WEBEASY · Ontario, Canada

Privacy Policy

Last updated September 21, 2026

WebEasy is operated by Bai & Rich International, based in Ontario, Canada. This policy explains how we handle personal information when you visit WebEasy, sign in, create a website, subscribe to a plan or use a contact form hosted by us. For privacy questions or requests, contact web.easy2431@gmail.com.

Information we collect

• Account information: your Google account identifier, email address, name and basic profile information made available during sign-in. We do not receive your Google password or request access to your Gmail, Google Drive or contacts through this sign-in.
• Website content: business details, listing links, research results and source references, text, images, logos, videos, prompts, edits, saved drafts and published versions.
• Billing information: when payments are enabled, your plan, customer and subscription identifiers, payment status and related transaction records. Stripe collects and processes payment-card and billing details through its checkout; WebEasy does not store complete card numbers or card security codes.
• Contact enquiries: the name, email address and message a visitor submits through an enabled website contact form. These are saved in the website owner's WebEasy inbox.
• Technical and support information: information such as IP addresses, browser/request details, service logs, error reports, generation status and communications you send us. For contact-form rate limiting, we store a hashed representation of the submitting IP address.

How we use information

We use information to authenticate you, control account access, research your business, create and edit website content, store and publish your selected website version, deliver contact enquiries, process subscriptions, provide support, prevent abuse, investigate failures and meet legal obligations. During the private build, we also check approved email addresses to restrict access.

AI generation and business research

When you request research or generation, relevant business information, source material, prompts and selected images or other content may be sent to providers including OpenAI and Higgsfield. Generated results and research can be inaccurate. Do not submit sensitive personal information or content you are not entitled to share. Provider processing and retention depend on the service used and its terms; we do not promise that every provider has zero retention.

Research may use publicly accessible business websites and listings. Public availability does not eliminate privacy or intellectual-property rights. Contact us if research includes personal information that is inaccurate or should not be used.

Service providers and disclosures

We use service providers for specific purposes, including Google and Supabase for sign-in, OpenAI/Sites and Cloudflare for hosting and infrastructure, OpenAI and Higgsfield for AI services, and Stripe for payments when enabled. They receive the information needed for their services. Their services may have their own privacy notices: Google, Supabase, OpenAI, Cloudflare, Higgsfield and Stripe.

We do not sell personal information or use website enquiries for advertising. We may disclose information where required by law, to address fraud or security incidents, protect rights, or as part of a business transfer subject to appropriate safeguards and applicable notice requirements.

Drafts, publishing and contact forms

Saved drafts are accessible through your account and authorized service operations. Publishing makes the selected website content public, including business contact details you choose to display. Search engines and visitors may retain copies after a site is unpublished.

A contact form sends your information to the business operating that website. That business decides how to use and respond to the enquiry and is responsible for its own privacy obligations. Avoid including health, financial, identity-document or other sensitive information in these forms. Contact the business about its use of your enquiry, or contact WebEasy about the hosted form and storage.

Cookies and local storage

We use cookies and similar storage required for sign-in, session security and application preferences. Our hosting, authentication and payment providers may also use cookies necessary to operate and secure their services. We do not currently use advertising cookies on the WebEasy app. If we introduce optional tracking, we will update our disclosures and obtain consent where required.

We retain a fingerprint of your verified sign-in email with generation usage records to enforce the one-draft free allowance and prevent resets through repeat registrations. This does not link access to separate workspaces.

Storage, transfers and retention

Information may be processed in Canada, the United States or other countries where our providers operate, and may be subject to those countries' laws. We use access controls and other safeguards appropriate to the information, but no system is completely secure.

We retain information while needed to provide the service and for legitimate security, recordkeeping or legal purposes. Draft history, published snapshots and billing records can have different retention needs. Deleting a draft is different from cancelling a subscription or deleting an account. Some usage records, backups and legally required billing records may remain after deletion. Contact us to request account deletion or details about retention for your information.

Your choices and rights

You can edit your website details, unpublish a site and request access, correction or deletion of your personal information. You may withdraw consent for optional uses; withdrawing information necessary for the service may mean we cannot continue providing it. Send requests or complaints to web.easy2431@gmail.com. We may verify your identity, explain applicable exceptions and respond within the time required by law. You may also contact the Office of the Privacy Commissioner of Canada.

Children and policy changes

WebEasy is intended for adults acting for businesses, not children. If you believe a child has supplied personal information, contact us. We will post policy changes here and provide additional notice or obtain consent for material changes where required.