We host your site, so everything that comes into it passes through us. This is what we do with it, in plain English and with no small print.
Your page goes live with your identifying details in the footer and its privacy and cookie policies already written from what the page actually does, and they keep themselves up to date when what it loads changes. The cookie banner is the AEPD's — accept and reject on equal terms — and it only appears when it's needed: your page installs no cookies or trackers; it asks permission for Google Fonts and nothing else.
We use AI to write and correct your page. What it's sent is the site content that specific task needs, under a data processing agreement. Under their API terms, OpenAI doesn't train on that data and deletes it within 30 days, Perplexity doesn't keep it, and Google doesn't use Gemini data to improve its products. Neither your billing details nor your customers' messages ever reach an AI provider.
Payments are processed by Stripe, an authorised payment services provider compliant with PCI DSS Level 1. We never see, process or store your card number at any point: your card and your invoices live in Stripe's portal, which you reach from Settings → Billing.
Every site we publish — whether at yourbusiness.wiweb.me or on your own domain — has its own certificate, issued and renewed automatically, and traffic is encrypted end to end. There's no button to switch on and no certificate to buy, and there is no unencrypted version: anyone who arrives over http ends up on https.
No company does it all alone. To provide the service we rely on these providers, all under a data processing agreement (Art. 28 GDPR). We don't sell or pass on your data to anyone else.
Your database and your photos are in the European Union (Ireland). Several providers are American: those certified under the EU-US Data Privacy Framework rely on that adequacy decision; Supabase and OpenAI, which aren't, on the European Commission's Standard Contractual Clauses. The full list, with each one's mechanism, is in the privacy policy.
You can ask us for access to your data, or to correct, delete or port it, object to or restrict its processing, and withdraw your consent whenever you like. Just write to privacidad@wiweb.io and we'll reply within a month at most, usually the same day. If you think we haven't handled it properly, you can complain to the Spanish Data Protection Agency (AEPD).
When the site is yours and the data belongs to your customers, you are the controller and we are the processor. That's governed by the data processing agreement, which you accept when you create your account; there's nothing separate to sign.
Yes, as standard. We generate your privacy policy and cookie policy from what your page actually does, and a cookie banner with three options —accept, reject or configure—, only when your page actually needs it.
With providers we list publicly on this page, with each one's country: where your site is hosted, where your account lives and who takes payments. We don't sell your data and we don't train any AI on your information. You can ask us for your data, or delete it, by writing to us.
By card, through Stripe, which processes payments with PCI DSS Level 1 certification. We never see your card details. You change plan, download your invoices or cancel from Billing, in your dashboard.
Tell us what you need and we'll reply within 24 hours.