1. Who We Are
WebGenie ("we", "us", "our") is the data controller for personal data collected through this website.
Contact: webgenie16@gmail.com
2. What Data We Collect
| Data | Why we collect it | Retained for |
|---|---|---|
| Name & email address | Account creation and login (via Google Sign-In) | Until account deleted |
| Generated website content | Save your sites to your account | Until account deleted |
| Payment information | Processed by Stripe — we never see your full card details | Managed by Stripe |
| IP address & usage logs | Security monitoring and rate limiting | 30 days |
| Subscription plan & usage count | Enforce plan limits | Until account deleted |
3. Legal Basis for Processing
We process your data under the following lawful bases (UK GDPR Article 6):
- Contract — processing your account data and payments to provide the Service you signed up for
- Legitimate interests — security logging, fraud prevention, and rate limiting
- Legal obligation — retaining records as required by UK tax and financial law
4. How We Use Your Data
- To create and manage your account
- To process payments and manage your subscription
- To save your generated websites to your account
- To send transactional emails (account and billing notices)
- To detect and prevent fraud or abuse
- To comply with legal obligations
We do not sell your data to any third party. We do not use your prompts or generated content to train AI models.
5. Third Parties We Share Data With
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database hosting | EU (Ireland) |
| Anthropic | AI generation (your prompt is sent to their API) | USA |
| Stripe | Payment processing | USA / EU |
| Railway | Server hosting | USA |
| ipapi.co | IP address lookup, to confirm you're signing up/paying from the UK (WebGenie is currently UK-only) | USA |
All US providers operate under standard contractual clauses or EU-US Data Privacy Framework adequacy decisions.
6. Your Rights Under UK GDPR
You have the right to:
- Access — request a copy of the data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — request deletion of your account and data
- Portability — receive your data in a machine-readable format
- Restriction — ask us to limit how we process your data
- Object — object to processing based on legitimate interests
To exercise any of these rights, email us at webgenie16@gmail.com. We will respond within 30 days.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
7. Cookies
WebGenie uses only essential cookies — specifically a session token stored in your browser's localStorage to keep you logged in. We do not use advertising or tracking cookies.
8. Data Security
We implement industry-standard security measures including:
- Authentication handled entirely by Google Sign-In — we never see or store your Google password
- All data transmitted over HTTPS (TLS)
- JWT tokens with short expiry (24 hours)
- Rate limiting on all API endpoints
- Server-side only storage of all API keys
9. Children's Privacy
WebGenie is not intended for users under 18 years of age. We do not knowingly collect data from children. If you believe a child has provided us with data, please contact us immediately.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by displaying a notice on the site. Continued use of WebGenie after changes constitutes acceptance.
11. Contact
WebGenie is registered with the Information Commissioner's Office (ICO) under registration number C2050270.