Effective date: July 13, 2026

This policy explains what personal information webbface.com (the "Service") collects, how it is used, and the choices you have. It covers this website, our customer dashboard, and the business websites we host for customers.

1. Information we collect

• Account information. When you create an account we collect your name, email address, and authentication details. Sign-in is handled by our authentication provider, Clerk.
• Billing information. Payments are processed by Stripe. We receive your email, the amount, and payment status — we never see or store full card numbers.
• Contact-form enquiries. When you submit a contact form on this site or on a customer site, we collect the name, email, and message you provide, plus the page it was sent from.
• Technical data. Our infrastructure provider (Cloudflare) processes IP addresses and request metadata to serve pages, prevent abuse, and rate-limit form submissions. We do not run advertising trackers or analytics cookies on public pages.

2. How we use information

• To provide and operate the Service, including delivering contact-form enquiries to the business you sent them to.
• To manage accounts, subscriptions, and billing.
• To send transactional email, such as notifying a business that it has received a new enquiry (sent via Resend).
• To secure the Service, prevent abuse, and comply with legal obligations.

We do not sell personal information. We do not use it for third-party advertising.

3. Sites we power

Contact forms on customer websites collect enquiries on behalf of that business, which is responsible for how it uses them (for example, replying to you). We store those enquiries as a processor for the business. If you have questions about how a specific business handles your data, contact that business directly.

4. Cookies

Public pages set no advertising or analytics cookies. The customer dashboard uses strictly necessary session cookies from Clerk to keep you signed in. Cloudflare may set cookies required for security and bot protection.

5. Service providers

We share personal information only with the providers needed to run the Service: Cloudflare (hosting and content delivery), Neon (database hosting), Clerk (authentication), Stripe (payments), and Resend (transactional email). Each processes data under its own contractual and security commitments.

6. Data retention

Account and billing records are kept while your account is active and as required for legal and accounting purposes. Contact-form enquiries are kept until the receiving business deletes them or its site is removed. You may request deletion at any time (see below).

7. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise any of these rights, contact us using the details below — we respond within 30 days.

8. Security

Data is encrypted in transit (TLS) and at rest. Each customer site's data is isolated at the database layer with enforced row-level security policies. Access to production systems is limited and authenticated.

9. Children

The Service is not directed to children under 13 (or the equivalent minimum age where you live), and we do not knowingly collect their personal information.

10. Changes to this policy

We may update this policy from time to time. Material changes will be announced on this page with an updated effective date.

11. Contact

Privacy questions or requests: use the contact form or email leads@webbface.com.