Privacy Policy

1. Who we are

Webbuildr is a trade name of Goodwin Holdings LLC, an Arizona limited liability company, unless a signed agreement identifies a different contracting entity. "Webbuildr," "we," "us," and "our" refer to Goodwin Holdings LLC d/b/a Webbuildr or the applicable Webbuildr contracting entity.

Privacy contact: hello@webbuildr.io

2. Scope

This Privacy Policy applies to webbuildr.io, public forms, support requests, the client portal, workspace features, AI agents, analytics, and related services (collectively, the "Services"). A separate customer agreement or data processing addendum may add controls for a specific workspace.

3. Information we collect

3.1 Information you provide

• Contact and booking information: name, email, phone if provided, company, message content, scheduling details, and call notes.
• Support requests: contact details, workspace or site URL, issue type, urgency, descriptions, reproduction steps, screenshots or links you provide.
• Workspace and portal information: account profile, workspace name, users, roles, settings, connected source names, activity history, approval records, and configuration choices.
• Account setup progress: email address, business name, website, business type, goals, bottlenecks, volume, systems and tools, selected plan, setup stage, resume-email status, hashed resume or unsubscribe tokens, and related metadata.
• Customer Content: documents, records, messages, forms, CRM data, calendar context, call summaries, transcripts, notes, and other data you connect or submit to power agents.
• Billing information: plan or engagement details, Prepaid Balance events, invoices, payment status, saved payment method type and last four digits, Stripe customer IDs, Stripe checkout/payment intent/refund IDs, transaction IDs, fee deductions, refund status, payment-failure status, billing contact details, and reconciliation notes. We do not intentionally store full payment card numbers, full bank account numbers, or full routing numbers.
• Prepaid Balance and usage records: workspace identifiers, usage timestamps, usage category, provider cost, client-facing charge, balance adjustments, auto-reload settings, remediation status, refund details, and related audit records.
• SMS messaging information: if you opt in to receive SMS messages from Webbuildr, we collect and use your mobile phone number, opt-in status, opt-in source, and related message records to send account, onboarding, support, service, and appointment-related text messages. Our published business number for calls and texts is +1 (650) 671-6340. Opt-in is always consumer-initiated: you text us first, you text START, YES, or JOIN to that number, or you ask us for text follow-up during a phone call. Consent to receive texts is never required to purchase anything from us. Message frequency varies, typically up to 2 messages per month unless you are actively receiving support. Message and data rates may apply. Reply HELP for help and STOP to opt out. Full details are in our SMS Terms & Messaging Policy.

3.2 Information collected automatically

• Site analytics: page views, referrer, UTM parameters, approximate device/browser details, session identifiers, and performance/Web Vitals events.
• Portal and security logs: login events, IP address, device/browser details, request metadata, errors, audit events, and suspicious-activity signals.
• Local storage: limited browser storage may preserve form progress, analytics session IDs, and interface preferences.

3.3 Information from third-party services

If you connect or authorize third-party systems, we may receive information from those systems as needed to provide the Services. Examples include CRM records, calendar events, email metadata or messages, call events, form submissions, documents, analytics, billing status, Stripe payment or refund status, Webbuildr-owned business bank balance or transaction data used for reconciliation, and user profile information.

4. How we use information

• Respond to inquiries, schedule calls, and provide support.
• Create, configure, operate, secure, and improve workspaces and agents.
• Save account setup progress, generate setup plans, send resume links or onboarding follow-up, and avoid creating a user or workspace until account setup is completed.
• Process agent runs, retrieve source context, generate drafts, route approvals, write back to connected systems, and log outcomes.
• Bill for services under agreed engagements, manage Prepaid Balances, prevent fraud, and maintain account records.
• Process payments, refunds, auto-reload, failed-payment remediation, account deactivation/reactivation, billing disputes, chargebacks, and bank/payment processor reconciliation.
• Monitor reliability, debug issues, detect abuse, and protect systems.
• Improve prompts, workflows, product experience, documentation, and support processes.
• Comply with legal, tax, security, and contractual obligations.

5. AI processing and learning loops

Webbuildr uses AI systems and third-party AI/model providers to deliver agent features. Depending on your workspace configuration, Customer Content may be processed to retrieve context, generate outputs, summarize records, draft messages, classify tasks, propose improvements, and evaluate run quality.

Learning loops may store derived operational lessons, such as corrected answers, workflow rules, approval preferences, source-quality notes, and agent-performance findings. We design these loops to improve the workspace while limiting unnecessary exposure of raw personal information.

