Privacy Policy

This Privacy Policy explains what information WebLineup collects, why, and how it’s used, across the WebLineup dashboard and the sites it generates. It applies to agency accounts and to visitors of generated client sites.

• Account information - name, email, and password hash when you sign up.
• Billing information - payments are handled by Lemon Squeezy, our merchant of record. We don’t receive or store full card numbers; we keep your plan, subscription status, and billing period.
• Business and lead data - business listing information (name, category, address, phone, website, hours, photos, rating, and review counts) returned by the searches you run. This comes from Google Maps listings, collected through our data provider, and is about businesses, which may include sole traders and other individuals who are identifiable.
• Generated site content - the sites you create and any content submitted through a generated site’s contact form on your client’s behalf (the sender’s name, email, phone, message, and IP address).
• Usage data - basic technical data (IP address, browser, pages visited) needed to operate and secure the service, including rate limiting and abuse prevention.

• To provide, maintain, and secure the WebLineup dashboard and generated sites.
• To process payments and send billing-related communications.
• To send account, verification, and service emails.
• To respond to support requests and enforce our Terms and Acceptable Use Policy.

We share information only with service providers who help us run WebLineup, under obligations to protect it. Our current subprocessors are:

• Outscraper - business listing search (receives your search terms; returns Google Maps listing data).
• OpenAI - AI-generated website copy (receives business details such as name, category, address, and review figures).
• Resend - transactional email and delivery of contact-form messages to businesses.
• Lemon Squeezy - payments, subscriptions, and tax, as merchant of record.
• Cloudflare - hosting, database, file storage, DNS, TLS, and security for the dashboard and generated sites.

We don’t sell personal information. We may disclose information if required by law or to protect our rights, users, or the public.

Business listing data shown in search results is sourced from publicly available Google Maps listings. We act as a processor of this data on your behalf; as the agency, you’re the controller responsible for how you subsequently use, store, and contact that data in compliance with applicable law.

If you are a listed business or owner. Your public listing details may appear in an agency’s search results, and an agency may generate a draft website from them. You can ask us to remove your business from WebLineup, take down a site made about you, or stop it being used, by emailing privacy@weblineup.com with the business name and the site address or listing. We will act on verified requests, and you may also exercise any rights described in Section 9.

WebLineup uses essential cookies to keep you signed in (a short-lived access cookie and a longer-lived refresh cookie, plus an additional cookie while a platform administrator is viewing an agency account). Nothing else is required for the dashboard to function, and we don’t currently use analytics or advertising cookies. Some generated client sites embed a Google Map, which may set cookies from Google when the map loads; see Google’s privacy policy. Your light/dark theme choice is stored in your browser’s local storage, not a cookie. If that changes, this policy and the in-app cookie notice will be updated first.

We retain account and generated-site data for as long as your account is active, and for a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce agreements. Contact-form submissions are kept for 90 days, and the IP addresses recorded with them and in rate-limiting logs for 30 days, after which they are deleted or anonymised. You can request deletion at any time (see Section 9).

We use industry-standard safeguards - encryption in transit, access controls, and hashed credentials - to protect information. No method of transmission or storage is perfectly secure, and we can’t guarantee absolute security.

Depending on where you’re located, you may have the right to access, correct, export, or delete your personal information, or to object to certain processing (for example, under the GDPR or CCPA). To exercise these rights, email privacy@weblineup.com.

Information may be processed in countries other than your own. Where required, we rely on appropriate safeguards for such transfers.

WebLineup is a business tool and isn’t directed at, or knowingly used by, children under 16.

We may update this Privacy Policy from time to time. Material changes will be announced in-app or by email before they take effect.

Questions about this policy or your data? Email privacy@weblineup.com. See also our Terms of Service.