Privacy Policy (GDPR)

Article 1 – Data Controller

The controller responsible for processing personal data is WEBFUL SAS,
RCS Nantes 993 924 349
DPO Contact: dpo@webful.fr

Article 2 – Data Collected

The collected data includes:

  • the email address provided during registration,
  • the URL of the website being analyzed,
  • website traffic statistics (page views, average duration, traffic sources),
  • anonymized IP addresses.

This data is essential for the proper functioning of the Webful service.

Article 3 – Purpose and Legal Basis

Legal basis: The processing of personal data is based on the performance of the contract (Article 6.1.b GDPR) between the User and WEBFUL SAS. By subscribing to Webful, the User consents to the processing of their data as required for service operation.

Data is used exclusively to:

  • Provide traffic analytics to the website owner (primary purpose)
  • Manage the user account and authentication
  • Process billing for paid subscriptions
  • Improve service performance and features
  • Ensure server security and maintenance
  • Send technical notifications related to service operation (automatic reports if enabled, security alerts)

No unsolicited marketing communication. Users may disable report emails at any time from their dashboard.

Article 4 – Data Retention Period

Personal data is retained under the following conditions:

  • Account data (email, name, password): As long as the account remains active. Permanent deletion occurs 30 days after account closure.
  • Usage statistics (page views, traffic): Retention varies by subscription plan:
    • Free Plan: 30 days
    • Pro Plan: 180 days (6 months)
    • Enterprise Plans: 365 days (12 months)
  • Aggregated and anonymized data: Retained indefinitely for service improvement (no possibility of re-identification)
  • Server and security logs: Maximum 3 months
  • Billing data: 10 years (legal accounting requirement)

When an account is deleted, all personal data is permanently erased within 30 days, unless legally required otherwise (e.g., invoices).

Article 5 – Data Hosting

Data is stored on a dedicated server hosted by Wevox SARL, in the OVH – Paris (France) datacenter.

No data transfer outside the European Union is performed.

Article 6 – Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights over your personal data:

  • Right of access: Obtain a copy of your personal data
  • Right to rectification: Correct inaccurate or incomplete data
  • Right to erasure: Request deletion of your data (under conditions)
  • Right to restriction: Temporarily limit data processing
  • Right to portability: Export your data in a structured format
  • Right to object: Object to the processing of your data
  • Right to withdraw consent: At any time, without affecting prior processing

To exercise your rights:
Email: dpo@webful.fr
Mail: WEBFUL SAS – GDPR Officer – 5 Grande Rue, 44520 Grand-Auverné, France

You may also file a complaint with the CNIL (French Data Protection Authority): www.cnil.fr

Article 7 – Security

Webful implements technical and organizational measures to ensure data security (HTTPS connection, encrypted passwords, anonymized IPs).

Article 8 – Confidentiality and Non-Disclosure

Data is never sold, exchanged, or transferred to third parties.

No advertising data or marketing profiling is performed.

Last update: November 18, 2025
WEBFUL SAS – RCS Nantes 993 924 349 – VAT not applicable, Article 293 B of the French Tax Code

← Back to home