PRIVATE PILOTNew builds and authorized existing-site intake are open for a limited number of projects.Request a review

Privacy Notice

Last updated: 4 October 2026

WPbyAI is operated by the wpbyai.com team. This notice covers our public website at wpbyai.com, the customer workspace at app.wpbyai.com, and related account, project and support services.

Information we handle

  • Accounts and sign-in: your email address, account identifiers, verification and password-reset records, password hashes for email accounts, and session/security records. If you choose Google sign-in, we receive the basic identity details you authorize, such as your Google account identifier, email, name and profile image. Sign-in does not grant us access to your Gmail messages, Drive files or contacts.
  • Website projects: your brief, prompts, approved facts, page content, uploaded materials, design choices, revisions, previews, screenshots used for project evaluation, generated files and delivery history.
  • Controlled imports: source archives, backups or authorized URLs that you provide through an available project intake workflow, together with inventory, security and recovery findings. Only upload material you are authorized to provide. The public contact form is not an archive or credential intake channel.
  • Payments, when available: order and subscription identifiers, selected product and price, billing status and relevant provider events. Paddle handles its checkout and payment details under its own privacy notice; do not send full card details to WPbyAI or through a project prompt.
  • Support and service operation: contact details, correspondence, request times, technical logs, device/browser information and security signals needed to operate and protect the service. Cookies or equivalent storage support sign-in, session security and in-progress workspace use.

Purposes and processing grounds

We use this information to provide requested previews and website generation, save projects and versions, authenticate users, deliver files, provide support, administer purchases and prevent abuse. We also retain necessary records to troubleshoot failures, protect rights and meet legal obligations. Where applicable, processing is based on providing or preparing your requested service, our legitimate interests in security and operation, legal obligations, or consent for an optional feature. Optional marketing is not a condition of using a paid project.

AI and service providers

Project processing uses AI models. Relevant briefs, page content, selected files or previews may be sent to the model provider and API intermediary used for that task. Do not put passwords, private keys, full payment details, or unrelated sensitive personal information into prompts or project materials. AI outputs can be inaccurate and require your review.

Our service uses providers including Alibaba Cloud for server hosting, Cloudflare for website delivery, security and object storage, Resend for account email, Google for optional sign-in, and Paddle for checkout when enabled. The information each provider receives depends on the feature you use. Project and account processing may occur in the United States or other countries outside your own, under the applicable provider arrangements and data-protection requirements.

We do not sell your personal information. We may disclose necessary information to processors helping provide the service, where legally required, to protect rights and security, or in connection with a lawful business transfer. We do not publish private projects, customer case studies or testimonials without separate permission.

Your website and its visitors

You are responsible for deciding what content belongs on your website and for the notices and permissions needed to collect your visitors’ information. Project runtimes may hold information submitted to a generated contact form. Access to that information is restricted to the relevant workspace. Export, third-party hosting and customer-site email have their own scope; a generated form does not automatically establish a production email service or a complete privacy compliance program for your business.

Retention and security

We retain account, project, version, support and security information for as long as needed to provide the service, maintain recovery options, resolve disputes and meet legal obligations. Backups and required transaction/security records may remain for a limited period after an active record is removed. Contact us to request deletion or clarify the records associated with your account; we do not promise immediate deletion from every backup.

We use access controls, project isolation, controlled material processing and backups. No service guarantees absolute security or recovery of every uploaded application. If you accidentally submit a secret, rotate it and contact support. Do not send more secret material in the support request.

Your choices and requests

Depending on applicable law, you may request access, correction, a copy, deletion, restriction or objection to processing, or withdraw consent for an optional activity. Contact support@wpbyai.com or use our contact form. Provide your account email and a concise description; we may need to verify your identity. Do not email passwords or private source archives. You may also have a right to complain to your local data-protection authority.

The service is intended for adults acting for themselves or a business and is not directed to children. We update this notice when relevant practices change and show the current date above.