Who we are and when this policy applies
WebsiteGeneratorHub is operated by Devnix Digital LLC, 1309 Coffeen Ave, Sheridan, Wyoming 82801, United States. Questions and privacy requests can be sent to [email protected].
Devnix Digital LLC is the controller of information used to operate WebsiteGeneratorHub, including builder projects, download requests, support messages, service requests, security records and leads submitted through a WebsiteGeneratorHub-hosted preview. A business that receives a quote request is normally a separate controller for its own use of that lead.
Information we process
Builder and project information: business name, city or town, service areas, phone number, business email, services, description, selected customer action and optional logo, project photos, map location, hours, verified facts, materials and social links. We also store the generated page and saved edits so the private Website Studio can work.
Forms and requests: contact-form details; the email required for a free download; optional name, phone and separate marketing choice; launch or custom-site request details; and quote-form information entered on a hosted customer preview.
Orders and payments: launch package, order number, name, email and contact details, preferred domain, the terms accepted, payment status and Stripe transaction references. Card details are entered directly on Stripe Checkout; we do not store full card numbers or card security codes.
Technical and security information: IP address, request URL, timestamps, user-agent, session and anti-forgery identifiers, rate-limit records, application logs and administrator security events. Generator analytics use a one-way hash of the session identifier rather than storing the raw identifier.
Why we use information and our legal bases
We use project details to provide the requested generator, preview, editing and download functions and to take steps requested before a service agreement. We use contact and service-request details to respond and discuss the requested work. Order and payment information is used to collect payment, confirm and fulfil an order, provide support, reconcile transactions and handle refunds or disputes. Where UK or EEA law applies, these uses generally rely on performance of a contract or steps requested before one.
We use limited technical, security and product-event information to prevent abuse, diagnose failures, protect the service and understand whether core product steps work. These activities rely on our legitimate interests in operating and improving a secure service, balanced against the information involved. We use information when necessary to meet legal obligations or establish, exercise or defend legal claims.
Optional marketing messages are sent only when a person makes the separate marketing choice, and that choice can be withdrawn at any time. Withdrawing consent does not affect earlier lawful processing.
Shareable previews and downloaded websites
If you choose a shareable preview when downloading, we make a saved copy of your website available on our preview subdomain. Anyone with that link can view the public business details and images in the saved copy. The link expires after the period shown in the download form, normally 30 days, and may stop earlier if the project is deleted. Editing controls and account details are not shared. These shareable previews do not send enquiry forms and are excluded from search indexing.
A quote submitted through a WebsiteGeneratorHub-hosted preview is stored as a lead and forwarded to the business identified on that page. Do not submit sensitive information. After a website is downloaded and hosted elsewhere, the business controls its live form and must publish an accurate privacy notice for its own hosting, email, analytics and business practices.
Each download includes a privacy-notice starter. It is a starting point, not legal advice, and the business must review and adapt it before launch.
Providers, disclosures and international transfers
Information may be processed by providers that support hosting, storage, email delivery, security and infrastructure. Stripe processes payment and fraud-prevention information when you use paid launch checkout, under its own privacy policy. We share the customer email, package and order references needed for the payment and receive payment-status and transaction information. The business brief is sent to Google Gemini to generate website content and design. Google processes business-listing lookups when you use Google Maps import. Google Fonts and Google Maps may receive technical request data when those features load. Cloudflare Turnstile processes verification and device information when its security check is displayed. We may disclose information when required by law or in connection with a corporate transaction, subject to appropriate safeguards.
Devnix Digital LLC is based in the United States, so information from the UK, EEA or other regions may be transferred to the United States. Where applicable, we use provider contractual commitments and recognized transfer safeguards, such as standard contractual clauses or another lawful transfer mechanism. Contact us for information about the safeguard relevant to a particular processing activity.
Retention
Ordinary generated projects, saved edits and connected uploads are scheduled for deletion after 90 days of inactivity. Projects connected to a launch or custom-site request may be retained for up to 365 days. Leads and form requests are retained for up to 365 days; generator events for 180 days; administrator activity logs for 365 days; update backups for 30 days; and temporary downloads or update files for up to 24 hours. Mailbox copies may follow the receiving business mailbox policy.
These periods may be shortened when information is no longer needed or extended when reasonably necessary for an active request, dispute, security investigation, legal hold or legal obligation. Stripe-confirmed expired unpaid checkout contact details are eligible for anonymization after the configured abandoned-checkout period (normally 30 days), unless a legal hold applies. Paid, refunded, disputed, legally held or unresolved payment records are excluded from routine deletion and retained as necessary for fulfilment, accounting, tax, dispute and other applicable obligations. Their disposal requires an approved records-retention decision. Automated pruning runs daily when the application scheduler is configured.
Security and children
We use access controls, secure sessions, server-side validation, rate limiting, image re-encoding, restricted update packages, backups and monitoring intended to reduce unauthorized access or loss. No internet service can guarantee absolute security. WebsiteGeneratorHub is a business tool and is not directed to children under 16; we do not knowingly seek children’s personal information.
Your choices and rights
Depending on location, a person may have rights to access, correct, delete or restrict information; object to certain processing; receive portable data; or withdraw consent. California and other US state residents may have additional rights. WebsiteGeneratorHub does not sell personal information. Optional tracking is described below and can be refused without affecting the builder.
We may need to verify a request and may retain information when an exception applies. UK residents may complain to the Information Commissioner’s Office; EEA residents may complain to their local supervisory authority; and others may contact their applicable privacy regulator.
Contact and changes
Send privacy questions or requests to [email protected] or write to Devnix Digital LLC, 1309 Coffeen Ave, Sheridan, Wyoming 82801, United States.
We will update this policy when material product or processing practices change and will revise the date shown above. See the Cookie Notice for browser-storage details.
Missing-page diagnostics
To find broken links, we record requests that reach our application and return a 404 response. This report contains a shortened page path, referring host and path when available, time, approximate country/city, browser/device category and an automated bot classification. Query strings, form values, raw IP addresses and full browser identifiers are not saved. Recognized private project links and tokens are redacted. The report does not set tracking cookies or connect requests to customer accounts. Do Not Track and Global Privacy Control signals exclude requests from this report. Records are retained for 30 days and removed by the scheduled cleanup.
Optional website analytics
After you accept optional analytics, our own visitor reports record public-page and Website Studio visits, selected button actions, approximate country and city when supplied by Cloudflare, device and browser category, referring website, scroll depth and active time by page and section. We use a pseudonymous browser identifier to connect visits. We do not record form text, passwords, payment details, exact location or customer website iframe contents in these reports. Raw IP addresses are not stored in the visitor analytics tables. Visitor history is retained for 90 days. Do Not Track and Global Privacy Control signals disable this optional tracking. You can withdraw through Privacy choices; this stops future tracking but does not automatically delete prior records.
If enabled, optional Google Analytics, Google Tag Manager, Microsoft Clarity and additional administrator-configured tools run on public marketing pages only after your consent. They may process page interactions and technical browser information. These integration controls exclude the builder, administrator pages and customer websites. You can change your choice using Privacy choices in the footer. See the Cookie Notice for browser storage and withdrawal details.