Privacy Policy
Needs owner review. The controller's legal name, postal address and, where required, a data protection officer or EU representative are not yet filled in. A lawyer should review this page before launch.
Who is responsible
WebApprove is operated by the business identified on the Imprint page. Questions about this policy can be sent to [email protected].
What we store
For account holders: name, email address, password hash, time zone and the billing identifiers held at Stripe. For the clients a freelancer invites: the name and email address the freelancer entered, the comments the client wrote, and — attached to an approval — the name they typed, the time, their IP address and their browser user agent.
Screenshots captured alongside a comment are kept in a private object store and are only reachable through short-lived signed URLs.
Why we store it
To run the service: showing a freelancer their projects, letting a client review and approve a website, and processing payments. The approval and payment records exist to evidence what was agreed, which is the point of the product.
Processors
Neon (database hosting), Stripe (payments and subscriptions), Resend (transactional email) and Cloudflare (DNS, proxy and object storage). There are no advertising or analytics trackers.
Retention and deletion
Project data is kept while the account exists. Deleting an account removes personal data, except records we are required to keep for accounting and tax purposes and the approval and payment records that evidence a completed transaction.
Your rights
Access, correction, deletion, portability and objection. Write to [email protected] and we will answer within one month.