Privacy Policy | Websirus

This Privacy Policy explains how Websirus ("we", "us", "our"), operated by Zachery Sager, collects, uses, and protects your personal information when you visit websirus.com or use our services.

1. Information We Collect

Information you provide

Contact details — name, email address, phone number (via contact forms and project briefs)
Project information — requirements, budgets, timelines submitted through our AI Project Architect
Payment information — processed securely by Stripe; we do not store card details

Information collected automatically

Usage data — pages visited, time spent, referral source
Device information — browser type, operating system, screen resolution
AI chat data — conversations with our website chatbot for support purposes

2. How We Use Your Information

We use your information to:

Respond to enquiries and project briefs
Deliver and manage our web development services
Process payments via our payment partner (Stripe)
Send project updates and relevant communications
Improve our website and services
Comply with legal obligations

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Legal Basis for Processing (GDPR)

We process your data under the following legal bases:

Contractual necessity — to deliver services you have purchased
Legitimate interest — to respond to enquiries and improve our services
Consent — for optional marketing communications (you may withdraw consent at any time)

4. Third-Party Services

We use the following third-party services that may process your data:

Stripe — payment processing
Supabase — database hosting
Vercel — website hosting and analytics
Anthropic (Claude) — AI-powered features (project analysis, chatbot)
Resend — transactional email delivery

Each of these providers has their own privacy policy and processes data in accordance with applicable laws.

5. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfil the purposes outlined in this policy. Project data is retained for up to 3 years after project completion. You may request deletion at any time.

6. Your Rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request deletion of your data
Object to or restrict processing
Data portability
Withdraw consent at any time

To exercise any of these rights, please contact hello@websirus.com.

7. Cookies

Our website uses essential cookies required for core functionality (such as authentication). We do not use third-party advertising or tracking cookies. Payment-related cookies may be set by Stripe during the checkout process.

8. Security

We implement appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), access controls, and secure database hosting with row-level security.

9. Children

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "last updated" date at the top of this page will reflect any changes.

Contact

For privacy-related enquiries, please contact us at hello@websirus.com.