Your website information stays under your control

We store the business details, website content, media, and settings you save to a workspace. Purchases add your name, email, plan, license key, payment references, and campaign attribution. We do not receive or store full card details; Stripe handles payment information.

If you buy through a marketplace such as Fiverr, we receive your name, order number and the details you send with the order from that marketplace, and use them to deliver your website and license.

Published websites are public. Contact-form messages are stored for the site owner and may be emailed to the address the owner provides. Do not publish passwords, customer lists, private documents, or other confidential information.

Website orders and booking requests store the customer’s name, contact details, any delivery address, the items, the total and the payment status for the site owner, and a one-way hash of the sender’s network address to stop spam. For site owners’ customers we act as a service provider to the site owner, who decides how to use that information.

When a site owner turns on card payment, the customer pays on Stripe’s checkout page under the owner’s own Stripe account. The owner is the seller; we do not receive card details and take no fee from the sale. We keep the payment status and Stripe’s reference for the order.

The free website check stores the address you check and the report we make from that public page (including text and links read from it), so the private report link keeps working. It may ask Google PageSpeed Insights to measure the page’s speed. If you ask us to email you the report, we send one email with the link and keep only a one-way hash of the address, for a day, to limit repeat sends.

Support conversations (by email or the question form) are stored so we can answer and follow up. Replies may be drafted by our AI support assistant, which runs on Anthropic’s Claude and reads the conversation and the account details needed to answer; every such reply says so, and you can ask for a person instead.

We use this information to deliver and restore purchases, save workspaces, publish websites, deliver visitor inquiries, prevent abuse, provide support, process refunds, and understand which marketing leads to purchases. We do not sell personal information for money. Some state privacy laws may treat the Meta advertising measurement described below as “sharing”; you can opt out of it as described there.

If you ask us to email you your free preview, we send the preview link and, only if you tick the reminders box, up to three reminders over the following week. We keep your email address, business name and preview link for this for at most 30 days, stop as soon as you unsubscribe (every email has a link) or buy, and never sell or share the address. The link holds only a random code; the answers it opens are kept on our server for 30 days so the preview can open on another device, and the same is true of a link made with Show someone this preview. Anyone you give a link to can open that preview.

Web Home Studios also keeps first-party traffic totals for its own public marketing and purchase pages. We count page views, anonymous browser sessions, and clicks on links or buttons using a randomly generated session identifier that is converted to a one-way hash. For each visit we also keep one broad source category (for example “search engine”, “social post” or “ad”), not the address of the page you came from. We do not record what a visitor types into a field. These totals do not store names, email addresses, full IP addresses, customer-website visits, or activity inside private owner and customer workspaces.

For each published customer website we add up page views and taps on its call button as daily totals, so the business owner can see how the website is working. These totals are counted by our hosting provider at the edge, with no cookies and no tracking script, and store nothing about the visitor: no IP address, browser details, names or pages visited before. Known bots are left out.

If you press “Find my business on Google” or “Check my Google listing”, the business name and town are sent to Google's Places service to look the business up (Google's privacy policy applies to that request). Nothing from Google is added to your answers unless you choose it, and we keep only what you confirmed.

Sometimes we make a private preview of how a US business’s website could look on Web Home Studios, using only what that business publishes on its own public website: its name, description, services, hours, towns served, business phone and address, public profile links, and its logo and main photo. Our reader identifies itself as WebHomeStudiosReader (formerly SimpleASiteReader) and follows each website’s robots.txt. We do not collect customer reviews or the names of staff or customers. A preview is private, is not listed in search engines, and is deleted after 30 days. We may email the business, at most twice, at the address it publishes for inquiries; every email says it is an advertisement and has a one-click link to stop. We keep a record of the business (website address, name, the email address we used, where we found it and where we saw its US address, and whether we contacted it) for up to 90 days after our last contact; after that, and whenever a business removes a preview or stops our emails, we keep only its website address and the dates we emailed it, so it is never emailed more than twice. If the business replies, we keep the conversation like any support conversation, for up to 24 months. Anyone can remove a preview with the “Not my business? Remove this” link on it, or stop our emails with the link in any of them. Either way we delete the preview and the business record at once, and we never contact the business again. To ask for removal another way, email support@webhomestudios.com.

Visitors in the United States: Meta measurement is on by default, and you can turn it off at any time with Your privacy choices in the footer. If your browser sends a Global Privacy Control signal, we treat it as that opt-out and do not measure. Visitors outside the United States are asked first, and measurement runs only after choosing Allow. A saved choice always wins.

When measurement is on, it covers these events: page visits, starting a free preview, creating a preview, sending a project brief or service request, starting checkout, and a completed purchase. With these events Meta receives browser and device information (the browser’s user-agent string and Meta’s browser advertising identifiers). Page visits and purchases are sent from the page; starting a preview, creating a preview, sending a brief or request and starting checkout are sent by our server only, never by Meta’s code in the page, so nothing typed on those pages can travel with them, and our server also sends the purchase. Meta’s automatic event setup is turned off, and what you type is never put in a page address. A completed purchase also sends the purchase value and a one-way hashed version of the customer email. We do not send Meta your IP address from our server, card details, the answers you type, or website content. Pages with private data (the owner panel, activation, workspaces, refunds, and published customer sites) are never measured. Turning measurement off stops it for future activity in that browser.

Data travels over encrypted HTTPS connections. Workspace, license, published-site, and inquiry data is stored with Neon, whose platform states that stored data and backups are encrypted at rest. Cloudflare serves the application and published sites, Stripe processes payments (and, for license purchases, sales tax and receipts), Resend delivers service email, Anthropic processes support conversations for the AI support assistant, the questions typed into the guide (to pick the matching help article; we do not store them) and, to write a free preview, the answers and changes typed into the preview builder and the text of a website you ask us to rebuild (our server does not store them when it makes the preview), Google measures page speed for the free website check and, when you use Find my business on Google, receives the business name and town you typed to look it up, and Meta receives measurement data as described in Advertising choices. Each provider also operates under its own privacy and security terms.

No internet service can guarantee perfect security. Keep the license key private and contact us immediately if you believe it has been exposed.

Delivery addresses on website orders are removed 90 days after the order. Website messages and orders are deleted 24 months after they arrive. Other workspace and published-site data remains while the website exists in the service; write to us and we erase a website’s messages or the whole website. Free website check reports remain so their links keep working; ask us and we delete one. Site owners can remove content from their workspace, and may request deletion of workspace, published-site, or inquiry data. Purchase, refund, fraud, and security records may remain as reasonably necessary for accounting, disputes, abuse prevention, and legal obligations. Backups can persist for a limited recovery period before expiring.

Customers can download a ready-to-host website ZIP and an editable project backup. The project backup contains workspace content and settings and restores inside Web Home Studios; it is not a stand-alone editor. Customers should keep their own copies if they want long-term control independent of our cloud storage.

To ask what we hold, correct account information, turn off advertising measurement, or request deletion, write support@webhomestudios.com. We may verify that the request comes from the license holder before acting. The service is operated from the United States.