Privacy Policy

1. Who is the Data Controller

The data controller for personal data collected through our website, platform, sales process, account management, and direct customer relationship is Websprint Inc.

Websprint Inc.
1301 N Broadway STE 32208
Los Angeles, CA 90012
United States

For any privacy question or to exercise your rights, contact us at legal@websprint.ai.

Where Websprint processes personal data on behalf of a customer through a customer website or related service, Websprint may act as a processor or service provider on behalf of that customer. In those cases, the customer is generally responsible for determining what personal data is collected and how it is used.

2. Personal Data We Collect

• Information you give us when you contact us, book a call, or become a client: full name, business email, phone number, company name, role, country, the message you send us, and any information you share during a sales call, onboarding, or support conversation.
• Booking data generated when you schedule a call via our scheduling provider, Cal.com, including the meeting time, time zone, contact details, and any details you provide.
• Account data generated when you create or use an account on app.websprint.ai, including your name, email address, login credentials, account settings, and activity related to your use of the platform.
• Customer and project data needed to provide the services, including business information, brand preferences, website goals, text, images, logos, design materials, billing information, and access information you choose to provide for domains, hosting, social media accounts, Google services, or other tools needed to complete your project.
• Payment and billing data processed through Stripe, including payment details, billing information, transaction data, subscription status, invoice data, and limited card details. Websprint does not store full credit card numbers.
• Technical data automatically collected when you visit the website or use the platform: IP address, device and browser type, operating system, referring URL, pages viewed, time spent, approximate location derived from your IP, usage data, log data, performance data, and security-related data.
• Cookies and similar technologies as described in our Cookie Policy, including technologies used to operate the website and platform, analyze traffic, improve performance, support security, and understand how our services are used.

We do not knowingly collect special categories of personal data, such as health information, religious beliefs, biometric data, or precise geolocation, unless you choose to provide such information and it is necessary for a specific service.

3. How We Use Personal Data and Lawful Bases

We process personal data for the following purposes and on the following lawful bases:

• To respond to your enquiry and schedule meetings — performance of pre-contractual steps at your request and our legitimate interest in handling business enquiries.
• To provide and operate our services, including website design, hosting, support, brand-related services, and related digital services — performance of the contract with you or our legitimate interest in providing the services requested.
• To manage accounts and platform access on app.websprint.ai — performance of the contract and our legitimate interest in protecting our services.
• To process payments, manage subscriptions, issue invoices, and handle billing — performance of the contract and legal obligation.
• To send service emails, onboarding steps, support replies, account notices, payment notices, renewal notices, and security alerts — performance of the contract and our legitimate interest in operating the services.
• To send occasional marketing emails about Websprint, where permitted by law — our legitimate interest, with the right to opt out at any time, or consent where required.
• To improve the website, platform, and services, including analytics, performance monitoring, bug fixing, and service optimization — our legitimate interest in running and improving our business.
• To prevent abuse, fraud, spam, unauthorized access, and security incidents — our legitimate interest in protecting our systems, customers, users, and business.
• To comply with legal obligations, including tax, accounting, regulatory, legal, and law enforcement obligations — legal obligation.

4. AI-Assisted Production

Websprint may use artificial intelligence tools and automation technologies as part of its internal production process, including for website design, development, copywriting, review, support, and service optimization.

Where necessary to provide the services, we may process customer-provided information, instructions, brand materials, text, images, logos, project data, and related content through these tools.

Websprint does not knowingly use sensitive personal data or confidential customer information to train third-party AI models unless you give us explicit consent or we agree otherwise in writing.

AI-assisted outputs may require human review and approval before use or publication. You are responsible for reviewing and approving any website, text, image, marketing material, or other output before publishing, using, or distributing it.

