Privacy Policy

1. Who we are

webceke (“we”) provides an AI website-generation service. This policy explains what personal data we process and your rights over it. It's written with GDPR (EU) and KVKK (Türkiye) in mind.

2. Data we collect

Depending on how you use the Service, we process:

• Account data: your email address and (optionally) your name.
• Business inputs: answers, business details and images you upload during onboarding and editing.
• Site & lead data: the sites you generate and contact-form submissions from your published sites.
• Billing data: subscription status and customer/identifier from Paddle, our payment processor (we never see or store full card numbers).
• Technical data: IP address, approximate country, and usage/telemetry used for security, rate limiting and analytics.

3. How we use data

We use your data to:

• provide, operate and improve the Service (including generating and hosting sites);
• process payments and manage subscriptions;
• send transactional emails (welcome, lead notifications, billing);
• prevent abuse, secure the Service, and comply with legal obligations.

4. Legal bases

We rely on: performance of our contract with you (to provide the Service), our legitimate interests (security, improvement), your consent (where required, e.g. certain communications), and legal obligations.

5. Processors and sharing

We don't sell your personal data. We share it with service providers who process it on our behalf, including:

• Supabase (database & file storage)
• Vercel (application hosting) and Namecheap (custom domains)
• DeepSeek (AI generation of website content)
• Paddle (payments), Resend (email), Upstash (rate limiting)
• Google (sign-in)

6. International transfers

Some processors are located outside your country. Where required, transfers are protected by appropriate safeguards such as standard contractual clauses.

7. Retention

We keep personal data for as long as your account is active and as needed to provide the Service, then delete or anonymise it within a reasonable period, unless a longer period is required by law (e.g. billing records).

8. Your rights

Subject to applicable law, you can request access to, correction of, deletion of, or a copy of your personal data, and object to or restrict certain processing. To exercise these rights, email us. You may also complain to your local data-protection authority.

9. Cookies

We use essential cookies for sign-in/session and a cookie to remember your language. We don't use advertising cookies.

10. Changes

We may update this policy; material changes will be notified. The “Effective” date above shows the latest version.