Privacy Policy

Weebb acts as the controller for personal data processed through the beta service. The operator's complete legal identity and contact details must be published before the beta opens to the public.

Privacy requests can be sent to the contact address shown at the end of this Policy.

Depending on how you use Weebb, we may process:

• Google account identifiers, email address, and authentication information;
• the website URL you submit and publicly accessible content extracted from it;
• website screenshots, activity descriptions, inspiration choices, and project status;
• an Instagram handle or profile URL when you choose to provide one;
• your answer to the optional beta pricing question;
• essential cookie, session, security, request, and diagnostic information.

We use this data to:

• analyze the submitted website and suggest relevant visual references;
• save your choices, prepare a preview, and display project progress;
• authenticate your account and protect the service from abuse;
• contact you about your request, including through Instagram when you provide a handle, and understand interest in the beta offer;
• diagnose failures and improve the reliability of the product.

Processing is based on the steps you ask us to take to provide the beta service, our legitimate interests in operating and securing Weebb, compliance with legal obligations, and consent where it is expressly requested.

Providing an Instagram profile is optional. When you provide one, we use it for updates about this redesign request. Not providing it does not prevent you from completing the request.

Data is available only to people and providers who need it to operate the service. These may include Supabase for authentication, database and storage; Google for OAuth sign-in; OpenAI for website activity analysis; Microlink when used as a screenshot fallback; and hosting, security, or infrastructure providers.

We do not sell personal data. We will not publish your submitted project or use it in public marketing without your permission.

Weebb may extract public text and visual information from the URL you submit and send relevant content to automated analysis providers. The result helps describe the business and rank inspiration references.

This processing does not make decisions with legal or similarly significant effects. You personally select all final references; if activity analysis is unavailable, suggestions come from the general catalogue.

We retain account and project data for as long as needed to process the request, maintain your recap, operate the beta, resolve disputes, and meet legal obligations. When it is no longer needed, it will be deleted or anonymized. Browser drafts may remain on your device until they expire or you clear browser storage.

We use access controls, authenticated storage, and other reasonable safeguards. No online service can guarantee absolute security.

Some providers may process data outside your country or the European Economic Area. Where required, Weebb relies on appropriate safeguards made available by those providers, such as adequacy decisions or standard contractual clauses.

Depending on applicable law, you may request access, correction, deletion, restriction, portability, or objection, and may withdraw consent where processing relies on it. You may also complain to your local supervisory authority; in France, this is the CNIL.

We may need to verify your identity before acting on a request.

Weebb uses browser storage for authentication, session, language preferences, security and unfinished requests. It does not use advertising cookies or record browsing sessions.

When enabled, Umami measures visits to our customer-facing pages and actions in the redesign journey, including reference choices, the optional Instagram step, sign-in, saving a request, viewing a loaded comparison and leaving for Stripe after server authorization. Umami also measures loading speed, responsiveness and visual stability on these pages. Vercel Web Analytics and Speed Insights are not used. We send fixed event names and paths, the hostname and public website identifier. The first pageview may include an external referring origin, without its path or parameters. We do not send customer or request identifiers, emails, submitted website URLs, captures, answers, page titles or URL parameters. Session recording and user identification are not enabled. Umami processes technical network/browser information and derives session identifiers; this is not a claim of irreversible anonymity. Analytics are not joined with customer records. Account and admin pages are excluded. We do not represent the absence of tracking cookies as establishing a consent exemption.

We may update this Policy as the beta evolves. Material changes will be communicated when required.