Privacy Policy

Webenova (“we”, “our”, “us”) operates the website at webenova.co and provides AI development services. We are committed to protecting your personal data and being transparent about how we use it.

For any questions about this policy, contact us at hello@webenova.co.

We collect the following types of personal data:

Data you provide directly:

• Name and email address (when submitting a project brief or quote request)
• Company name and project details (when using the quote builder)
• Payment information (processed by Stripe — we never store card details ourselves)
• Communications sent to us by email

Data collected automatically:

• IP address and browser type (via server logs)
• Pages visited and time spent on site (via analytics)
• Email open and click events (via Resend, when you receive emails from us)
• Referral source (how you found us)

We use your data for the following purposes:

• To respond to project enquiries and send you proposals
• To process service orders and send invoices
• To send follow-up emails related to your enquiry (you can opt out at any time)
• To improve our website and services based on usage patterns
• To comply with legal obligations
• To prevent fraud and ensure the security of our services

We do not sell your personal data to third parties. We do not use your data for advertising purposes beyond the context of your direct enquiry with us.

For users in the European Economic Area, we process your data under the following legal bases:

• Contractual necessity — to fulfil the service you requested
• Legitimate interests — to follow up on enquiries and improve our services
• Legal obligation — where required by applicable law
• Consent — for any optional marketing communications (you can withdraw at any time)

When you submit a project brief or quote request, you will receive a confirmation email and, if you do not respond, up to three follow-up emails over the following ten days. These are sent in direct relation to your enquiry and are not general marketing.

To stop receiving follow-up emails at any time, simply reply to any email with “not interested” and we will remove you from all follow-up sequences immediately.

We track whether emails are opened and whether links are clicked. This helps us understand whether our proposals have been received and read. This tracking uses a pixel image embedded in the email, served via our email provider Resend.

We share your data only with the following service providers, solely to operate our services:

• Resend (resend.com) — email delivery and tracking
• Anthropic (anthropic.com) — AI-generated proposal content (your project details are sent to generate a tailored proposal)
• Stripe (stripe.com) — payment processing for deposit invoices
• Vercel (vercel.com) — website hosting and serverless functions

Each of these providers operates under their own privacy policy and data processing agreements. We do not share your data with any other third parties without your explicit consent.

We retain your personal data for the following periods:

• Project enquiry data — 2 years from the date of last contact
• Client project data — 7 years for legal and accounting compliance
• Email communication records — 2 years
• Payment records — 7 years as required by tax law

You may request deletion of your data at any time (see Your Rights below). Where we are required to retain data by law, we will inform you of this.

Our website uses minimal cookies. We do not use advertising or tracking cookies. The cookies we may use are:

• Theme preference (localStorage) — stores your light/dark mode choice. Not a cookie, stays in your browser only.
• Analytics (if enabled) — anonymous usage data to understand site performance. No personally identifiable information.

You can disable cookies in your browser settings at any time. This will not affect your ability to use our website.

Under GDPR and applicable data protection law, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate or incomplete data
• Erasure — request deletion of your personal data ("right to be forgotten")
• Restriction — ask us to restrict processing of your data
• Portability — receive your data in a structured, machine-readable format
• Object — object to processing based on legitimate interests
• Withdraw consent — at any time for consent-based processing

To exercise any of these rights, email us at hello@webenova.co. We will respond within 30 days.

If you are in the EU and believe we are not handling your data correctly, you have the right to lodge a complaint with your local data protection authority.

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Our website is served over HTTPS. Access to personal data is restricted to those who need it to operate our services.

No method of transmission over the internet is 100% secure. If you believe your data has been compromised, please contact us immediately at hello@webenova.co.

Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.

Some of our service providers (including Anthropic, Vercel, and Resend) are based in the United States. When your data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically. Continued use of our services after changes constitutes acceptance of the updated policy.

For any privacy-related questions, requests, or concerns, please contact us at: hello@webenova.co