6. How we share information

We share information only as needed for the purposes described in this Policy:

• Service providers: hosting, databases, storage, email, calendar, forms, Stripe payment processing, Found business banking/reconciliation, analytics, AI/model providers, telephony, SMS, CRM, support, security, and monitoring vendors.
• Connected services you authorize: systems you connect to a workspace, such as CRM, email, calendar, document, accounting, or communication tools.
• Legal and safety: when required by law or reasonably necessary to protect rights, safety, security, users, customers, or the public.
• Business transfers: if Webbuildr is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may transfer as part of that transaction.
• With your direction: when you ask us to share, export, send, write back, or otherwise process information.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

We do not sell, rent, or share mobile opt-in information, mobile phone numbers collected for SMS, or SMS consent records with third parties for their marketing or promotional purposes. We may share SMS-related information only with service providers that help deliver, secure, support, or comply with the messaging service.

7. Cookies, analytics, and browser signals

We use limited first-party analytics to understand pageviews, referrers, conversions, device/browser mix, and site performance. We do not use third-party advertising cookies and do not track you across unrelated websites.

If your browser sends a Do Not Track signal, our public-site analytics loader is designed not to load. If you use a Global Privacy Control signal and a privacy law requires us to treat it as an opt-out, we will honor it for covered processing.

8. Data retention

Category	Typical retention
Contact and sales inquiries	While active plus up to 2 years, unless needed longer for legal or business records.
Account setup progress	While active plus up to 2 years, unless converted into a workspace record, deleted on request, or needed longer for security, fraud-prevention, legal, or business records.
Support requests	Up to 3 years after resolution, unless needed longer for security, legal, or account history.
Workspace records and Customer Content	For the life of the workspace and a reasonable backup/deletion period after termination, subject to agreement terms.
Billing, payment, Prepaid Balance, refund, reconciliation, tax, and contract records	At least 7 years, or longer if needed for tax, accounting, dispute, chargeback, fraud-prevention, unclaimed-property, or legal compliance.
Analytics data	Up to 395 days unless configured shorter.
Security logs	As needed for security, abuse prevention, auditing, and legal obligations.

Backup copies may persist for a limited period after deletion from active systems.

9. Security

We use reasonable safeguards, including HTTPS, role-based access where available, access controls, credential-management practices, backups, monitoring, and administrative controls. No method of transmission or storage is 100% secure. You are responsible for securing your devices, accounts, passwords, and third-party credentials.

Payment card data is handled through Stripe-hosted or Stripe-tokenized workflows. We do not intentionally store full card numbers, full bank account numbers, or full routing numbers in Webbuildr systems.

Please do not send passwords, API keys, payment card numbers, protected health information, government IDs, or similarly sensitive information through public forms or email unless we have provided an approved secure channel.

10. Children's privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 provided personal information to us, contact hello@webbuildr.io so we can review and delete it where required.

11. Your privacy choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or receive a copy of your personal information; object to certain processing; opt out of sale or sharing; limit certain sensitive-information uses; or appeal a decision. To make a request, email hello@webbuildr.io.

We may need to verify your identity and authority before fulfilling a request. We will not discriminate against you for exercising legally protected privacy rights.

You can opt out of non-transactional account-setup follow-up emails by using the unsubscribe link in those emails or by emailing hello@webbuildr.io. Opting out does not stop transactional account, security, billing, support, or service messages.

11.1 California residents

California residents may have rights under the California Consumer Privacy Act, as amended, including the right to know, delete, correct, opt out of sale or sharing, limit use of sensitive personal information where applicable, and not be discriminated against. We do not sell or share personal information as those terms are used for cross-context behavioral advertising under California law.

11.2 EEA, UK, and Switzerland residents

If you are located in the EEA, UK, or Switzerland, our legal bases may include contract performance, legitimate interests, consent where required, and legal obligations. You may have rights to access, correct, delete, restrict, object, portability, and lodge a complaint with a data-protection authority.

12. International transfers

Webbuildr operates from the United States. If you access the Services from outside the United States, your information may be transferred to and processed in the United States and other locations where our providers operate. Where required, we use appropriate transfer mechanisms.

13. Changes to this Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and may provide additional notice where appropriate.

14. Contact

Webbuildr / Goodwin Holdings LLC
Attn: Privacy
Email: hello@webbuildr.io
Arizona, United States