Information We Collect
Information you provide
- Contact data: Name, business name, email address, phone number, and similar details you submit via forms or share during a strategy call.
- Project data: Information about your business, website requirements, design preferences, brand assets, and automation needs.
- Account data: If you become a tenant on our platform: your login credentials, role, and team-member directory.
- Payment data: Billing address and payment card details. Card details are collected and stored directly by our payment processor; we receive only a token reference and the last four digits.
Information we collect automatically
- Technical data: IP address, browser type and version, device information, time-zone, and pages visited, collected through standard server logs and limited first-party analytics. The WebDevAuto analytics event system hashes IP information server-side rather than persisting raw IP addresses.
- Cookies and local storage: We use first-party storage where necessary for authentication, security, checkout, and remembering your privacy choices. Our first-party marketing analytics uses a tab-scoped session identifier. When advertising features are enabled and you have not opted out, configured providers such as Google Ads or Meta may set or read identifiers according to their own policies.
- Campaign attribution: If you arrive through a campaign link, we may temporarily retain campaign parameters such as UTM values or advertising click identifiers so inquiries and purchases can be attributed to the campaign that generated them.
- Free-website-report scans: When you request a free report, we automatically fetch publicly available content from the website URL you submit and run technical checks against it.
Information from telephone calls
When you place a call to a phone number operated by WebDevAuto or one of our tenants:
- Audio is not recorded. Our voice agent ("Ava") streams your audio in real time to our speech-to-text provider for the sole purpose of generating responses during the call. We do not save audio recordings, and our speech-to-text provider does not retain your audio for model training.
- Call metadata (your phone number, the call start and end times, and the duration) is retained in our server logs for up to 30 days, then deleted automatically.
- Voice messages you choose to leave through the agent (your name, phone number, and a short message summary) are stored in the receiving tenant's CRM so they can call you back.
- Live transfers connect you to a human at the receiving business. From that point, the receiving business's own call-handling practices apply.
Information from tenant-uploaded sales call recordings (Premium feature)
Our platform includes an optional Premium-tier feature ("AI Call Notes") that allows tenant administrators to upload audio recordings of their own sales calls for automated transcription and summarization. When this feature is used:
- Recordings are stored in our cloud storage in the tenant's private namespace.
- Audio is sent to our speech-to-text provider for transcription, and the resulting text is sent to our AI summarization provider.
- The transcript and AI-generated summary are stored in the tenant's CRM and accessible only to that tenant's authorized administrators.
How We Use Your Information
- Deliver ServicesTo design, develop, host, and maintain client websites; to operate the CRM, automation, and voice features for our tenants.
- CommunicationTo respond to inquiries, send booking confirmations, deliver the free website report, and provide technical support.
- Improve and SecureTo diagnose errors, prevent fraud, monitor abuse, measure site performance, and improve our automation engines and lead acquisition strategies.
- Advertising & AttributionWhere enabled, to measure campaign performance, attribute leads or purchases to campaigns, and support advertising features subject to your privacy choices.
- Legal ObligationsTo comply with applicable laws, respond to lawful requests, and enforce our agreements.
Sharing Your Information
We share information only as needed to operate the Services, with your consent, for configured advertising/measurement where permitted by your privacy choices, or as required by law:
- Subprocessors: A small set of vetted third-party service providers (hosting, AI, voice, email, SMS, payments, lead enrichment) deliver the Services. The full, current list is at /subprocessors and updated when our subprocessors change.
- Advertising and measurement providers: Where configured and not disabled by your privacy choices, providers such as Google Ads or Meta may receive campaign, device/browser, page-view, or conversion information to measure advertising performance and support advertising features. You can disable this category through Privacy Choices, and WebDevAuto treats Global Privacy Control as an opt-out signal for targeted advertising and applicable sale/sharing.
- Tenants: If you contact a business that uses our platform as their tenant, the information you submit (form fills, voice messages, calls) is delivered to that tenant. Their own privacy practices then apply.
- Legal compliance: We may disclose information when required by law, subpoena, or to protect our rights, property, or safety, or that of others.
- Business transfers: In connection with a merger, acquisition, financing, or sale of assets, with notice to affected users.
