Privacy

What we collect

• Your account: name, email address, password (stored only as a hash), your workspaces and roles.
• Your business content: the facts, text, photos and documents you give us or ask us to import, the sites we build from them and every revision.
• Imported public information: when you paste a website address, we read a handful of its public pages and keep a private copy as evidence of where each fact came from.
• Enquiries: messages your visitors send through your site's contact form, stored encrypted for your workspace.
• Connected accounts: when you connect a business account, the access tokens it issues, stored encrypted and never shown to you, your team or an AI assistant.
• Records of changes: an audit trail of who changed, approved or published what, without passwords, tokens or form contents.

What we do not do

• No advertising or analytics trackers on heymadeweb.com, and none added to the websites we host for you.
• No cookies on this marketing site. The app uses one session cookie to keep you signed in.
• We do not sell your data or use your content to train AI models.
• We do not send your content to paid AI services. If you connect ChatGPT or Claude, that assistant sees what you ask it to work with, under its provider's own terms.

Who can see your data

Only members of your workspace, according to their role. Agencies can give a client reviewer access to that client's site only. Review links are private, expiring and can be revoked. Published websites are public by design; drafts and previews are not indexed and need a link.

How long we keep it

Your content, uploads and imported page copies stay while your workspace does. Enquiries are kept for the period your workspace sets (one year by default). When you delete your account, we delete your workspaces' content, except where the law requires us to keep records.

Your rights

You can ask for a copy of your data, correct it, or have it deleted. If you are in the EU or UK you also have the right to object and to complain to your data protection authority.

Contact

The company details and a contact address for these questions will be added here before HeyMadeWeb launches publicly.