← Back to home

Privacy Policy

Last updated: October 23, 2026

This Privacy Policy explains how WebTwizz Technologies Inc. ("WebTwizz," "we," "us," or "our") collects, uses, and protects your personal information when you use our website and services, including visiting webtwizz.com, using our AI-powered website builder, or contacting us.

If you have questions, contact us at support@webtwizz.com.

Information We Collect

Information You Provide

We collect information you voluntarily provide when you create an account, make a purchase, or contact us:

  • Name and email address
  • Password
  • Account and billing information

Payments: All payments are processed securely by Stripe. We do not store your full credit card numbers.

Social Login: If you sign up using Google or another social provider, we receive basic profile information such as your name and email address.

Sensitive Information: We do not collect or process sensitive personal information (such as racial or ethnic origin, religious beliefs, health data, or biometric data).

Information Collected Automatically

When you use our Services, we automatically collect certain technical and usage data:

  • Log Data: IP address, browser type, device information, operating system, pages visited, actions taken, and referring URLs
  • Device Data: Hardware model, operating system version, unique device identifiers
  • Location Data: Approximate location based on your IP address. You can disable precise location access in your device settings.

Google User Data

When you connect a Google service to a WebTwizz project, we access only what that service needs, and only after you allow it on Google's permission screen:

  • Google Sign-In: your name, email address and profile picture, to create and sign in to your account.
  • Google Sheets: only the spreadsheets you pick or create through WebTwizz. We read and write their rows when you use a spreadsheet as your site's data. We cannot see any other file in your Google Drive.
  • Google Analytics: we list your Google Analytics properties so you can pick one for your site. If that property has no web data stream for the site, we create one and add its measurement ID to your site so visits are counted. We then read reports for that property (visitors, page views, top pages, traffic sources and visitors right now) to show them to you inside WebTwizz, and to our AI assistant when you ask it about your traffic. We never change or delete your existing properties, streams or settings.
  • Google Calendar: we list the calendars you own so you can pick the one your site books into. When a visitor books on your site, we check only when that calendar is busy, without reading what your other events are, and add the booking to it as an event with the visitor's name and email. We show you the upcoming bookings your site made, and cancel a booking when it is cancelled on your site. We only read, change or cancel events your site created.
  • Google Search Console: we verify that you own your site's address, add it to your Search Console and send Google its sitemap so its pages get found. We then read your site's search data (the searches people used to find it, clicks, positions and whether a page is indexed) to show it to you inside WebTwizz, and to our AI assistant when you ask how your site does in search. We never remove your sites or change their other settings.

The sign-in tokens Google gives us are stored encrypted and used only for the features above. We do not keep copies of your Analytics or Search Console reports beyond a short cache used to display them. We do not sell Google user data, use it for advertising, or use it to train AI models. When you ask the AI assistant about your traffic, search results or bookings, the data it needs is sent to the AI provider that answers you (the AI providers named in this policy) only to produce that answer. People at WebTwizz do not read your Google data unless you ask us to for support, or the law or security requires it.

You can disconnect a Google service at any time in your project's Connectors settings, and remove WebTwizz's access from your Google Account connections.

Google API: Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How We Use Your Information

We use your information to:

  • Provide our Services: Create and manage your account, process transactions, and deliver the features you request
  • Communicate with you: Respond to support requests, send service updates, and provide information you request
  • Improve our Services: Analyze usage patterns, fix bugs, and develop new features
  • Marketing: Send promotional communications (you can opt out anytime by clicking unsubscribe or contacting us)
  • Security: Detect, prevent, and address fraud, abuse, and security threats
  • Legal compliance: Comply with applicable laws and respond to legal requests

We do not sell your personal information.

How We Share Your Information

We may share your information with trusted third parties who help us operate our Services:

  • Cloud hosting providers (infrastructure and storage)
  • Database hosting providers (the saved data and sign-in accounts of the sites you build, stored in the United States)
  • Payment processors (Stripe)
  • Analytics providers (Google Analytics, Microsoft Clarity)
  • Advertising partners (Microsoft/Bing Ads, Reddit)
  • AI service providers (OpenAI, Anthropic, Moonshot)
  • Email and customer support tools

These providers are contractually obligated to protect your data and only use it for the services they provide to us.

We may also share information:

  • Legal requirements: If required by law, court order, or government request
  • Safety and rights: To protect our rights, safety, or property, or that of our users
  • Business transfers: In connection with a merger, acquisition, or sale of assets
  • With your consent: When you direct us to share your information

Public interactions: If you post content publicly on our Services, it may be visible to other users and the public.

Cookies & Tracking Technologies

We use cookies and similar technologies to:

  • Keep you logged in
  • Remember your preferences
  • Understand how you use our Services
  • Improve performance and reliability
  • Deliver and measure advertising

Cookie Consent (EU/EEA/UK): For visitors in the EU, EEA, and UK, we will only place non-essential cookies (analytics, advertising) after obtaining your explicit consent through our cookie banner. You can manage your preferences at any time through the cookie settings link in our footer.