Data Retention
Google User Data & Google Calendar
When you choose to connect your Google Calendar to WebDevAuto, you authorize us, through Google's standard OAuth consent screen, to access a limited set of Google user data solely to provide appointment-booking features. This section describes exactly what we access, how we use it, and how you can revoke access.
What we access
- Google account basics: Your name and email address, via Google Sign-In, to identify your connected account.
- Google Calendar (calendar events): With your explicit consent, the ability to view and manage calendar events so the Services can check availability and create, update, or remove appointment events on your behalf.
How we use it
- We use Google Calendar data only to power the appointment-booking features you enable: reading availability and writing the booking events you or your customers create.
- We do not use Google user data for advertising, and we do not sell, rent, or transfer it to third parties except subprocessors strictly necessary to provide the feature, or as required by law.
- Humans do not read your Google user data except where you give affirmative consent for specific items, where necessary for security or to comply with applicable law, or in aggregated/anonymized form for internal operations.
Storage, retention & revoking access
- Tokens: Your Google authorization (OAuth) tokens are stored encrypted and used only to make the calendar requests described above.
- Revoke anytime: You can disconnect Google Calendar at any time from Settings → Booking → Disconnect inside the platform, which deletes the stored tokens. You may also revoke access directly at myaccount.google.com/permissions.
- Deletion: When you disconnect, we delete the stored Google tokens from active systems; any events already written to your calendar remain under your control in Google Calendar.
SMS / Text Message Communications
By providing your mobile number and checking the SMS consent box during your strategy call request, you expressly consent to receive transactional text messages from WebDevAuto at the number you provided. The following describes our SMS program in full:
- Program Operator: WebDevAuto LLC, contactable at porter.websales@webdevauto.com.
- Message Types: Strategy-call booking confirmations and appointment reminders. We do not send marketing or promotional SMS through this number.
- Message Frequency: Event-driven, tied to your inquiry. Typically 1 to 4 messages per booking (confirmation, 24-hour reminder, 1-hour reminder, follow-up).
- Cost: Message and data rates may apply per your wireless carrier's plan. WebDevAuto does not charge for these messages.
- Opt-Out: Reply STOP to any message to unsubscribe. You will receive a confirmation reply, after which no further SMS will be sent.
- Help: Reply HELP to any message for assistance, or email porter.websales@webdevauto.com.
- Carrier Disclaimer: Carriers are not liable for delayed or undelivered messages.
- Privacy: Your phone number is collected solely to operate this SMS program. We do not sell, rent, or share mobile numbers with third parties for their marketing purposes. See sections 02-03 above for full detail on data handling.
05. Data Security
We implement appropriate technical and organizational security measures designed to protect personal information, including encryption in transit (TLS) and at rest, role-based access controls, audit logging of administrative actions, and least-privilege service accounts. No method of transmission over the internet is 100% secure, but we work to limit the impact of any incident.
If we confirm a personal-data breach affecting your data, we will notify affected customers without undue delay and within 72 hours of confirmation, with the information reasonably available to help you meet your own notification obligations. See our Trust & Security page for more.
06. Your Privacy Rights
Subject to applicable law, you may have the right to access, correct, delete, or export your personal information; to withdraw consent where consent is the legal basis; and to object to or restrict certain processing. Depending on the law that applies to you, you may also have the right to opt out of targeted advertising, sale, or sharing of personal information.
You can manage website tracking choices using the Privacy Choices control available on webdevauto.com. We recognize Global Privacy Control as an opt-out signal for targeted advertising and applicable sale/sharing. For access, correction, deletion, portability, or other privacy requests, email porter.websales@webdevauto.com. We will verify and respond to requests within the period required by applicable law. If your data was provided to a tenant on our platform, we may direct your request to that tenant as the data controller.
07. Children's Privacy
The Services are not directed to children under the age of 16, and we do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us and we will delete it.
08. International Users
Our Services are operated from and stored in the United States. If you access the Services from outside the U.S., your information may be transferred to and processed in the United States, where data-protection laws may differ from those of your jurisdiction.
09. Updates to This Policy
We may update this Privacy Policy from time to time. We will revise the "Effective Date" above and, for material changes, provide additional notice where appropriate, such as by email or a notice on the Services.
10. Contact Us
If you have questions, comments, or a privacy request, contact WebDevAuto LLC at porter.websales@webdevauto.com.
© 2026 WebDevAuto LLC. All rights reserved.