Privacy
Last updated: 17 August 2026.
This page is about data we hold on you — as an account holder, a visitor, or someone who wrote to us. Data your organisation puts through the platform is a different matter: there your organisation decides, and we act on its instructions. That is covered by the data processing agreement.
What we collect
- Account — name, email address, role and the organisation you belong to. You give us these, or your administrator does when inviting you.
- Billing — company details and payment history. Card details never reach us: they go directly to Stripe, our payment provider.
- Technical records — requests to the platform, with timestamp and originating address, kept to operate the service and investigate abuse or faults.
- Correspondence — what you write to us for support, and our replies.
What we do not collect
There is no analytics or behavioural tracking in the application: no Google Analytics, no product-analytics tool, no advertising pixel. We set one cookie — the session cookie that keeps you signed in. It is strictly necessary, which is why you are not asked to consent to it and why there is no cookie banner. If that ever changes, this page changes with it.
Why, and on what basis
- To provide the service — performance of our contract with you or your organisation.
- To invoice and keep accounts — a legal obligation.
- To keep the platform secure — our legitimate interest in preventing abuse and diagnosing faults, which we balance by keeping technical records to what operating the service requires.
We do not sell personal data, do not use it for advertising, and do not use it to train models.
How long we keep it
Account data lives as long as the account. Billing records are kept for the period tax law requires. Technical records are kept for the shorter operational window needed to investigate incidents. Database backups age out after 24 hours — described on the security page.
Where a retention period is not yet enforced automatically by the system, we say so rather than quote a figure we do not keep to. Ask us and we will tell you exactly what is held.
Who else sees it
The providers that run our infrastructure and payments — listed, with their role and location, on the sub-processors page. They act on our instructions and for no other purpose.
Your rights
You can ask for a copy of your data, correct it, have it deleted, receive it in a portable format, or object to processing based on legitimate interest. Write to privacy@webrobot.eu; we reply within thirty days.
If your account was created by an organisation's administrator, some requests are theirs to action rather than ours — we will tell you which, and put you in touch.
You also have the right to complain to a data protection supervisory authority in your country.