Google Analytics: We use Google Analytics to analyze usage. You can opt out using the Google Analytics Opt-out Browser Add-on. See Google's Privacy Policy for more information.

Microsoft Clarity & Bing Ads: We use Microsoft Clarity for session recording and heatmaps, and Bing Ads for advertising. See Microsoft's Privacy Statement.

PostHog: Inside the signed-in product (the builder and dashboard) we use PostHog for product analytics and session replay. Session replay captures clicks, scrolls, page navigation, and DOM mutations so we can debug issues and improve UX. Passwords, payment-card fields, and any element marked sensitive are masked and never transmitted. Recordings are retained for 30 days. You can opt out at any time in Account Settings → Profile → Privacy, which disables PostHog tracking and session recording on your next page load. See PostHog's Privacy Policy.

Reddit: We use Reddit pixel for advertising measurement. See Reddit's Privacy Policy.

You can control cookies through your browser settings. Note that disabling cookies may affect some features of our Services.

AI Features & Data Processing

WebTwizz uses AI to generate code, layouts, and websites based on your descriptions. We use third-party AI providers including OpenAI, Anthropic, and Moonshot (Kimi).

How Your Data Is Processed

When you use AI features:

  • Your prompts and descriptions are sent to our AI providers to generate results
  • When you run an AI security review, your site's code is sent to the AI provider that processes your builds, under the same terms as building
  • Generated code and outputs are stored in your account to provide the service
  • We may retain prompts and outputs for service improvement, debugging, and abuse prevention

AI Training & Your Data

  • We do not use your prompts or generated content to train our own AI models
  • We use API access with data processing agreements that prevent our AI providers from using your data to train their models
  • Your content is processed solely to provide the service you requested

Your Choices

  • You can request deletion of your AI-generated content by contacting us at support@webtwizz.com
  • Deleting your account will remove all associated prompts and generated content
  • You should not submit sensitive personal information (passwords, SSNs, health data, financial details) in AI prompts

AI Output Disclaimer

AI-generated content may contain errors or inaccuracies. You are responsible for reviewing and testing any generated code before use in production. We do not guarantee the accuracy, completeness, or suitability of AI outputs.

For details on our AI providers' data practices, see: OpenAI, Anthropic, Moonshot.

Using WebTwizz from ChatGPT, Claude and Other AI Assistants

You can connect your WebTwizz account to ChatGPT, Claude, or another AI assistant that supports connecting apps, and build or change your sites from a conversation. This section explains what that connection shares.

Connecting

To connect, you sign in to WebTwizz and approve access. We then issue the assistant an access token that lets it act on your WebTwizz account. We never see your password for the assistant, and the assistant never sees your WebTwizz password.

In ChatGPT you can also browse WebTwizz templates and help before you connect. Those requests carry no account details.

What We Receive

  • The requests the assistant sends when you ask it to use WebTwizz, such as a description of a site to build or a change to make, which the assistant writes from your conversation
  • Which site, page, or element a request is about, including what you click on in the WebTwizz card in the chat
  • Files and images you choose to use on your site, such as a logo, a photo, or a menu, including images the assistant made for you
  • General information the assistant includes with each request, such as your language, which we do not store

We do not receive your conversation history. We only receive what the assistant sends in a request to WebTwizz.

What We Send Back

We send the assistant what it needs to answer your request: for example your account name and email, your plan, your sites and their status, pictures of your sites, and progress and summaries of changes. The values of secret keys are never sent. WebTwizz never asks for payment card numbers, government ID numbers or secret keys through an assistant; you enter those in WebTwizz itself. In ChatGPT, the password for a password-protected site is set in WebTwizz too; in Claude and other assistants, you can give it in the conversation if you choose. The assistant's provider processes this under its own privacy policy, for ChatGPT the OpenAI Privacy Policy and for Claude the Anthropic Privacy Policy.

What we send about your site's own data depends on the assistant:

  • Through the WebTwizz app in ChatGPT, we do not send the records in your site's database
  • Through the WebTwizz connector in Claude's directory, we send the records you ask about, but leave out sign-in data and payment card, ID and health details
  • Through both, summaries of services connected to your site, such as payments or analytics, show totals without the names or contact details of the people behind them
  • Assistants you connect yourself by address, such as Claude Code or Cursor, receive the records you ask them to read

How We Use and Keep It

  • We use requests and files only to do what you asked, the same way as when you use the WebTwizz builder, and they use your WebTwizz credits the same way
  • Requests and their results are saved in your project's chat and version history, so you can see and undo them in WebTwizz, for as long as the project exists
  • Files you share are stored the same way as images you add in the builder, and you can ask us to delete them at any time
  • Access tokens are kept until you disconnect the assistant or they expire
  • We do not use any of this for advertising, and we do not sell it

Disconnecting

You can disconnect an assistant at any time in WebTwizz under Settings, Sessions, Connected apps, which revokes its access right away. Removing WebTwizz in the assistant also stops it from using your account. Deleting a project deletes its chat and version history.

