Privacy Policy

1. Who is responsible

Megahost LLC, 36 South 18th Avenue, Suite D, Brighton, CO 80601, United States, operates WebModernize. For questions about privacy, write to privacy@webmodernize.com.

We act as the data controller for data about our customers’ accounts, billing, support and visitors to our website. When our customers use the Service to process data about their own prospects, our customers are the controllers and we act as their processor under our Data Processing Addendum.

2. Data we collect about customers and visitors

• Account data: name, email address, password (stored only as a salted hash), language, workspace name and role.
• Billing data: plan, billing period and payment status. Card details are collected and stored by Stripe, not by us.
• Usage and technical data: actions in the Service, IP address, browser type and logs, used for security, support and to measure plan allowances.
• Communications: messages you send us through the contact form or by email.
• Cookies: only those needed to run the Service (see our Cookie Policy).

3. Data processed on behalf of customers

Customers may import or collect business contact details of their prospects (such as name, role, work email and company), the public content of company websites, and engagement data on emails they send (deliveries, opens, clicks, preview views, replies and unsubscribes). We process this data only on our customers’ instructions to provide the Service.

4. Why we use personal data

• To provide, maintain and secure the Service (performance of our contract with you).
• To process payments and keep accounting records (contract and legal obligation).
• To send account emails such as verification, password resets, invitations and billing notices (contract).
• To prevent abuse, protect deliverability and enforce our policies (legitimate interests).
• To answer enquiries (legitimate interests or steps before a contract).
• We do not sell personal data and we do not use customer data to train AI models.

5. Who we share data with

We use service providers ("sub-processors") that process data on our behalf under contracts that protect it:

• Hosting and infrastructure: Hetzner Online (servers) and Cloudflare (DNS).
• Payments: Stripe.
• AI processing: OpenAI and, where configured, Anthropic or Google, to analyse websites and generate copy and designs. Inputs are business website content and the analysis. Under these providers’ API terms, API data is not used to train their models by default.
• Email delivery: the mail servers configured for the platform and, where a customer connects one, the customer’s own email provider.

6. International transfers

We are based in the United States and our providers may process data in the United States, the European Union and other countries. Where the law requires it, transfers are protected by appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

7. How long we keep data

• Account and workspace data: for as long as the account is active, then up to 30 days after termination before deletion, plus backup cycles.
• Billing records: as long as tax and accounting laws require.
• Security logs: for a limited period, typically up to 12 months.
• Suppression entries (unsubscribes and bounces): kept for as long as needed to keep honouring them.

8. Security

We use encryption in transit, encryption of stored credentials, per-customer data isolation, access controls, rate limiting and monitoring. No system is perfectly secure, but we work to protect your data and will notify you of a personal-data breach as required by law.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent. California residents have rights under the CCPA/CPRA, including to know and delete; we do not sell or share personal information for cross-context advertising. To exercise your rights, write to privacy@webmodernize.com. You may also complain to your local data-protection authority.

10. If you received an email sent through WebModernize

Emails sent through the Service are sent by our customers, who are responsible for them. Every such email contains an unsubscribe link that takes effect immediately. If you want your data removed or have a concern about a message, contact the sender, or write to privacy@webmodernize.com and we will pass your request to the customer and help them handle it.

11. Children

The Service is for businesses and is not directed to children. We do not knowingly collect data from anyone under 16.

12. Changes

We may update this policy and will indicate the date of the latest version below. Material changes will be announced by email or in the Service.