Privacy Policy

This Privacy Policy applies to oatweb's websites, applications, and related services (collectively, the “Service”). In this policy, “oatweb,” “we,” “us,” and “our” refer to the provider of the Service.

By using the Service, you acknowledge the practices described here. This policy does not cover third-party websites or services that you may access through oatweb, including a website you ask us to analyze or a domain registrar you use.

We collect information in the following categories:

• Account information: your name, email address, authentication details, preferences, and account settings.
• Content you provide: URLs, prompts, instructions, uploaded materials, generated websites, source code, drafts, and version history.
• Domain and publishing information: domain names, DNS records and verification status, publishing settings, and deployment metadata. We do not ask for your domain registrar password.
• Transaction information: plan, subscription status, billing history, and limited payment details received from our payment processor. Payment card numbers are handled by the payment processor, not stored directly by oatweb.
• Usage and technical information: IP address, device and browser type, operating system, referring pages, timestamps, feature interactions, diagnostic data, and cookies or similar technologies.
• Communications: messages, feedback, and support requests you send us.

When you submit a URL, oatweb may retrieve and process publicly accessible content from that website—such as text, images, layout information, and metadata—to understand its structure and generate a refreshed version. You are responsible for ensuring that you have the right to ask us to process and reuse that content.

Prompts and other instructions may be combined with submitted website content and sent to service providers, including artificial intelligence providers, solely as needed to operate the requested features. Please do not submit passwords, payment card numbers, health records, government identifiers, or other sensitive personal information.

We use information to:

• create, regenerate, preview, export, host, and publish websites;
• maintain accounts, subscriptions, version history, and domain connections;
• provide customer support and communicate service-related notices;
• monitor reliability, troubleshoot errors, and protect users and the Service;
• understand feature usage and improve the quality and usability of oatweb;
• prevent fraud, abuse, security incidents, and violations of our Terms; and
• comply with legal obligations and enforce our agreements.

Where required by law, we rely on an appropriate legal basis, such as performing our contract with you, our legitimate interests, your consent, or compliance with a legal obligation.

We use third-party vendors to help provide infrastructure, hosting, analytics, authentication, payments, customer support, security, and AI-assisted generation. These providers may process information on our behalf under their own contracts and data protection obligations.

AI-generated results are created by processing your prompt and relevant project content. Their output may be inaccurate or similar to content generated for others, so you should review it before publishing. Our providers and subprocessors may change as the Service evolves.

We may use essential cookies to keep you signed in, remember settings, and secure the Service. We may also use analytics technologies to understand visits and feature usage. Where required, we will ask for consent before using non-essential cookies.

You can control cookies through your browser settings. Blocking some cookies may prevent parts of the Service from working correctly. Because there is no consistent industry standard, we do not currently respond to browser “Do Not Track” signals.

We may share information:

• with vendors that process it to provide services to oatweb;
• when you direct us to publish a website, connect a domain, or use an integration;
• with professional advisers, auditors, insurers, and corporate affiliates;
• if reasonably necessary to comply with law, protect rights or safety, investigate abuse, or respond to valid legal process; and
• in connection with a financing, merger, acquisition, reorganization, or sale of assets, subject to appropriate safeguards.

We do not sell personal information for money. When you publish a website, the content you choose to publish becomes publicly available and may be copied or indexed by others.

We retain information for as long as reasonably necessary to provide the Service, keep your account and projects available, comply with law, resolve disputes, and protect the Service. Retention periods vary by data type and the reason we hold it.

If you delete a project or account, some data may remain temporarily in backups, security logs, or records we must retain for legal or financial reasons. Public copies, search engine caches, and content exported or copied by third parties are outside our control.

Information may be processed in countries other than the one where you live. Where required, we use recognized safeguards for international data transfers.

We use reasonable technical, administrative, and organizational measures designed to protect information against unauthorized access, alteration, loss, or misuse. However, no internet service or storage system can be guaranteed to be completely secure.

You are responsible for protecting your sign-in credentials and for promptly notifying us if you believe your account or a published site has been compromised.

Depending on where you live, you may have the right to request access to, correction of, deletion of, or a copy of your personal information; object to or restrict certain processing; or withdraw consent. You may also have the right to appeal our response or contact your local data protection authority.

You can manage certain information in your account or email us at [email protected]. We may need to verify your identity before completing a request. Authorized agents may submit requests where allowed by law, subject to verification of their authority.

The Service is not directed to children under 13, or under the minimum age required by local law. We do not knowingly collect personal information from children below that age. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.

We may update this Privacy Policy as the Service or applicable law changes. We will post the revised policy here and update the “Last updated” date. If changes are material, we may also provide notice through the Service or by email where appropriate.

For privacy questions, requests, or complaints, contact us at [email protected]. Please include enough detail for us to understand and respond to your request.