Privacy Policy

Webora.uk ("we", "the platform") operates this AI business platform. If you need to reach us about privacy, contact the platform operator using the contact route published on the site. We act as the data controller for account data, and as a processor for the business data you choose to store in your workspace.

• Account data: email address, name and avatar supplied at sign-up or by your sign-in provider.
• Workspace data: companies, projects, contacts, deals, documents, campaigns, media and other records you create.
• Lead data: submissions sent to your capture endpoints, including any fields your own forms collect.
• Operational data: activity events, approvals, audit logs, notifications and deployment check results.
• Technical data: request metadata needed to serve, secure and debug the service.

To provide the service you asked for (contract), to keep the platform secure and auditable (legitimate interests), and to meet legal obligations such as record keeping. Where we rely on consent — for example optional communications — you can withdraw it at any time.

When you use AI features, the prompt and the relevant context from your workspace are sent to our AI provider to generate a response. We do not use your workspace content to train our own models. Consequential AI actions are held in the approval inbox until you decide.

Records are stored with row-level security policies scoped to the owning account, so one account cannot read another account's rows. Uploaded files are stored in a private bucket under a per-account path with matching access rules. Access is over HTTPS.

Workspace records are kept until you delete them or close your account. Audit logs are append-only and retained for the life of the account so decisions stay traceable. Deleting your account removes your account data and the records owned by it.

Depending on where you live, you may have rights to access, correct, delete, restrict or port your data, and to object to certain processing. You can exercise most of these directly in the app, and can contact the operator for the rest. You may also complain to your local data protection authority.

We share data only with the infrastructure providers listed on the subprocessors page, and where required by law. We do not sell personal data.

We update this policy when the platform changes. The date at the top always reflects the current version.