Privacy notice
Who we are. Cameron Butler, cam@wlbr.app.
What we collect and why.
| Data | Purpose | Retention |
|---|---|---|
| Agency account: name, email, password hash, login records | Provide and secure your account | While the account exists, then deleted with the account |
| Branding: logo, display name, colour, footer text | Render your reports | While the account exists; removed with operational data after service ends |
| Domains you add and their verification challenges | Confirm you are authorised; know what to observe | While the domain is on your account |
| Public observations of your domains: DNS answers, certificate details, redirect and response headers | Produce changes, digests and reports | 90 days rolling; 30 days after service ends for export |
| Billing references from Paddle, our merchant of record: customer and subscription IDs, invoice status | Entitlement, refunds, accounting | As required for financial records, determined by our accountant |
| Support messages | Answer your questions | 24 months after the case closes |
| Digest and report delivery records | Know what was sent and when | 90 days |
We do not collect your clients' personal data, do not read email, do not crawl websites, and do not sell or share data for advertising. Support replies are drafted from approved templates. We do not currently send your messages to a language-model provider; if we introduce one, this notice will name the provider before it is used.
Providers. Hosting: Hetzner Online GmbH, Falkenstein, Germany. Payments: Paddle.com Market Ltd (merchant of record). Email delivery: not yet configured; the provider will be named here before any customer email is sent.
Your rights. Export your data from your account. Delete your account from your account page; operational data is removed within 30 days and backups expire within a further 35 days. Contact cam@wlbr.app for anything else, including rights under the New Zealand Privacy Act 2020.
Changes. We will notify account holders by email before material changes.