Privacy policy

Definitions

Personal Data

information that identifies or can reasonably be linked to you or your customers.

Processing

any operation on Personal Data, such as collection, storage, use, or deletion.

Service Providers

companies we hire to host, email, bill, or monitor the Services under contract.

1. Scope

Webbify is a trade name used by Jeffery Eckert, an individual sole proprietor doing business as webbify.build, with a business address at Solara Lane, Vista, California 92081, in the San Diego metropolitan area, United States (referred to in these documents as "Webbify," "we," "us," or "our"). Webbify is not a corporation, limited liability company, or partnership.

ATTORNEY REVIEW RECOMMENDED: These documents describe Webbify's current commercial and privacy practices as of the effective date shown on this page. They are not legal advice. A qualified attorney should review them before you rely on them for compliance, contract negotiation, or regulatory purposes. Webbify does not warrant that these terms satisfy every legal requirement that may apply to your business, industry, or location.

This Privacy Policy explains how Webbify processes Personal Data when you visit webbify.build, contact us at hello@webbify.build or (619) 786-0989, create or use a Dashboard account at dashboard.webbify.build, purchase Services, or use a Client Site that we host or maintain. It is part of the Agreement, but it does not describe proprietary architecture, security configurations, or internal implementation methods.

This Policy does not replace a privacy notice that you, as a customer, must give to visitors of your own Client Site. When you decide what information your Client Site collects and why, you are generally responsible for that notice and for the choices, consents, and instructions required for your business.

2. Definitions

Capitalized terms in this Privacy Policy have the meanings above or in the Terms of Service.

3. Categories of Personal Data we collect

Identifiers and contact details: name, business name, email address, telephone number, postal or billing address, Account identifier, and the contact details you provide for yourself or your business.

Commercial and transaction information: plan selected, quote and order details, invoices, payment status, applicable taxes, refund or cancellation records, and limited payment-related identifiers or metadata supplied by a payment processor. Card numbers and comparable payment credentials are handled by the processor and are not stored by Webbify.

Client Site and onboarding information: business description, services, hours, locations, brand assets, copy, photographs, logos, files, domain details, requested integrations, and other material you submit, approve, or ask us to publish.

Communications and support information: the content of emails to hello@webbify.build, legal@webbify.build, privacy@webbify.build, or billing@webbify.build; SMS or text messages to or from our Google Voice number (619) 786-0989; support tickets, chats, calls, replies, requests, and feedback you send to us; records needed to respond; and communications sent through a feature you enable. Do not send highly sensitive information unless we specifically ask for it through an appropriate channel.

Internet, device, and event information: IP address, device and browser type, approximate location derived from IP, pages or screens viewed, referring page, time and duration of visits, diagnostic events, security events, cookie or local-storage choices, and Account activity records such as sign-in requests, verification results, changes, and support actions.

Professional information and inferences: job title, company, role, and reasonable business-context inferences from information you provide, such as the plan or support category relevant to your request. We do not use these inferences to make decisions about employment, credit, housing, insurance, education, healthcare, or another high-impact eligibility decision.

Sensitive information: we do not ask you to provide government identifiers, full payment-card details, precise geolocation, health information, biometric data, or similar sensitive data through ordinary marketing, Account, or support channels. If you voluntarily include sensitive information in Content or a message, we may process it only as needed to address your request, secure the Services, or comply with law; please do not submit it unless necessary and authorized.

4. Sources of Personal Data

We collect Personal Data directly from you when you fill out a form, create an Account, make a purchase, submit Content, contact support, respond to a request, or otherwise interact with us. We may receive it from a person acting for your business, such as an owner, employee, contractor, or authorized representative.

We collect certain device, usage, and security information automatically when you use the Services. Optional marketing analytics are subject to the choices described in the Cookie Policy. We may also receive transaction status from our payment processor and information needed to operate an integration or domain service that you direct us to connect.

We do not buy consumer marketing lists for the purpose of building advertising profiles. If you give us information about another person, you represent that you have a lawful basis to do so and have provided any notice or obtained any consent required for that disclosure.

