Privacy Notice
Privacy Notice
How we collect, use, store, and protect your personal data when you use CreateWebToday, in line with applicable privacy laws (including, where relevant, GDPR and CCPA/CPRA).
1. Data controller
CreateWebToday (createwebtoday.com) is the controller of personal data collected through the Platform for the purposes described below.
Privacy contact: admin@createwebtoday.com
2. Personal data we collect
| Category | Examples | How we obtain it |
|---|---|---|
| Identity and contact | Name, email, business phone | Registration, wizard, profile, Google OAuth |
| Business data | Category, description, hours, address, social links | Creation form and later edits |
| Files | Images, reference documents | Voluntary upload in the wizard or editor |
| Billing | Payment identifiers, subscription history | Stripe (we do not store full card numbers) |
| Technical | IP address, browser, cookies, logs, session tokens | Automatic use of the Platform |
| Domain | Domain name, DNS/SSL status | Wizard selection and publication flow |
Sensitive data: we do not intentionally request special-category or sensitive personal data (health, racial or ethnic origin, political opinions, etc.). If you include such data in text or files, it will be processed only to provide the Service under your responsibility.
3. Purposes of processing
3.1 Primary purposes (necessary for the Service)
- Create and administer your account.
- Authenticate you and keep your session secure.
- Generate, edit, host, and publish your website.
- Process payments, renewals, reminders, and cancellations.
- Register or connect domains and issue SSL certificates.
- Send transactional emails (access, payment, publication, errors, renewal).
- Provide support and resolve incidents.
- Comply with legal, tax, accounting, and security obligations.
3.2 Secondary purposes (optional)
- Send product-improvement or informational messages if you allow them.
- Produce aggregated, anonymized usage statistics to improve the Platform.
If you do not want secondary purposes, email admin@createwebtoday.com.
4. Transfers and processors
We share data only as needed to operate the Service, with providers acting under instructions and reasonable security measures:
- Cloudflare: hosting, Workers, storage (R2), database (D1), DNS, domain registration, transactional email, and abuse protection.
- Stripe: payment processing and subscription management.
- OpenAI: AI content generation and editing using the text and instructions you send.
- Google: OAuth authentication when you choose “Continue with Google”, and Google Analytics (GA4) to measure visits and Platform usage. It is not installed on customer published sites.
- Microsoft Clarity: product analytics (heatmaps and session recordings) on this Platform. It is not installed on customer published sites.
Some providers may process data in countries other than yours. Where required, we use appropriate contractual and technical safeguards consistent with applicable law.
5. Your privacy rights
Depending on your location, you may have rights to access, correct, delete, restrict, or object to certain processing; to withdraw consent where processing is consent-based; and to data portability. California residents may have additional rights under the CCPA/CPRA (including to know, delete, and opt out of “sale” or “sharing” of personal information—we do not sell personal information for money). EEA/UK residents may also lodge a complaint with their supervisory authority.
To exercise your rights, email admin@createwebtoday.com with:
- Your name and a contact method.
- A clear description of the right you wish to exercise.
- Proof of identity or legal representation, if reasonably required.
We will respond within the timelines required by applicable law.
6. Retention
We retain personal data:
- While you keep an active account or as needed to provide the Service.
- For periods required by tax, accounting, or other legal obligations.
- For a reasonable time needed to resolve disputes, prevent fraud, and maintain security records.
When data is no longer needed, we block or delete it according to internal procedures.
7. Security measures
We apply reasonable technical and organizational measures, including:
- HttpOnly session cookies and encrypted transport (HTTPS).
- Hashing of sensitive tokens in the database.
- Administrative access controls.
- Input sanitization and preview isolation.
- Payment processing delegated to Stripe (PCI-DSS).
No system is perfectly secure. If you detect an incident involving your account, contact us immediately.
8. Minors
The Service is intended for persons with legal capacity to contract. We do not knowingly collect data from anyone under 18. If we discover a minor’s account, we may delete it.
9. Cookies and similar technologies
We use cookies and related technologies described in our Cookie Policy.
10. Changes to this notice
We may update this Notice to reflect legal or Service changes. We will publish the current version at createwebtoday.com/privacy with an updated date. For material changes, we will try to notify you by email or in the dashboard.
11. Contact
Privacy and data-rights requests: admin@createwebtoday.com