Privacy Policy

1. Who we are

WebBuilder is a trading name of M4siz Limited (“we”, “us”, “our”), registered in England and Wales. Registered office: 55 Crown Street, Brentwood, Essex, CM14 4BD. Our service is available at app.webbuilder.agency.

For data protection purposes, M4siz Limited is the data controller for personal data collected through the service under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Contact: hello@webbuilder.agency

Additional information about how M4siz processes personal data is available in our main Privacy and Customer Data Retention Policy at m4siz.com/privacy-policy.

2. What data we collect

Account data

• Email address (required to create an account and deliver magic links)
• Account creation date and last sign-in
• Subscription tier and billing status

Business information you provide

• Business name, industry, services, tone, and description
• Contact details entered into site generation forms
• Any instructions or prompts submitted to the generator

Generated content

• HTML, copy, and AI-generated images produced for your projects
• Quality scores and generation history

Usage data

• Pages visited, features used, and generation counts
• IP address and browser/device type (standard server logs)

Payment data

Payments are processed by Stripe. We do not store card numbers or full payment details. We receive a Stripe customer ID and subscription status.

Some of the information you enter into the service (for example, business descriptions, prompts, and generated content) may include personal data relating to you or others. You are responsible for ensuring you have a lawful basis to include any third-party personal data in that content.

3. How we use your data

We use your data to:

• Provide the service — generate sites, host them, and manage your account
• Send transactional emails (magic links, trial notices, billing receipts) via Brevo
• Send you important service and product updates relating to your account and place in the funnel (for example, onboarding steps, trial status, upgrade reminders)
• Process payments and manage subscriptions via Stripe
• Improve generation quality (aggregate, anonymised patterns across industries and tones)
• Detect and prevent abuse or violations of our Terms of Service
• If you choose to receive them, send you occasional product updates or other marketing-related information about WebBuilder or related M4siz services through similar channels (for example, email), in line with your preferences and applicable e-privacy laws. You can opt out of these at any time as described in the “Your rights” section below.

We do not sell your data. We do not use your data for advertising.

Some communications (for example, account creation emails, important service or security notices, and billing or subscription information) are necessary to operate the service and our contract with you. These are not marketing and you cannot opt out of receiving them while you maintain an account, although you may close your account at any time.

4. Legal bases for processing (UK GDPR)

We rely on the following legal bases to process your personal data:

• Contract performance — processing necessary to provide the service you signed up for (including account creation, site generation, hosting, and support)
• Legitimate interests — security, fraud prevention, service improvement, and in some cases sending product updates or marketing communications where this does not override your rights and freedoms
• Legal obligation — retaining billing records as required by law
• Consent — where required by law, we will ask for your consent before sending you certain types of electronic marketing communications. You can withdraw this consent at any time by using the unsubscribe link or contacting us.

5. Third-party services

We use the following sub-processors to deliver the service:

“SCCs” refers to Standard Contractual Clauses or equivalent UK-approved mechanisms for international data transfers.

Where personal data is transferred outside the UK (for example, to providers based in the USA), we use appropriate safeguards such as UK-approved Standard Contractual Clauses or the UK Addendum to ensure an adequate level of protection for your data, in line with UK data protection law.

We do not sell your personal data.

6. Data retention

• Account and project data is retained while your account is active
• On account deletion, personal data and generated sites are removed within 30 days
• Billing records are retained for 7 years as required by UK tax law
• Server logs are retained for up to 30 days

We may also retain limited information for a longer period where necessary to establish, exercise, or defend legal claims, in line with our legal obligations and legitimate interests.

7. Your rights (UK GDPR)

You have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate or incomplete data
• Erasure — request deletion of your personal data (subject to legal retention obligations)
• Restriction — ask us to limit processing in certain circumstances
• Portability — receive your data in a machine-readable format or have it transmitted to another controller where technically feasible
• Object — object to processing based on legitimate interests

You have an absolute right to object at any time to the use of your personal data for direct marketing. If you do so, we will stop using your data for that purpose. You can opt out of marketing by using the unsubscribe link in any email we send or by contacting us at hello@webbuilder.agency.

To exercise any of these rights, email hello@webbuilder.agency. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

We use session cookies for authentication only. We do not use tracking, advertising, or analytics cookies. A cookie consent notice is shown on first visit to explain this.

9. Security

We use HTTPS throughout and restrict access to production systems. We use magic links for authentication and do not store account passwords. No system is completely secure; if you become aware of a security issue please email hello@webbuilder.agency.

10. Children

WebBuilder is not directed at children under 18. We do not knowingly collect data from anyone under 18. If you believe we have done so, contact us and we will delete it promptly.

11. Changes to this policy

We may update this policy from time to time. We will notify you of material changes by email or via notices in the app. The “Last updated” date at the top of this page reflects the current version.

12. Contact

For any privacy-related questions or requests: hello@webbuilder.agency