UnwebbedLog inPrivacy Policy
The short version: we collect what the service needs to run, nothing more. No ads, no third-party analytics, no selling data. Ever.
What we collect
- Account: your email address and a hashed password (we cannot read your password).
- Your work: the searches you run, the leads and sites the service generates for you, and a ledger of your credit use.
- Cookies: two, both first-party and neither used for advertising. One keeps you logged in. The other remembers which link brought you here (for example a link we posted somewhere) for 30 days, so we can tell which of our own efforts actually work. No advertising cookies, no cross-site tracking, and nothing is shared with anyone.
- Server logs: standard technical logs (IP address, requests) kept briefly for security and debugging.
- Visit counts: which pages get viewed and which steps people reach — see below.
How we count visitors
We measure our own pages ourselves, rather than embedding Google Analytics or anything like it. No third party receives your data, because no third party is involved.
A visit is counted using a short code made by hashing your IP address together with your browser type, a secret, and today's date. Because the date is part of it, the code changes every day — the same person returning tomorrow is counted as someone new. That is deliberate: it lets us count how many people visited without being able to follow anyone over time, even if we wanted to. Your IP address is never stored in these counts, only used to build that day's code and then discarded.
We also record when an account is created, verified, or pays, so we can see where our own funnel loses people. That is tied to your account, not to a tracking profile, and it is never sold or shared.
Payments
Purchases are handled by Stripe as merchant of record. Your card details go to Stripe, never to us; Stripe's own privacy policy governs that data. We keep only receipts of what was purchased and the credit it granted.
AI processing
To build sites and analyze leads, relevant text is sent to AI models through OpenRouter. We do not send your email address or password to AI providers.
We send account email only: verification, password resets, receipts, and notices about changes that affect you. No marketing lists.
Where it lives and how long
Data is stored on our servers in the United States, with encrypted-in-transit access and nightly backups kept for 14 days. Delete your account and your data is removed; it ages out of backups within those 14 days.
Businesses in the lead lists
This is the part most privacy policies in this category leave out, so it is worth being plain about. Unwebbed shows its customers local businesses that appear to have no website. Those businesses have not signed up for anything and have never heard of us.
- What we hold: the business name, street address, phone number if one is published, category, and whether a website was found. Business contact details, published as such — never anything about a private individual.
- Where it comes from: open map data (Overture Places and OpenStreetMap), which aggregates publicly listed business information. We do not buy lists, scrape private sources, or infer anything.
- Why: so a web designer can approach a business that might want a website. That is the whole purpose, and it is a normal business-to-business one — the lawful basis in the UK and EU is legitimate interest.
- What we never do: contact anyone automatically. Every message is sent by a person, from their own email or phone. Nothing here sends on its own.
- How long: a record stays while a customer keeps it in their list, and goes when they remove it or close their account.
If that business is yours and you want out — use this form. No account, no explanation. We remove it from every customer's list and keep the name on a short do-not-add list so a future search does not bring it back. Usually within a day.
If you are in the UK, EU or California, this also covers your rights to access, correct, delete, or object: the same form does all of them, or email hello@unwebbed.app.
Your rights
Email us to get a copy of your data or to delete your account — we'll do either within a few days, and confirm when it's done.
Children
Unwebbed is not directed at children under 13 and we don't knowingly collect their data.
Changes
If this policy changes in a way that matters, we'll email account holders before it takes effect.