Privacy Policy

1. Who we are

WebBuilder is a trading name of M4siz Limited (“we”, “us”, “our”), registered in England and Wales. Registered office: 55 Crown Street, Brentwood, Essex, CM14 4BD. Our service is available at app.webbuilder.agency. For data protection purposes, M4siz Limited is the data controller for personal data collected through the service.

Contact: hello@webbuilder.agency

2. What data we collect

Account data

• Email address (required to create an account and deliver magic links)
• Account creation date and last sign-in
• Subscription tier and billing status

Business information you provide

• Business name, industry, services, tone, and description
• Contact details entered into site generation forms
• Any instructions or prompts submitted to the generator

Generated content

• HTML, copy, and AI-generated images produced for your projects
• Quality scores and generation history

Usage data

• Pages visited, features used, and generation counts
• IP address and browser/device type (standard server logs)

Payment data

Payments are processed by Stripe. We do not store card numbers or full payment details. We receive a Stripe customer ID and subscription status.

3. How we use your data

• To provide the service — generate sites, host them, and manage your account
• To send transactional emails (magic links, trial notices, billing receipts) via Brevo
• To process payments and manage subscriptions via Stripe
• To improve generation quality (aggregate, anonymised patterns across industries and tones)
• To detect and prevent abuse or violations of our Terms of Service

We do not sell your data. We do not use your data for advertising.

4. Legal bases for processing (UK GDPR)

• Contract performance — processing necessary to provide the service you signed up for
• Legitimate interests — security, fraud prevention, and service improvement
• Legal obligation — retaining billing records as required by law

5. Third-party services

We use the following sub-processors to deliver the service:

SCCs = Standard Contractual Clauses (UK-approved mechanism for international data transfers).

6. Data retention

• Account and project data is retained while your account is active
• On account deletion, personal data and generated sites are removed within 30 days
• Billing records are retained for 7 years as required by UK tax law
• Server logs are retained for up to 30 days

7. Your rights (UK GDPR)

You have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — request deletion of your personal data (subject to legal retention obligations)
• Restriction — ask us to limit processing in certain circumstances
• Portability — receive your data in a machine-readable format
• Object — object to processing based on legitimate interests

To exercise any of these rights, email hello@webbuilder.agency. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

We use session cookies for authentication only. We do not use tracking, advertising, or analytics cookies. A cookie consent notice is shown on first visit.

9. Security

We use HTTPS throughout, store passwords as cryptographic hashes (we use magic links — no passwords are stored), and restrict access to production systems. No system is completely secure; if you become aware of a security issue please email hello@webbuilder.agency.

10. Children

WebBuilder is not directed at children under 18. We do not knowingly collect data from anyone under 18. If you believe we have done so, contact us and we will delete it promptly.

11. Changes to this policy

We may update this policy from time to time. We will notify you of material changes by email. The “Last updated” date at the top of this page reflects the current version.

12. Contact

For any privacy-related questions or requests: hello@webbuilder.agency