Privacy Policy

Last updated: December 1, 2025

1. Introduction

Welcome to AshWeb Inc. ("AshWeb," "we," "us," or "our"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered SaaS platform for building subscription-based services.

Contact Information:

  • Email: admin@ashweb.io
  • Company: AshWeb Inc.
  • Data Protection Officer: admin@ashweb.io

2. Information We Collect

2.1 Information You Provide to Us

Account Information:

  • Full name
  • Email address
  • Password (encrypted)
  • Company name and business information
  • Billing address
  • Phone number (optional)

Payment Information:

  • Credit/debit card information (processed by Stripe)
  • Billing history
  • Subscription details

Service Data:

  • Websites and services you create
  • Content you upload
  • Customer data you collect through your services
  • API usage and configurations

2.2 Information Automatically Collected

Usage Data:

  • Pages visited and features used
  • Time spent on platform
  • Click patterns and user flows
  • Service performance metrics

Device Information:

  • IP address
  • Browser type and version
  • Operating system
  • Device identifiers
  • Time zone and location data

Cookies and Tracking:

  • Session cookies for authentication
  • Analytics cookies (Google Analytics)
  • Preference cookies
  • Security cookies

3. How We Use Your Information

We use collected information for:

Service Provision:

  • Account creation and management
  • Service delivery and maintenance
  • Payment processing
  • Customer support
  • Platform improvements

Communication:

  • Service updates and notifications
  • Security alerts
  • Marketing (with consent)
  • Legal notices

Business Operations:

  • Analytics and performance monitoring
  • Fraud prevention
  • Legal compliance
  • Business development

4. Information Sharing and Disclosure

We share information with:

Service Providers:

  • Stripe (payment processing)
  • Google Cloud Platform (hosting and infrastructure)
  • Google Cloud (AI services)
  • Scalekit (authentication)
  • Resend (email delivery)

Legal Requirements:

  • Law enforcement (with valid legal process)
  • Regulatory compliance
  • Protection of rights and safety
  • Legal proceedings

Business Transfers:

  • Mergers and acquisitions
  • Asset sales
  • Bankruptcy proceedings

With Your Consent:

  • Third-party integrations you authorize
  • Marketing partners (opt-in only)

5. Data Retention

We retain your data:

  • Account Data: While account is active + 90 days after deletion
  • Payment Records: 7 years (legal requirement)
  • Usage Logs: 12 months
  • Service Data: 30 days after account deletion
  • Legal Records: As required by law

Service Suspension and Ownership Transfer: When users voluntarily suspend services, all service data and operations become AshWeb property for business continuity purposes. Data retention for suspended services is at AshWeb's discretion and may be maintained indefinitely to ensure ongoing service operations.

Account Deletion Requirements: Account deletion requires prior suspension of all active services. Users must individually suspend each service before requesting account deletion, ensuring proper ownership transfer and data handling.

6. Data Security

We implement:

  • AES-256 encryption at rest
  • TLS 1.3 encryption in transit
  • Multi-factor authentication
  • Regular security audits
  • Incident response procedures
  • Employee security training

7. Your Rights and Choices

7.1 Access and Control

  • View and update personal information
  • Download your data (JSON/CSV format)
  • Delete your account
  • Opt-out of marketing

7.2 GDPR Rights (EU Residents)

  • Right to access
  • Right to rectification
  • Right to erasure
  • Right to data portability
  • Right to restrict processing
  • Right to object
  • Rights related to automated decision-making

7.3 CCPA Rights (California Residents)

  • Right to know
  • Right to delete
  • Right to opt-out
  • Right to non-discrimination
  • Right to correct

8. International Data Transfers

We transfer data internationally with:

  • Standard Contractual Clauses
  • EU-US Data Privacy Framework (where applicable)
  • Adequate security measures
  • Your explicit consent

9. Children's Privacy

  • Our services are not for users under 18
  • We don't knowingly collect children's data
  • Parents may contact us for removal

10. Contact Us

For privacy concerns:

  • Email: admin@ashweb.io
  • General: admin@ashweb.io
  • Mail: AshWeb Inc., 611 South DuPont Highway, Suite 102, Dover, Delaware 19901, US