Privacy

What we collect

• Account — name, email address, role and the organisation you belong to. You give us these, or your administrator does when inviting you.
• Billing — company details and payment history. Card details never reach us: they go directly to Stripe, our payment provider.
• Technical records — requests to the platform, with timestamp and originating address, kept to operate the service and investigate abuse or faults.
• Correspondence — what you write to us for support, and our replies.

What we do not collect

There is no analytics or behavioural tracking in the application: no Google Analytics, no product-analytics tool, no advertising pixel. The blog counts visits with Matomo, hosted on our own server and configured without cookies, so nothing about you leaves our infrastructure and nothing is stored on your device. The cookies we do set are listed one by one, with their purpose and duration, in the cookie notice. All but one are strictly necessary or a preference you expressed yourself; the exception records which partner referred you, and it is not written unless you accept it. If that ever changes, that page and this one change with it.

Why, and on what basis

• To provide the service — performance of our contract with you or your organisation.
• To invoice and keep accounts — a legal obligation.
• To keep the platform secure — our legitimate interest in preventing abuse and diagnosing faults, which we balance by keeping technical records to what operating the service requires.

We do not sell personal data, do not use it for advertising, and do not use it to train models.

How long we keep it

Account data lives as long as the account. Billing records are kept for the period tax law requires. Technical records are kept for the shorter operational window needed to investigate incidents. Database backups age out after 24 hours — described on the security page.

Where a retention period is not yet enforced automatically by the system, we say so rather than quote a figure we do not keep to. Ask us and we will tell you exactly what is held.

Who else sees it

The providers that run our infrastructure and payments — listed, with their role and location, on the sub-processors page. They act on our instructions and for no other purpose.

Your rights

You can ask for a copy of your data, correct it, have it deleted, receive it in a portable format, or object to processing based on legitimate interest. Write to privacy@webrobot.eu; we reply within thirty days.

If your account was created by an organisation's administrator, some requests are theirs to action rather than ours — we will tell you which, and put you in touch.

You also have the right to complain to a data protection supervisory authority in your country.