Privacy Policy

Webbly Media Digital Solutions SL, NIF B23883796, at Calle Bruselas 3, 29649 Las Lagunas de Mijas, Málaga, Spain, operates Webbly and is the controller for account, billing, website, and support data it determines how to use. Contact [email protected] for privacy questions.

For business records uploaded by a customer workspace—such as CRM contacts, employee records, tasks, files, messages, and meeting content—the customer organization normally acts as controller and Webbly acts as its processor. Requests about that content should first be directed to the relevant workspace administrator.

• Account and identity data, including name, business email, profile information, authentication records, roles, workspace membership, and security events.
• Business content entered into CRM, projects, tasks, HR, attendance, reports, files, chat, email, meetings, automation, and AI features.
• Subscription and transaction information, including selected plan, currency, billing status, payment-provider identifiers, invoices, and limited transaction metadata. Webbly does not receive or store complete card numbers from hosted checkout.
• Technical and usage data such as IP address, browser and device details, request logs, timestamps, error records, and feature interactions required to operate, secure, and improve the service.
• Support and communication data contained in messages, tickets, emails, and other requests you send us.
• Audio, video, screen-share, or meeting-recording data only when users activate those meeting functions and, for recordings, when the applicable workspace enables and starts recording.

• To provide accounts, workspaces, collaboration, subscriptions, support, and requested features: performance of a contract.
• To authenticate users, prevent abuse, maintain logs, protect tenants, and investigate incidents: legitimate interests and legal obligations.
• To bill customers, maintain accounting records, and respond to lawful requests: contract and legal obligations.
• To send service messages and requested communications: contract or legitimate interests. Marketing communications, where used, rely on consent or another lawful basis and include an opt-out.
• To enable optional integrations or non-essential processing: consent where applicable. Consent can be withdrawn without affecting prior lawful processing.

We use vetted providers only as needed to deliver the service. Depending on configuration and features used, these may include hosting and storage providers, email delivery, Stripe for hosted payments, LiveKit for real-time meetings, error monitoring, and configured AI providers such as a private Ollama deployment or Google Gemini.

For Stripe checkout, we share transaction, account, customer, and fraud-prevention information needed to initiate and administer payment. Stripe processes payment credentials in its hosted environment under its own privacy notice. Webbly does not receive complete card numbers or card security codes.

If Klarna is offered and selected at checkout, we provide Klarna with order, contact, billing, and other information required to determine availability, assess risk, prevent fraud, and process or administer the payment. Klarna may act as an independent controller and may perform eligibility or credit checks under the market-specific notice presented at checkout. Klarna's general privacy information is available at klarna.com.

We do not sell personal data. We may disclose data to advisers, authorities, or counterparties where required by law, necessary to protect rights and security, or connected to a legitimate corporate transaction with appropriate safeguards.

Some providers may process data outside the European Economic Area. Where required, we use an adequacy decision, Standard Contractual Clauses, or another lawful transfer mechanism, together with appropriate technical and organizational safeguards.

We retain account and workspace data while the service is active and for the period reasonably needed to provide recovery, resolve disputes, enforce agreements, and meet tax, accounting, security, and legal obligations. Workspace cancellation begins a controlled retention and deletion process. Backups and security logs may remain for a limited additional period before rotation or deletion. Different periods can apply where a customer contract, legal hold, or mandatory law requires them.

Webbly uses measures designed to protect data, including encrypted transport, authenticated sessions, tenant scoping, role and permission controls, server-side validation, restricted provider credentials, logging, and backups. No internet service can guarantee absolute security. Customers must protect credentials, configure permissions carefully, and notify us promptly of suspected compromise.

Subject to applicable law, you may request access, correction, deletion, restriction, portability, or objection; withdraw consent; and complain to the Spanish Data Protection Agency or your local supervisory authority. We may verify identity and retain data where law requires. Contact [email protected]. For workspace-controlled business content, we may refer the request to that workspace’s controller.

Webbly is a business service and is not directed to children. Users must be at least 18 years old or otherwise legally able and authorized to enter the applicable agreement. We do not knowingly collect children’s personal data through the public service.

We may update this policy when our services, providers, or legal obligations change. Material changes will be communicated through the service or by another appropriate method. The effective date above identifies the current version.