5. How and why we use Personal Data

We use Personal Data to respond to inquiries; create and administer Accounts; authenticate users; provide, host, maintain, support, and improve the Services; process orders and payments; deliver requested communications; manage domains or integrations you authorize; and provide a requested Client Site or feature.

We use Personal Data to protect the Services and people who use them, including preventing abuse, fraud, spam, unauthorized access, security incidents, and violations of our Terms; diagnosing and repairing failures; enforcing limits and consent choices; and maintaining records of actions that affect an Account.

We use Personal Data to comply with legal, tax, accounting, regulatory, and recordkeeping obligations; establish, exercise, or defend legal claims; and communicate material operational, billing, security, or policy notices. We may also use de-identified or aggregated information to understand reliability and product use; that information does not identify you and is not treated as Personal Data where law permits.

We do not use Personal Data to make solely automated decisions that produce legal or similarly significant effects about an individual. Some product features may perform a workflow you ask us to perform, but this Policy describes the data categories, purposes, safeguards, and recipient categories rather than proprietary operational details.

6. Legal bases for EEA and UK individuals

Where GDPR or UK GDPR applies, we rely on: contract (running your Account), legitimate interests (security, fraud prevention, service improvement balanced against your rights), consent (optional analytics cookies on the marketing site), and legal obligation (tax and accounting records).

7. How we disclose Personal Data

We disclose Personal Data to service providers that perform services on our behalf, such as infrastructure and security providers, domain and hosting providers, email and communications providers, payment processors, customer-support tools, and professional advisers. They may use Personal Data only as permitted by their contracts with us or as otherwise required by law. We name categories of providers below; we do not publish a exhaustive subprocessor registry on this page.

We disclose payment information necessary to complete a transaction to Stripe, our card payment processor. Stripe processes cardholder data under its own privacy notice and PCI obligations; Webbify receives limited tokens, status, and billing metadata. We disclose device and security signals to Cloudflare, Inc. for services such as bot protection and form security on webbify.build. If you consent to optional marketing analytics on webbify.build, Google Tag Manager and the analytics services configured through it may receive the information described in the Cookie Policy.

We may disclose Personal Data when you direct us to do so, such as connecting a Domain, enabling a third-party integration, or publishing material that you approve. We may disclose it in connection with a merger, financing, acquisition, sale of assets, or similar transaction, subject to applicable law and appropriate safeguards.

We may disclose Personal Data to courts, regulators, law enforcement, or other third parties when we reasonably believe disclosure is required by law, legal process, or a valid governmental request; to protect rights, safety, and security; or to investigate fraud, abuse, or a violation of this Policy or the Terms. We evaluate requests and disclose only what is reasonably necessary.

8. Sale, sharing, and targeted advertising

Webbify does not sell Personal Data for money. We do not share Personal Data for cross-context behavioral advertising, and we do not operate advertising cookies or advertising identifiers on webbify.build. We do not knowingly sell or share Personal Data of people under sixteen years old.

We do use service providers to operate the Services and, with consent, to measure marketing-site performance. A service-provider disclosure is not a sale or cross-context behavioral advertising where the provider is contractually limited to providing services to us. If our practices materially change, we will update this Policy and provide any notice or choice required by law before the change takes effect.

9. Retention and deletion

We retain Personal Data for as long as reasonably necessary for the purposes described in this Policy, including the length of an active customer relationship, and then for a reasonable period to resolve disputes, enforce agreements, meet legal obligations, and maintain security. Retention periods vary by category, context, and legal requirement.

As a general operating schedule, we retain billing and tax records for seven years; Client Site Content while an Account is active and for up to ninety days after closure; and sign-in and audit records for about twelve months, unless a longer period is needed for an investigation, legal hold, fraud prevention, backup cycle, or legal requirement. Deletion from active systems does not always mean immediate removal from resilient backup media; backup copies are protected and removed on their normal lifecycle.

When information is no longer needed, we delete, de-identify, aggregate, or isolate it using reasonable measures. You may request deletion as described below. A deletion request does not require us to delete information that we must retain, may retain under a legal exception, need to complete a transaction or protect security, or cannot reasonably verify as belonging to you.

10. Security

We use reasonable administrative, technical, and organizational measures intended to protect Personal Data, including access controls, encryption in transit where appropriate, restricted operational access, and security logging. No method of transmission, storage, or administration is completely secure; we cannot guarantee absolute security.

