bases for Processing (GDPR)

Where the EU/UK General Data Protection Regulation applies, we process personal information on one or more of the following legal bases:

• Performance of a contract — to provide the Services you request and manage your account.
• Legitimate interests — to secure, maintain and improve the Services, prevent fraud, and communicate with you, provided these interests are not overridden by your rights.
• Consent — for optional cookies, marketing communications and any processing where we ask for it; you may withdraw consent at any time.
• Legal obligation — to comply with applicable laws, tax and accounting requirements.

4. How We Use Your Information

• To provide, operate, maintain and improve the Services;
• To process transactions and send related information, including confirmations and invoices;
• To provide customer support and respond to your requests;
• To secure our platform, detect and prevent fraud and abuse;
• To send service and, where permitted, marketing communications (you can opt out at any time);
• To comply with legal obligations and enforce our Terms.

5. Cookies and Tracking

We use strictly necessary cookies to run the site and, with your consent, analytics to understand usage. You control non-essential cookies through the consent banner and your browser settings. See our Cookie Policy for details and categories.

6. How We Share Information

We do not sell your personal information. We share it only as needed:

• Service providers / sub-processors — hosting, storage, payment processing, email delivery and analytics providers who process data on our behalf under contract;
• Professional advisers and authorities — where required by law, regulation or legal process;
• Business transfers — in connection with a merger, acquisition or sale of assets, subject to this Policy.

7. International Data Transfers

We operate globally, so your information may be processed in countries other than your own, including the United States. Where we transfer personal data out of the EEA, UK or other regulated regions, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or equivalent mechanisms.

8. Data Retention

We keep personal information only for as long as necessary to provide the Services, comply with legal, tax and accounting obligations, resolve disputes and enforce our agreements. When it is no longer needed, we delete or anonymize it. Account content is retained while your account is active and for a limited period afterwards, unless a longer period is required by law.

9. Your Data Protection Rights

Subject to applicable law, you have the right to:

• Access — obtain a copy of the personal information we hold about you;
• Rectification — correct inaccurate or incomplete data;
• Erasure — request deletion of your data ("right to be forgotten");
• Restriction — limit how we process your data;
• Portability — receive your data in a structured, machine-readable format;
• Objection — object to processing based on legitimate interests or direct marketing;
• Withdraw consent — at any time, without affecting prior lawful processing.

To exercise any of these rights, email support@webydo.com. We will respond within the timeframe required by law. You also have the right to lodge a complaint with your local data protection supervisory authority.

10. Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect and how we use and disclose it, to request deletion or correction, and to opt out of the "sale" or "sharing" of personal information. Webydo does not sell or share personal information as those terms are defined under California law. We will not discriminate against you for exercising your privacy rights. To make a request, contact support@webydo.com.

11. Data Security

We use encryption in transit, access controls, and reputable cloud infrastructure to protect personal information. No method of transmission or storage is completely secure, but we work continually to safeguard your data and to notify you and the relevant authorities of any breach as required by law.

12. Children's Privacy

The Services are not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.

13. Third-Party Links and Services

Our Services and customer-built sites may link to third-party websites and tools that we do not control. This Policy does not apply to those third parties, and we encourage you to review their privacy notices.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, notify you. Your continued use of the Services after changes take effect constitutes acceptance of the updated Policy.

15. Contact Us

For any question about this Policy or your personal information, or to exercise your rights, contact us at support@webydo.com or write to Webydo Inc., Wilmington, Delaware, United States.