Privacy policy

1. What data we collect

• Account information: When you register, we collect your email address. Optionally, you can provide your name and billing details (e.g. address, VAT ID).
• Project content & uploads: Files, images and website content that you upload or generate are stored and processed to create your website. These may contain personal data.
• Usage data: We record your credit usage and necessary actions to manage plans and limits.
• We do not track user behavior or browsing profiles and do not use analytics tools.

2. How we use your data

• To provide and improve our service
• To manage your account, subscriptions and credits
• To process payments via Stripe
• For security and abuse prevention

3. Where and how we store data

We use Firebase (a service by Google) for:

• Authentication
• Cloud Firestore database (hosted in the Netherlands, EU)
• Cloud Storage (EU multi-region)

All data is stored securely and access is restricted.

4. Data security

All data stored in our systems is encrypted at rest using industry-standard methods (e.g. AES-256) and transmitted via TLS. This applies to Cloud Firestore and Cloud Storage for Firebase. Encryption and decryption are handled by Google’s infrastructure.

5. AI processing by third parties

webinice uses ChatGPT to create and adapt website code and Google Gemini to generate images.

These services may temporarily process content on servers outside the EU (including the USA). Processing is based on appropriate safeguards under GDPR, e.g. Standard Contractual Clauses (SCCs).

The models are not trained on your data and there is no permanent storage of your content with these providers.

6. Third-party services

We use the following providers:

• Firebase (Google LLC): hosting, authentication, database and storage
• Stripe (Stripe, Inc.): payment processing
• Netlify (Netlify, Inc.): optional deployment when you connect your account

These providers may process data outside the EU; we rely on Standard Contractual Clauses and similar safeguards.

7. Your rights

Under applicable data protection laws, you have in particular the following rights:

• Request information about the data we process
• Request correction or deletion
• Request data portability (export)
• File a complaint with a supervisory authority

To exercise your rights, contact us at info@webinice.net

8. Cookies

We only use strictly necessary cookies for login and session management. We do not use tracking or analytics cookies.

9. Retention

We store data only as long as necessary to provide the service and to comply with legal obligations. You can delete your account and related data at any time. Statutory retention periods (e.g. for invoices) remain unaffected.

10. International data transfers

Some data may be stored or processed outside the EU/EEA (e.g. in the USA). We implement appropriate safeguards under GDPR (such as SCCs).

11. Changes to this policy

We may update this privacy policy from time to time. The current version is always available on our website.

12. Contact

If you have questions or concerns about your data, contact us at info@webinice.net

This privacy policy serves informational purposes only and does not constitute legal advice.