Payment card data is handled by Stripe; Webbify does not store full card numbers or CVV codes. Dashboard authentication relies on email verification and session controls. Infrastructure traffic may pass through Cloudflare security services as described in Section 7.

You also play an important role in security. Keep Account email access secure, protect devices and recovery methods, use only authorized representatives, and notify us promptly at privacy@webbify.build or legal@webbify.build if you suspect unauthorized Account access or a security incident. If an incident requires notice under applicable law, we will provide notice as required after appropriate assessment and containment.

11. Your privacy choices

You can decline optional marketing analytics through the cookie banner on webbify.build. Declining does not affect essential functionality. You can change a stored local choice by clearing the relevant site storage or contacting us; see the Cookie Policy for further detail.

You may opt out of promotional email by following the unsubscribe instructions in that message or emailing hello@webbify.build with "unsubscribe" in the subject. We may still send transactional, security, billing, legal, or service-related communications that are necessary to provide the Services or comply with law. If a Customer enables messages to its own contacts, that Customer controls the opt-out process for those messages.

Some browsers offer privacy controls such as cookie blocking or Global Privacy Control. Where a legally recognized opt-out signal applies to a practice we conduct, we will honor it as required by applicable law. Because we do not sell or share Personal Data for cross-context behavioral advertising, there is currently no sale/share opt-out to apply on webbify.build.

12. Privacy rights and how to submit a request

Depending on your location, you may have the right to request access to, correction of, deletion of, or a portable copy of Personal Data; to restrict or object to certain processing; to withdraw consent where processing is based on consent; and to appeal a decision about a rights request. These rights are not absolute and may be subject to legal exceptions.

To make a request, email privacy@webbify.build or hello@webbify.build from the address associated with your Account, state your request, and provide enough information for us to locate the relevant records. You may also call or text (619) 786-0989. We will verify your request in a manner proportionate to its sensitivity, which may include confirming control of the Account email or requesting additional information. Do not send sensitive identity documents unless we specifically request an appropriate verification method.

We will not discriminate against you for exercising a privacy right. If we deny a request in whole or part, we will explain the basis where required and provide an appeal method when applicable. An authorized agent may submit a request where law permits, but we may require proof of authorization and verification of the individual concerned.

13. California privacy notice (CCPA / CPRA)

This section applies to California residents and supplements the rest of this Policy under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA / CPRA).

Categories collected in the preceding twelve months: identifiers (name, email, phone, IP address, Account ID); customer records (billing address, business details); commercial information (orders, invoices, payment status); internet or electronic network activity (pages viewed, device type, security logs); professional information (job title, company); and inferences drawn for support and service context. Sources: you, your representatives, automatic collection through the Services, Stripe for payment status, and integrations you authorize.

Business and commercial purposes: provide and secure Services; process Build Fees and the $50/month Monthly Service Fee through Stripe; support Accounts; respond to SMS, email, and voice contacts; detect fraud and abuse; comply with law; improve reliability. Disclosures: to service providers under contract (including Stripe and Cloudflare as described in Section 7), professional advisers, and as required by law.

We do not sell Personal Information and do not share Personal Information for cross-context behavioral advertising as those terms are defined by California law. We do not use or disclose sensitive personal information for purposes other than those permitted by CPRA without offering a right to limit.

California rights: know/access specific pieces and categories; correct inaccurate information; delete; obtain a portable copy; opt out of sale/share (not applicable to current practices); limit use of sensitive personal information where applicable; and non-discrimination. Submit requests via Section 12. We respond within forty-five days, extendable once where permitted. Authorized agents may act with proof of authorization. If we deny a request, California residents may appeal by replying to our response email with "CPRA appeal." We do not offer financial incentives for Personal Information.

14. Other United States state privacy rights

Residents of certain U.S. states may have rights to confirm processing, access, correct, delete, obtain a portable copy, opt out of targeted advertising, sale, or certain profiling, and appeal a decision. Use the request methods in Section 12. We will respond under the applicable state law and explain how to appeal when a request is denied.

