1. Introduction
Webstree ("we", "us", "our") operates the webstree.com platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services. By accessing or using Webstree, you agree to the terms of this Privacy Policy.
2. Information We Collect
We may collect the following types of personal information:
- Account Information: Name, email address, password (hashed), and profile details you provide during registration.
- Usage Data: Pages visited, features used, timestamps, device type, browser type, and IP address.
- Communication Data: Messages, files, and content you share through the platform's messaging, email, and collaboration features.
- Authentication Data: OAuth tokens when you sign in via third-party providers (e.g., Google).
- Push Notification Data: Subscription endpoints for Web Push notifications, if you opt in.
3. How We Use Your Information
- To provide and maintain the Webstree platform and its features.
- To authenticate your identity and manage your account.
- To send you notifications (in-app, push, and email) related to your account and activity.
- To improve our services, fix bugs, and enhance user experience.
- To enforce our Terms of Service and protect against misuse.
4. Cookies and Tracking
We use cookies for session management and authentication (httpOnly JWT cookies). We do not use third-party advertising or analytics cookies. Essential cookies are required for the platform to function properly.
5. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share data only in the following cases:
- AI Services: When you use AI features, your prompts may be sent to third-party AI providers (Anthropic, Google) for processing. No personal account data is shared.
- Legal Requirements: If required by law, regulation, or legal process.
- Service Providers: With trusted service providers who assist in operating our platform (e.g., email delivery), under strict confidentiality obligations.
6. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- Encrypted data transmission (TLS/SSL).
- Hashed passwords (bcrypt).
- HttpOnly, secure cookies for authentication tokens.
- Access controls and regular security reviews.
7. Data Retention
We retain your personal data for as long as your account is active or as needed to provide you services. You may request deletion of your account and associated data at any time by contacting us.
8. Your Rights
You have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your account and data.
- Withdraw consent for push notifications at any time.
- Export your data in a portable format.
9. Children's Privacy
Webstree is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we learn we have collected data from a child under 13, we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the platform. Your continued use of Webstree after any changes constitutes acceptance of the updated policy.
11. Contact Us
If you have any questions about this Privacy Policy or your personal data, please contact us through our contact page .