Webisia
Back to Webisia

Trust & transparency

Privacy at Webisia.

A clear account of the information we handle and the choices available to you.

Webisia Privacy Notice

Last updated October 23, 2026.

Webisia designs, builds, hosts, and maintains websites for businesses, and gives them Webisia Studio to keep their content current. This notice explains the information handled by the Webisia website, Webisia Studio, and the websites we host, and the choices available to you.

Who is responsible

Webisia is a trademark of OOPATECH INC., a federally incorporated company registered in Quebec. OOPATECH INC. is the legal party responsible for operating Webisia and for its privacy obligations. The business that owns a website hosted by Webisia normally decides what its visitors are asked to provide and why. OOPATECH INC. hosts and operates the website for that business and also handles information for its own enquiry, account, security, support, and billing purposes. Contact the business first about information you gave its website; contact us about Webisia, an enquiry you sent us, or a Webisia account.

Information we handle

  • Enquiries sent through our contact form: your name, email address, business name, the type of help you need, your message, and your language.
  • Account, identity, contact, business, and team information for Webisia Studio users.
  • Website content, pages, navigation, search settings, domain configuration, and uploaded or generated media.
  • Project, subscription, and payment status and provider references. Payment-card details are handled by Stripe.
  • Information visitors submit through a hosted website's own forms, handled for the business that owns that website.
  • Security, audit, device/request, bot-protection, error, and performance information needed to protect and operate the service.

Why we use it

We use information to answer your enquiry, prepare quotes, design and deliver website projects, operate Webisia Studio and hosted websites, connect domains, bill and reconcile subscriptions, provide support, prevent spam and abuse, meet documented obligations, and improve reliability. We do not treat use of the website or a submitted enquiry as consent to unrelated marketing.

Service providers

Depending on the service involved, information may be handled by infrastructure, object-storage, email, payment, bot-protection, security, error-monitoring, and observability providers, including DigitalOcean, AWS (including Amazon SES for email), Stripe, Cloudflare (including Turnstile on our contact form), Grafana, and Sentry. A business's own privacy notice may identify additional services it uses on its website.

Retention and deletion

We keep information only for the enquiry, service, security, dispute, financial, recovery, or legal purpose that applies. Retention varies by record. Enquiries that do not become a project are kept only as long as needed to respond and follow up. Account exports expire after 7 days and their signed access links after 60 minutes. Deleted generated media has a 30-day quarantine. Operational logs currently follow a 14-day provider window. Backups expire under a separate recovery schedule and are not returned to ordinary use after a completed erasure. Legal holds and required financial records override automated deletion.

Your choices and requests

You may ask about access, correction, export, deletion, or withdrawal of an optional consent. We may need to verify your identity and authority and may refer a request about a hosted website's visitor information to the business that controls it. Legal exceptions, retention duties, disputes, shared records, and legal holds can affect the response. Optional marketing messages must provide a way to unsubscribe.

Security

We use access controls, encryption, guarded data-lifecycle operations, monitoring, and tested recovery processes appropriate to the service. No system can guarantee absolute security. Never email passwords, one-time codes, API tokens, complete payment-card numbers, or encryption keys.

Cookies, browser storage, and monitoring

Webisia uses browser storage needed for account sessions, security, and language preferences, and Cloudflare Turnstile checks contact-form submissions for bots. Google Analytics runs only if you accept analytics cookies in the banner; if you decline, it is not loaded. With your consent, we also keep a first-party cookie for 30 days recording which campaign (UTM tags), page and referring website brought you to Webisia, and send it with a sign-up so we know which channels reach businesses. Advertising storage, ad personalization and advertising data sharing stay off. You can change your choice at any time from the Cookie settings link in the footer. Sentry receives scrubbed error information for security and reliability; default personal information, performance tracing, profiling, and session replay are disabled.

Children

Webisia is a business service and is not designed for children. A business using Webisia remains responsible for deciding whether its website may collect information about minors.

Contact

Andrew Enughwure is the OOPATECH INC. privacy officer. Privacy questions and requests can be sent to privacy@oopatech.com. Webisia project enquiries can be sent to hello@webisia.com, and support for existing websites to support@webisia.com. OOPATECH INC. legal or business enquiries can be sent to info@oopatech.com. Include the website and account involved, but do not include secrets or unnecessary personal records.