Draft, not yet in force. This page describes what Widgeta does today, so the final text can be checked against it. Counsel writes and approves the binding version before it takes effect.
Privacy
This policy covers three things: the marketing site at widgeta.app, the application at app.widgeta.app, and the sites Widgeta builds and hosts for its customers. A link to another company's site is governed by that company's policy, not this one.
The marketing site
widgeta.app is a set of static pages. The typefaces, images and stylesheets are served from this site itself. Every page also loads Google Tag Manager.
Tag Manager is a container rather than a tool of its own: it fetches a script from Google and runs whatever is configured inside it. What is configured inside it today is Google Analytics 4.
Analytics sets cookies in your browser and gives it an identifier that recognizes the same browser on a later visit. It sends Google the pages you open, the page or search that sent you here, your device and browser, and a rough location worked out from your IP address. It does not receive your name or your email address, because no page here asks for either. You can refuse all of it by blocking cookies for this site in your browser, or with Google's own opt-out extension.
Still to write: how long Analytics keeps this data, and whether a visitor should be asked before it runs rather than after. It runs on page load today, with no consent step in front of it.
A second form is not ours at all. The search box on the 404 page posts what you type to www.google.com, which is stated next to the box as well as here.
The waiting list
The "notify me" boxes ask for an email address. The form posts to Formspree (formspree.io), a hosted form service, and your browser is sent to their domain for the moment it takes them to record it and send you back here. They hold the list; we read it.
What is sent. The address you type, and which page and which box you typed it into, so a list of addresses is not a list with no idea what any of them were reading. Nothing else. The service will also see your IP address and browser, the way any server does.
What it is for. One email, on the day the thing you asked about opens. It is not a newsletter, it is not sold, and it is not passed to anyone. If you want off the list before then, write to us and it is deleted; there is nothing else attached to it to delete.
The application at app.widgeta.app
app.widgeta.app is a separate service. It collects what is needed to build, publish and run one site for your business.
Your account. You sign up with an email address and a password of at least 10 characters. Passwords are handled by Better Auth and stored as a hash, never in readable form. An email verification message is sent when you sign up; it is not required to sign in. A session cookie keeps you signed in for 30 days and is refreshed daily. The cookie is HttpOnly, Secure and SameSite=Lax, the session is stored in our database, and signing out deletes it.
Your business material. The business name, phone number, license details, address (shown on the site only if you choose), services, cities, and the details you give about your work. Every version you save is kept, because a published site has to point back to the answers that made it. Photographs, when uploads open, are stored the same way.
Your site's records. The pages that were built, the runs that built them and the deploys that put them online are kept with the account.
Billing. We keep the plan, the subscription status and the end of the current period. Your payment details are held by Paddle, not by us; see Payments below.
Staff. Widgeta staff can see a business's account to provide support and administer the service. We also keep an audit log. It records actions on an account by the account holder as well as by staff: saving details, asking for a build, asking for a publish or a takedown, exporting the site, and canceling. Each entry records what was done, when, by whom and, where known, the IP address used.
Statements you confirm
Widgeta composes every sentence about your business from the answers you give. You see each sentence before it is used. Only the sentences you confirm are kept and published, and the published page prints a confirmed sentence exactly as you saw it. A sentence you decline is removed from the material before the version is saved.
We call the record of a confirmation an attestation. For each one we keep the exact text you were shown, a SHA-256 fingerprint of that text, how it was confirmed (in the app, or by staff for a preview they built for you from public information), when, and the account that confirmed it. The record also includes the IP address and browser used at the moment of confirmation.
A preview that Widgeta staff built for you from public information cannot be published until you have signed up and confirmed its sentences yourself.
The sites we build for your business
A site Widgeta builds carries your business details and is served by Cloudflare from its own address under widgeta.app. Visitor counting on those sites uses counters, not visitors.
When someone taps a call link, our servers record the day, the page, the event, a source category and a count. No cookie is set, no visitor identifier is created and no IP address is stored. The source for a call click is "other" today, because the page the visit started on is not known at click time.
Page views are not counted today. If they are added, they use the same rule: a count per day, page and source, with no cookie and no identifier. The browser's referrer would be read only to sort the count into search, AI, social, direct or other.
A contact form, when one is added to a customer site, delivers the inquiry to the business. It is stored as part of the business's account data, and the business is the one that reads and answers it.
Payments
Paddle is our payment provider and the merchant of record. Paddle is the legal seller of a subscription, handles sales tax, and issues invoices and receipts. Your card or other payment details go to Paddle and are never sent to Widgeta. We receive the subscription's status, plan and period, and an identifier for the customer, not the payment details.
Who processes your data
We do not sell personal information. These companies and services process it for us:
- Cloudflare provides DNS, TLS and the content network. It hosts the marketing site on Pages, serves published sites through its Worker, and stores published site files and backups in R2.
- Our own server runs the application, the software that builds and serves the site, and the Postgres database. Together they hold the account, the material and the attestations.
- Paddle handles payments and billing, as described above.
- Resend delivers the email we send: verification, a site that is ready, a site that went live, billing notices and the weekly call summary.
- Google provides Tag Manager and Analytics on the marketing site, and the search box on the 404 page.
- Formspree holds the waiting list, while the notify boxes are on.
- Anthropic provides the model that drafts page text. It receives the business material the page is written from.
Some of these companies operate outside the country you live in.
Still to write: the legal basis for each kind of processing, the transfer mechanism for each country, and the data processing agreement behind each company in this list.
How long we keep it
We keep each kind of data for the period below, counted from the event named.
- Account and business material: while the account exists.
- Attestations, audit log and records of each time a site was published: not deleted while the account exists.
- Generated site files: the live build and the three most recent builds for each site.
- Preview links: deleted 30 days after they expire or are revoked.
- A canceled account: kept 90 days after cancellation, then deleted.
- A preview we built for a business that never signed up: deleted 30 days after its last preview link expired.
- Billing events: two years.
- Backups: 14 days.
Your rights
Depending on where you live, you may have the right to see the personal data we hold about you, correct it, delete it, restrict or object to how it is used, and receive a copy in a portable form. We do not sell personal information.
To ask for any of these, use the contact route at the end of this page. When an inbox is live, a person answers within one business day.
Still to write: which of these rights apply in each market, how a request is verified, and the legal basis for the processing described above.
Changes to this policy
When we change this policy, the date at the top changes with it. If a change materially affects you, we will email the address on your account before it takes effect.
Contacting us about privacy
Write to hello@widgeta.app and a person answers within one business day.