Privacy Policy
1. What we collect
| What | Why |
|---|---|
| Your email and password | To create and secure your account. Passwords are stored only as a salted scrypt hash — we cannot read them. |
| Your website content — the description you type, business details, images, uploaded documents, and any links you paste | To generate and host your website. This is the service. |
| Material you import from a Google Maps, Yelp, Instagram, Facebook or TripAdvisor link, or from your existing website | To fill in your site with your real business facts instead of inventing them. |
| Enquiries from your visitors — name, email, phone, message, and AI assistant conversations on your published site | To deliver them to you in your dashboard. You are the controller of this data; we process it on your behalf. |
| Billing details | Handled entirely by Stripe. We store only a customer/subscription reference — never your card number. |
| Server logs — request path, status, timing, IP address | To keep the service running and diagnose faults. Secrets are redacted before writing. |
2. Who we share it with
Only these, and only for the purpose stated. We do not sell data to anyone.
| Supplier | What they receive | Purpose |
|---|---|---|
| Stripe | Your email and payment details | Subscriptions and card processing |
| AI model providers | The material you give us to build from, and your site’s knowledge base and the questions visitors ask it | Generating and editing your website, and answering visitors on it |
| Google (Places API) and Yelp (Fusion API) | Only the listing URL you choose to paste | Reading your public business listing |
Your site's files and database live on our own server infrastructure. We do not use advertising networks or third-party cookies.
Our own pages — this website and the dashboard — use Cloudflare Web Analytics to count visits. It is cookieless: it does not fingerprint your device, does not follow you to other websites, and cannot identify you. It records the page address, where you arrived from, your browser and country, and how quickly the page loaded. The websites we generate for you carry none of it — see section 3.
3. Cookies and similar
Webyhost does not set tracking cookies. Signing in stores a session token
in your browser's localStorage so you stay logged in; clearing
your browser data signs you out. Our analytics (section 2) sets no cookie
at all.
Published websites we generate for you contain no analytics and no tracking of any kind — not even ours. The only scripts on your site are the optional chat widget and, if you add an Instagram section, Instagram's official embed. Measuring your visitors on your behalf without your asking is not ours to do.
4. How long we keep it
Account and site data are kept while your account exists. Delete your account and we remove your account, sites, uploaded material, knowledge bases, enquiries and published files. Server logs rotate on a short cycle. Backups are retained for a limited period and then overwritten.
5. Your rights
You can ask us to export or delete your data, correct anything inaccurate, or object to a particular use. Write to mfakha@gmail.com and we will respond within 30 days. If you are in a jurisdiction with statutory data rights (such as the UK/EU GDPR), those rights apply to you and this section does not limit them.
6. Your own visitors' data
When someone fills in a form or chats with the assistant on a website we host for you, you decide what happens to that enquiry — we simply store and show it to you. If you have privacy obligations to your own customers, they are yours to meet; we will support any deletion request you pass on to us.
7. Security
Traffic is served over HTTPS. Passwords are hashed with scrypt
and never stored in readable form. The application server is not directly
reachable from the internet — it sits behind a reverse proxy. Administrative
access is by SSH key only.
8. Changes
If we change this policy materially we will update the date above and, for significant changes, tell account holders by email.
Questions, exports, or deletions: mfakha@gmail.com
Note: this policy describes accurately what the software does today. It has not been reviewed by a lawyer, and it is not legal advice. Have it checked against the law that applies to you before relying on it commercially.