Privacy Policy

Last updated: March 26, 2025

At Webfast AI, your privacy and data protection are extremely important to us. This Privacy Policy explains how we collect, use, share, and protect your personal data in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR).

1. Who We Are

Webfast AI is the data controller responsible for your personal data when you use our AI website builder and related services.

2. Data We Collect

We may collect and process the following types of personal data:


a. Account and Contact Data

  • Full name
  • Email address
  • Password (encrypted)
  • Business information (if applicable)


b. Usage Data

  • IP address
  • Browser type and version
  • Device information
  • Pages visited, actions taken, and interaction logs


c. Website Content

  • Text, media, and settings used to build your website
  • Uploaded files, domains, and published content

3. Legal Bases for Processing

Under GDPR, we process your data based on the following legal grounds:


  • Contractual necessity: To provide you with access to our platform and features.
  • Legitimate interests: For platform improvements, analytics, fraud prevention, and customer support.
  • Legal obligation: Where we are required to process your data under applicable law.
  • Consent: For optional services, marketing communications, and non-essential cookies.


You can withdraw your consent at any time.

4. How We Use Your Data

We use your data to:

  • Provide and maintain our services
  • Help you create and manage your website
  • Respond to your support requests and inquiries
  • Monitor and improve platform performance
  • Communicate important updates and service-related changes
  • Send optional newsletters and promotions (if you opt in)

5. Data Sharing and International Transfers

We do not sell your personal data.


We only share your data with:


  • Service providers (e.g., cloud hosting, payment processing, analytics) under data processing agreements
  • Legal authorities when required to comply with applicable laws or legal obligations


Some of our service providers may be located outside the EU/EEA. In such cases, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses).

6. Data Retention

We retain your personal data only for as long as necessary for the purposes outlined above or as required by law.


You can delete your account and data at any time by contacting us or through your account settings.

7. Your GDPR Rights

You have the right to:


  • Access your data
  • Correct inaccurate data
  • Delete your data ("right to be forgotten")
  • Restrict processing in certain situations
  • Object to processing based on legitimate interests
  • Data portability of your account-related data
  • Withdraw consent at any time (where processing is based on consent)
  • Lodge a complaint with a supervisory authority in your country

8. Cookies and Tracking Technologies

We use cookies and similar technologies to:


  • Authenticate sessions
  • Understand user behavior
  • Improve website performance


You can manage your cookie preferences via your browser.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse.

10. Updates to This Policy

We may revise this Privacy Policy periodically. Changes will be posted on this page and, where appropriate, we will notify you via email or in-app notification.

11. Contact Us

For any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us.