5. Sharing of Personal Data

We do not sell personal data. We share personal data only with the following categories of recipients and only to the extent necessary:

• Service providers who help us run the business and deliver the services, such as cloud hosting providers, database and infrastructure providers, payment processors, scheduling tools, analytics providers, email and communication tools, security providers, AI-assisted production tools, and other technical vendors. They are required to process the data only as needed to provide services to Websprint and to protect it.
• Third-party integrations enabled on customer websites, such as contact forms, analytics, booking tools, payment tools, newsletter tools, chatbots, or similar integrations. Where these tools are enabled, the relevant third-party provider may process personal data according to its own terms and privacy policy.
• Professional advisors, such as lawyers, auditors, accountants, consultants, and insurers, where necessary for legal, accounting, compliance, or business purposes.
• Authorities and courts, when we are legally required to do so or where necessary to protect our rights, customers, users, services, or the public.
• Acquirers or other relevant parties in the event of a corporate transaction, such as a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate confidentiality obligations.
• Other third parties where you instruct us to share the data or give us explicit consent.

6. Customer Websites and End User Data

Websprint designs, hosts, maintains, and supports websites on behalf of customers. Customer websites may collect personal data from visitors, leads, prospects, or end users, including names, email addresses, phone numbers, contact form submissions, booking data, payment-related data, newsletter sign-ups, chatbot messages, analytics data, cookie identifiers, IP addresses, and other information submitted through the website.

For personal data collected through a customer website, the customer is generally the controller or the party that determines the purposes and means of processing. Websprint generally acts as a processor, service provider, hosting provider, or technical provider operating under the customer’s instructions.

Customers are responsible for ensuring that their websites include appropriate privacy notices, cookie notices, consent mechanisms, lawful bases for processing, and any other information required by applicable law.

7. International Data Transfers

Websprint operates from the United States and provides services worldwide. Some of our service providers may process personal data outside your country of residence, including in the United States, the European Economic Area, the United Kingdom, or other countries.

When personal data is transferred internationally, we rely on transfer mechanisms permitted by applicable law, such as contractual safeguards, adequacy decisions, standard contractual clauses, or other lawful transfer mechanisms.

8. Data Retention

We keep personal data only for as long as needed for the purposes described in this Policy:

• Sales enquiries and prospect communications: up to 24 months from the last interaction, unless you become a client.
• Client, account, and subscription data: for the duration of the customer relationship and for a reasonable period after termination.
• Billing, invoice, tax, and accounting records: for as long as required by applicable law.
• Website analytics: according to the settings of our analytics providers and our operational needs, and may be aggregated or anonymized where appropriate.
• Marketing contacts: until you unsubscribe, object to processing, or the data is no longer needed.
• Security logs and technical records: for as long as reasonably necessary to detect abuse, investigate incidents, and protect our systems.

9. Your Rights

Subject to applicable law, including where relevant the GDPR / UK GDPR, you may have the right to:

• Access the personal data we hold about you and obtain a copy.
• Request rectification of inaccurate or incomplete data.
• Request erasure where conditions are met.
• Restrict or object to certain processing, including direct marketing.
• Request portability of data you have provided to us.
• Withdraw consent at any time where we relied on your consent, without affecting the lawfulness of processing before withdrawal.
• Lodge a complaint with a competent data protection authority.

To exercise any of these rights, write to us at legal@websprint.ai. We may need to verify your identity before responding. We will respond within the timelines required by applicable law.

10. How We Protect Your Data

We apply appropriate technical and organizational measures, including access controls, encryption in transit, secure hosting infrastructure, vendor due diligence, and regular review of our security practices.

No system is 100% secure. If we become aware of a personal data breach affecting your data, we will notify the competent authority and, where required, you, in accordance with applicable law.

11. California Privacy Rights

If you are a California resident and California privacy laws apply to Websprint, you may have specific rights regarding your personal information, including the right to know what personal information we collect, the right to request deletion or correction, the right to opt out of the sale or sharing of personal information, and the right not to be discriminated against for exercising your rights.

Websprint does not sell personal information for money.

To exercise your California privacy rights, contact us at legal@websprint.ai with the subject line “California Privacy Request”.

12. Changes to this Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new “Last updated” date. If the changes are significant, we will take additional steps to inform you.