Google Services

Social Login: If you sign in with Google, we receive your name, email, and profile picture. We use this only to create and manage your account. Review their privacy practices on their respective websites.

Google Maps: Our drag-and-drop builder includes Google Maps integration. When you use map features, your usage is subject to Google's Privacy Policy. Google may collect location data when you interact with maps.

International Data Transfers

Our servers are located in the United States. If you access our Services from outside the U.S., your information will be transferred to and processed in the United States.

For users in the EEA, UK, and Switzerland, we use appropriate safeguards for international transfers, including the European Commission's Standard Contractual Clauses. You can request a copy of these clauses by contacting us.

Data Retention

We retain your personal information only as long as necessary to:

  • Provide our Services while you have an account
  • Comply with legal obligations
  • Resolve disputes and enforce agreements

Typical retention periods:

  • Account data: As long as your account is active
  • Commercial/billing data: As long as your account is active, plus as required for tax/legal purposes
  • Usage and analytics data: Up to 1 year
  • Legal/compliance records: As required by law

When data is no longer needed, we securely delete or anonymize it.

Security

We implement appropriate technical and organizational measures to protect your information, including encryption, access controls, and secure infrastructure.

To check your sites for known security problems, our security scans send the names and versions of the packages your sites use to the npm advisory database. See our Security page for how scans work.

However, no system is 100% secure. We cannot guarantee absolute security of your data. You are responsible for keeping your account credentials confidential.

Children's Privacy

WebTwizz is designed for users 18 and older. We do not knowingly collect personal information from:

  • Children under 13 (as required by COPPA in the United States)
  • Children under 16 (as required by GDPR in the EU/UK)

If you believe a child has provided us with personal information, please contact us at support@webtwizz.com. We will promptly investigate and delete such information.

Your Privacy Rights

Depending on where you live, you may have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate or incomplete information
  • Delete your personal information
  • Object to or restrict certain processing
  • Data portability: Receive your data in a portable format
  • Withdraw consent where processing is based on consent

To exercise these rights, email us at support@webtwizz.com. We will respond within the timeframe required by applicable law.

Account Management

You can review and update your account information by logging into your account settings. To delete your account, contact us at support@webtwizz.com.

Marketing Opt-Out

You can unsubscribe from marketing emails by clicking the unsubscribe link in any email or contacting us. We may still send you non-marketing service communications.

US State Privacy Rights

If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you have additional privacy rights under state law.

Categories of Personal Information We Collect

In the past 12 months, we have collected the following categories of personal information:

CategoryExamplesCollected
IdentifiersName, email, IP address, account nameYes
Personal information (CA Customer Records)Name, contact informationYes
Protected classificationsAge, gender, race, ethnicityNo
Commercial informationPurchase history, billing information, subscription dataYes
Biometric informationFingerprints, face recognitionNo
Internet activityBrowsing history, search history, interactionsYes
Geolocation dataApproximate location from IPYes
Audio/visual informationPhotos, videos, recordingsNo
Professional informationJob title, employerNo
Education informationSchool, degreeNo
InferencesPreferences, characteristicsNo
Sensitive personal informationSSN, financial accounts, precise geolocation, health dataNo

Your Rights

Under state privacy laws, you may have the right to:

  • Know what personal information we collect and how we use it
  • Access your personal information
  • Correct inaccuracies
  • Delete your personal information
  • Obtain a copy of your data
  • Opt out of targeted advertising, sale of data, or profiling
  • Non-discrimination for exercising your rights

Sale of Personal Information: We do not sell personal information in the traditional sense (i.e., for monetary consideration).

Sharing for Targeted Advertising: We may share personal information (such as device identifiers, browsing activity, and advertising cookies) with advertising partners like Microsoft/Bing Ads and Reddit for cross-context behavioral advertising purposes. Under CCPA, this may be considered "sharing" of personal information. California residents can opt out of this sharing through our cookie preferences or by enabling Global Privacy Control (GPC) in their browser.

How to Exercise Your Rights

To submit a request, email support@webtwizz.com.

Verification: We will verify your identity before processing your request. We may ask for additional information to confirm you are who you say you are.

Authorized Agents: You may designate an authorized agent to make requests on your behalf. We require written authorization and may verify your identity directly.

Appeals: If we deny your request, you may appeal by emailing support@webtwizz.com. If your appeal is denied, you may contact your state attorney general.

Do Not Track & Global Privacy Control

Do Not Track (DNT): Some browsers offer a "Do Not Track" signal. There is currently no industry standard for responding to DNT signals, so we do not respond to them at this time.

Global Privacy Control (GPC): We honor Global Privacy Control signals from California residents as a valid opt-out request for the sale or sharing of personal information. If your browser sends a GPC signal, we will treat it as a request to opt out of targeted advertising.

Updates to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted here with a new "Last updated" date.

For significant changes, we may notify you by email or through a notice on our website.

Contact Us

If you have questions about this Privacy Policy or want to exercise your rights, contact us:

WebTwizz Technologies Inc.

18 King St E, Suite 1400

Toronto, ON M5C 1C4

Canada

support@webtwizz.com