Privacy Policy

Last updated: May 13, 2026

Summit Software Consulting ("we," "us," or "our") operates Webend Creator at webendcreator.com (the "Service"). This Privacy Policy explains what information we collect, how we use it, and the rights you have over it.

1. Information we collect

When you create a Webend Creator workspace and use the Service we collect:

  • Account information: email address, password (hashed), workspace name, plan selection.
  • Usage data: the records you create within your workspace, your authentication events, request logs (IP address, browser user-agent, timestamps), and feature-usage telemetry used to operate and improve the Service.
  • Payment information: handled exclusively by our payment processor, Paddle.com Market Limited ("Paddle"), who acts as the Merchant of Record for all paid subscriptions. We do not see or store your card number, CVV, or full billing details — Paddle returns to us only a customer reference, subscription state, and the email address you provided at checkout.
  • Cookies: a session cookie (HttpOnly, SameSite=Lax) to keep you logged in, and a CSRF-protection cookie. We do not use third-party advertising or tracking cookies.

2. How we use information

  • To provide, maintain, and operate the Service.
  • To authenticate you and protect your account.
  • To send transactional emails (signup verification, workspace ready, billing receipts, security notices). We do not send marketing email without your explicit opt-in.
  • To diagnose, prevent, and address technical or security issues.
  • To comply with legal obligations.

3. How we share information

We share information only with the third parties required to operate the Service:

  • Paddle — payment processing and tax compliance (Merchant of Record).
  • Resend — outbound transactional email delivery.
  • MongoDB Atlas — managed database hosting for your workspace data.
  • Cloudflare — DNS, email routing for our domain, and bot-protection (Turnstile) on the signup form.

We do not sell, rent, or trade personal information to anyone for any reason.

4. Data retention

Active workspace data is retained for as long as your account is active. Cancelled accounts enter a 30-day grace period during which you can reactivate. After the grace period the workspace database is permanently deleted; the tenant registry record is retained indefinitely for billing-history and compliance reasons.

5. Your rights

You can:

  • Access the data we hold about you — your workspace is itself the access portal.
  • Export your records — every Studio supports CSV / JSON / NDJSON export.
  • Delete your account — cancel from the Subscriptions page; data deletion follows after the 30-day grace period.
  • Correct any inaccurate information — edit it inline within the workspace, or email us.

If you are in the European Economic Area, United Kingdom, or California you have additional rights under GDPR / UK GDPR / CCPA, including the right to lodge a complaint with your supervisory authority. Contact us to exercise any of these rights.

6. International transfers

Our infrastructure is located in the United States. If you use the Service from outside the US, your information will be transferred to and processed in the US.

7. Children's privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from anyone under 13.

8. Changes to this policy

We may update this Privacy Policy. The "Last updated" date at the top reflects the most recent revision. Material changes will be announced via email and/or in-app notice.

9. Contact

Privacy questions or requests: hello@webendcreator.com

Summit Software Consulting
5665 Summit St.
West Linn, OR 97068
United States