Privacy Policy

1. Introduction

Webscape ("we", "us", or "our") operates the platform at webscape.ai (the "Service"). This Privacy Policy explains what data we collect, how we use it, and your rights as a user. By using Webscape you agree to the practices described here. If you do not agree, please do not use the Service.

2. Data We Collect

• Account information: Email address and password hash (managed by Supabase Auth).
• Business information: Business name, website or profile URL, services offered, service descriptions, photos, logo, and contact information that you provide or that we extract from your existing online presence.
• Meta account connection details: When you connect your Facebook Business account, we store your Meta access token encrypted at rest using AES-256. We also store your Facebook Ad Account ID, Business Manager ID, and related identifiers needed to manage campaigns on your behalf.
• Lead form submissions: Data submitted by visitors to your Webscape landing pages (name, phone, email, and any other fields you configure). This data belongs to you.
• Usage data: Log files, browser type, IP address, and page interaction data collected automatically when you use the Service.
• Payment information: Billing details are handled entirely by Stripe and are not stored on our servers. We receive only a subscription status and customer identifier from Stripe.

3. How We Use Your Data

• To provide the Service: We use your business information to generate ad creatives, build your landing page, and populate campaign copy.
• To manage Meta ad campaigns: We use your stored Meta access token to create, publish, pause, and optimize ad campaigns on your connected Facebook Ads account. All actions are performed on your behalf and under your direction.
• To process payments: We pass billing data to Stripe to charge your subscription fee ($49/month).
• To improve the Service: Aggregated, anonymized usage data helps us identify bugs and improve features.
• To communicate with you: We send transactional emails (lead notifications, billing receipts, account alerts) using the email address you provided.

4. Meta Platform Data

Webscape integrates with Meta's Marketing API. When you connect your Facebook Business account, you grant us the following permissions:

• ads_management: To create, edit, publish, and pause ad campaigns, ad sets, and ads in your Ads account.
• ads_read: To read campaign performance metrics (impressions, clicks, spend, leads) and display them on your dashboard.
• business_management: To access your Business Manager and Ad Account to perform the above actions.

Your Meta access token is stored encrypted at rest (AES-256) and is used exclusively to manage your own ad campaigns. We do not sell, share, or use your Meta data for any purpose other than operating the campaigns you authorize. We comply with Meta's Platform Terms and Developer Policies.

5. Third-Party Services

We use the following third-party services to operate Webscape:

• Supabase — Database (PostgreSQL) and user authentication. Your business data and account information are stored in Supabase. Supabase is SOC 2 Type II certified.
• Stripe — Payment processing. Stripe is PCI DSS Level 1 certified. We never see or store your full card number.
• Meta / Facebook — Ad delivery and campaign management via the Meta Marketing API.
• Vercel — Hosting and serverless infrastructure for the Webscape application and your landing pages.
• Perplexity AI / xAI (Grok) — Used to research customer pain points during onboarding. Only your business category and location are sent; no personal data is included.

Each of these providers has its own privacy policy. We encourage you to review them.

6. Cookies

We use session cookies to keep you authenticated. These cookies are set by Supabase Auth and are strictly necessary for the Service to function. We do not use advertising cookies, tracking pixels, or any third-party analytics cookies. You can disable cookies in your browser settings, but doing so will prevent you from logging in.

7. Data Retention

• Active accounts: Your business data, ad creatives, landing pages, and lead data are retained for as long as your account is active.
• Subscription cancellation: After cancellation, your data is retained for 30 days so you can reactivate without losing your work. After 30 days, data is scheduled for deletion.
• Account deletion: You may request full account deletion at any time (see Section 8). We will delete all your data within 30 days of a confirmed request.
• Meta tokens: Your Meta access token is deleted immediately upon account deletion or when you disconnect your Meta account from within the app.

8. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your account and all associated data.
• Portability: Request an export of your business data, creatives, and lead data in a machine-readable format.
• Objection: Object to processing of your data in certain circumstances.

To exercise any of these rights, email us at support@webscape.ai. We will respond within 30 days.

9. Data Security

We take security seriously. Sensitive credentials (such as your Meta access token) are encrypted at rest using AES-256 before being stored in our database. All data in transit is encrypted with TLS. We follow industry-standard security practices and access controls. However, no system is completely secure — if you believe your account has been compromised, contact us immediately at support@webscape.ai.

10. Children's Privacy

Webscape is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected data from a minor, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, if the changes are material, notify you by email. Continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or your data, please contact us at: