Privacy Policy

1. Introduction

This Privacy Policy explains what data Weebku collects, where it comes from, what it's used for, and your rights over that data. By using Weebku, you understand and agree to the practices described here.

2. Data We Collect

• Account data: email, password (stored as a hash, never as plain text), username, name, bio, profile/cover photo, header video.
• Page content: links, text, catalog products, and display settings you enter yourself on your Page.
• Limited technical data: device and browser type (from your User-Agent), referrer URL, and an anonymous visitor ID (cookie), collected when someone visits our pages, for statistics and abuse prevention.
• IP address: collected on a limited basis, only to rate-limit abuse of the AI generator, the bio-link import feature, and the chat feature, not logged on every ordinary visit to your Page.
• Google account data: name, email, and profile photo, if you sign in or register with Google.
• PRO payment data: order details (amount, unique code, the channel you chose) and proof-of-payment (a screenshot) that you upload yourself. We never ask for or store your card or bank account number.
• Brand verification documents: if you apply for our Verified badge, we collect an ID document (national ID/passport) and other supporting documents (for example a business license, trademark certificate, or authorization letter, depending on your claim type) to verify your claim to a brand.
• Chat transcripts: if you use the AI generator/chat feature to build your Page, the text you type is stored and processed to generate your Page's content.
• Violation reports: if you report a Page, we store the content of your report and your email (if you choose to include one, it's optional).

3. Sources of Data

• Directly from you, through the registration form, your dashboard, the brand verification form, or the AI chat feature.
• From Google, if you sign in using a Google account.
• Automatically from your device/browser when you access Weebku (the limited technical data described above).
• From visitors to your Page, visit and click data on your Page is collected and shown as statistics only to you, as the Page owner.

4. What We Use This Data For

Your data is used to: run and display your Page, handle login and email verification, verify PRO plan payments, process Verified badge applications, generate content through the AI generator, show you your own visit statistics, prevent abuse of the service, follow up on violation reports, and send account-related emails (verification, password reset, PRO payment confirmation). We do not sell your personal data to anyone.

5. Your Public Page

Anything you display on your Weebku Page (name, bio, photo, links, catalog) is public and can be seen by anyone who opens the link. Don't display sensitive personal information on your Page if you don't want it seen by others.

6. Analytics and Tracking

We use two separate layers of analytics:

• Weebku's own analytics: records visits, clicks, and shares on your Page (device, browser, referrer, and an anonymous visitor ID), shown only to you as the Page owner, in your Analytics dashboard. We don't record IP addresses in this data.
• Google Analytics 4 (GA4): active across all weebku.com pages, including public Pages at weebku.com/{username}, to understand overall site traffic and performance. Data collected by GA4 is processed by Google under Google's own privacy policy.
• Google Ads: if you registered through one of our ads, a one-time sign-up conversion is tracked at that moment.

7. Cookies and Similar Technologies

We use a few cookies: a session cookie that keeps you signed in (httpOnly, unreadable by third-party scripts), an anonymous visitor-ID cookie ("wbk_vid", valid for 1 year) for visit statistics, a short-lived cookie (10 minutes) during the Google page-claim process, and cookies set by Google Analytics and Google Ads. See our Cookie Policy for the full list and explanation of each cookie.

8. Google Login / OAuth

If you sign in or register using the "Continue with Google" button, we receive your name, email address, and profile photo from your Google account, based on the permission you grant during that sign-in. We never receive or store your Google account password.

9. Payment

PRO plan payments are made via manual bank transfer, Weebku does not use a third-party payment gateway to process transactions, and never asks for your card or bank account number. All we store are the order details and the proof-of-payment screenshot you upload yourself, for our team's manual verification.

10. Third-Party Service Providers

We rely on a number of third-party providers to run Weebku:

• Google, for login (OAuth), Google Analytics, and Google Ads (see the Analytics and Tracking section above).
• Anthropic (Claude API), processes the text you type in the AI generator/chat feature to generate your Page's content.
• Email (SMTP) provider, for sending verification, password reset, and PRO payment confirmation emails. *[TO BE CONFIRMED: specific email provider name]*

11. Sharing and Disclosure of Data

We do not sell your personal data to anyone. Your data may be processed by service providers who help us run Weebku (see the section above), only to the extent needed for that purpose. We may also disclose data where required by law, formally requested by law enforcement, or to protect the rights, safety, and property of Weebku or other users, for example, when investigating an impersonation or fraud report.

12. Data Security

Your account password is stored as a hash (bcrypt), never as plain text. Brand verification documents (like an ID card) are stored in a private folder on our server that only you and Weebku admins can access, not publicly accessible. Your login session uses an httpOnly cookie. That said, no system is 100% risk-free, we recommend keeping your account password confidential. *[TO BE CONFIRMED: any additional security safeguards beyond what's listed here]*

13. Data Storage and Retention

Your data is kept for as long as your account remains active. *[TO BE CONFIRMED: the exact retention period after an account is deleted or inactive for a certain time]*

14. Data Deletion

You can delete links, photos, videos, or catalog items at any time, on your own, from your dashboard. For full account deletion along with all your data, contact us through our contact page, we currently handle this manually, as there's no automated delete-account feature in the dashboard yet.

15. Your Rights Over Your Personal Data

Consistent with personal data protection principles applicable in Indonesia, you have the right to request access to, correction of, or deletion of your personal data by contacting us through our contact page. *[TO BE CONFIRMED: a formal requester identity-verification process and target response time]*

16. Children's Privacy

Weebku is not intended for children under 13, or the minimum age required in your country. We do not knowingly collect personal data from children under that age. If you become aware that a child under that age is using Weebku without parental/guardian consent, please let us know through our contact page.

17. Data Transfers to Third-Party Providers

Some of the providers we use (Google, Anthropic) may process data on servers located outside Indonesia, consistent with standard practice for global cloud services. *[TO BE CONFIRMED: the formal cross-border data transfer safeguards in place]*

18. Changes to This Privacy Policy

If we make significant changes to this policy, we'll update the date at the top of this page, and we recommend reviewing it periodically.

19. Contact

Have a question about your data privacy? Contact us through our contact page.