Privacy Notice

Webora AI is operated by Kavisha Kandanarachchige, who is the data controller for the personal data described here. This means Kavisha Kandanarachchige decides why and how your data is used.

Data we collect and why

• Account data (name, email, login details) — to create and run your account. Legal basis: performing our contract with you.
• Business and website content (business details, services, contact details, logos and images you upload) — to generate, host and publish your website. Legal basis: contract.
• Preview and contact requests (name, business, email, message) — to reply and provide the free preview you asked for. Legal basis: legitimate interests and steps before a contract.
• Support messages — to help you. Legal basis: contract and legitimate interests.
• Technical data (IP address, device and browser details, usage logs) — for security, fraud prevention and improving the product. Legal basis: legitimate interests.
• Marketing — we only send marketing emails with your consent, and you can opt out anytime.

Who we share it with

• Service providers who host and run the service, such as hosting, database and AI providers.
• Paddle.com, our Merchant of Record, to sell our plans and manage subscriptions, payments, tax and invoicing.
• Professional advisers such as lawyers and accountants.
• Authorities, where the law requires it.

We do not sell your personal data.

International transfers

Our providers may process data outside your country, including outside the UK/EEA. Where this happens we rely on safeguards such as Standard Contractual Clauses or adequacy decisions.

How long we keep it

We keep account and website data while your account is active and for up to 30 days after it ends so you can export it. Preview requests are kept for up to 12 months. After that, data is deleted or anonymised unless the law requires us to keep it longer.

Your rights

Depending on where you live, you can ask to access, correct, delete, restrict or port your data, object to processing, and withdraw consent at any time. You may also complain to your local data protection authority. We respond to requests within one month. To make a request, use our contact page.

Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit and access controls.

Cookies

We only use essential cookies and similar storage needed to keep you signed in and to run checkout. We do not use advertising cookies. You can clear them in your browser settings, but you may then be signed out.

Changes

We may update this notice and will post changes on this page.