Because Webbify does not sell Personal Data, share it for cross-context behavioral advertising, or use it for the high-impact automated decisions described above, our current practices do not give rise to several of those opt-out rights. If that changes, we will provide the applicable notice and choice.

15. International transfers

Data is stored in the United States. Transfers from the EEA or UK use appropriate safeguards such as standard contractual clauses where required.

16. EEA, UK, and Swiss rights (GDPR)

If you are in the European Economic Area, United Kingdom, or Switzerland, you may have rights of access, rectification, erasure, restriction, objection, portability, and withdrawal of consent, subject to applicable law. You may also lodge a complaint with your local supervisory authority. We encourage you to contact privacy@webbify.build first so we can try to resolve the concern directly.

Legal bases are described in Section 6. Where we rely on legitimate interests, those interests include operating and securing the Services, fraud prevention, and proportionate product improvement. You may object to processing based on legitimate interests where applicable law gives you that right.

International transfers from the EEA, UK, or Switzerland to the United States rely on appropriate safeguards such as the EU Standard Contractual Clauses or UK International Data Transfer Addendum where required. You may request more information about transfer mechanisms by emailing privacy@webbify.build.

When we process Personal Data as a processor for a Customer (for example, form submissions on a Customer's Client Site), that Customer is ordinarily the controller responsible for responding to data-subject requests about the Customer's site or contacts. We will reasonably assist Customers with such requests as required by applicable law and our contractual commitments.

17. Customer data and Client Sites

A Client Site may collect Personal Data from visitors for the Customer's business purposes, such as a contact request, appointment request, quote, purchase, or newsletter. The Customer determines the content of that site and is responsible for its own privacy notice, consent language, retention decisions, and lawful basis for collection. We provide Services to the Customer and process the relevant information as needed to provide those Services.

A Customer must not instruct us to collect, use, disclose, or retain Personal Data in a manner that violates law or another person's rights. If we receive a request from a visitor relating to a Customer's Client Site, we may direct the visitor to the Customer or, where appropriate, forward the request to the Customer and provide reasonable assistance consistent with our role.

18. Children

The Services are designed for businesses and are not directed to children. We do not knowingly collect Personal Data from anyone under sixteen. If you believe a child has provided Personal Data to us, contact privacy@webbify.build and we will take appropriate steps to investigate and delete it where required.

19. Third-party links and services

The Services may link to or connect with third-party websites, tools, payment services, registrars, maps, booking systems, or social platforms. Their privacy practices are governed by their own notices and terms, not this Policy. Review those notices before submitting Personal Data or enabling an integration. We are not responsible for a third party's independent privacy or security practices.

20. Changes to this Policy

We may update this Policy to reflect changes in law, the Services, or our data practices. We will post the revised Policy with a new effective date and, for material changes, provide additional notice when required by law. Your continued use after an effective date is subject to the updated Policy to the extent permitted by law; if you do not agree, stop using the affected Services and contact us about available options.

21. Contact and complaints

For a privacy question, rights request, or complaint, contact privacy@webbify.build or hello@webbify.build. For legal matters, contact legal@webbify.build. You may also call or text (619) 786-0989 (Voice and SMS (Google Voice)) or write to Solara Lane, Vista, California 92081, United States. Follow us on X at @webbify_ for public updates only—not for legal or privacy requests. Please include enough detail for us to understand and respond to your request without asking you to disclose unnecessary sensitive information.

22. Payments and Stripe

When you pay a Build Fee, Monthly Service Fee, or Domain pass-through charge, Stripe processes your payment method. Webbify receives confirmation, last-four digits, card brand, billing address if provided, and transaction identifiers needed for accounting and support. Stripe may collect device and fraud signals under its own policies. Disputes about card charges should be directed to billing@webbify.build; you may also use Stripe's receipt and dispute tools linked from your payment confirmation.

23. SMS, voice, and Google Voice

If you text or call (619) 786-0989, Google Voice (a Google LLC service) routes the message or call to Webbify. Message content, phone numbers, timestamps, and call metadata may be processed by Google under Google's terms and privacy policy in addition to this Policy. Standard message and data rates from your carrier may apply to SMS. We use these channels for customer support and operational communication, not for telemarketing or unsolicited sales calls.