1. Introduction
Web Anatomy ("we", "our", "us") respects your privacy and is committed to protecting your personal data.
This Privacy Policy (the "Policy") explains how we collect, use, and safeguard your information when you visit https://www.webanatomy.ai/ (the "Site") or use our services (the "Service"), including the landing-page analyzer, the benchmark library, and MCP access.
It also informs you of your rights and how you can exercise them, in compliance with the EU General Data Protection Regulation (GDPR) and the French Data Protection Act (Loi Informatique et Libertés).
2. Data Controller
The data controller is GABRIEL AMZALLAG SASU, a SASU with its registered office at 60 RUE FRANCOIS IER, 75008 PARIS.
For any questions or requests regarding your personal data, you can contact us at gabriel@webanatomy.ai.
If applicable, our Data Protection Officer (DPO) can be reached at the same address.
3. Data We Collect
We only collect data that is necessary to provide and improve our Service.
The data we may collect includes:
- Identity and contact information: first name, last name, business email, phone number.
- Technical data: IP address, browser type and version, time zone, operating system, technical logs, browser language, device type.
- Usage data: information about how you use the Site and Service (pages visited, clicks, features used).
- Content data: URLs or page elements you submit for analysis.
- Billing data: payment details processed by our provider Stripe.
- Communication preferences: choices related to receiving product or marketing emails.
We do not collect sensitive data (such as race, political opinions, or health information) and we never sell your data to third parties.
4. How We Collect Your Data
We collect your personal data in three ways:
- Directly from you when you create an account, make a payment, or contact our support team.
- Automatically when you browse our Site, through cookies and similar technologies.
- Through our technical partners, such as hosting, payment, or email services.
5. Purpose and Legal Basis for Processing
We use your data for the following purposes:
- to create and manage your user account;
- to provide and operate the web-page analysis Service;
- to handle billing, payments, and customer support;
- to improve the performance and reliability of our Site;
- to send you, with your consent, product or marketing updates;
- to ensure Site security and prevent fraud;
- to comply with our legal and accounting obligations.
Each processing activity is based on one of the following legal grounds:
- performance of a contract (when you use our Service),
- legitimate interest (improvement, security, customer support),
- consent (marketing communications),
- or legal obligation (tax and accounting requirements).
No automated decision-making producing legal effects is carried out using your data.
6. Electronic Communications
When you create an account, we may send you:
- Transactional emails: account verification, password reset, payment receipts.
- Product-related emails: onboarding tips, feature updates, usage summaries.
With your explicit consent (via opt-in checkbox at signup), we may also send you:
- Marketing emails: newsletter, CRO insights, promotional content.
You can unsubscribe from marketing emails at any time via the link in each email or by contacting us. Transactional and product-related emails cannot be opted out of while your account is active, as they are necessary for service delivery.
7. Data Security
We implement appropriate technical and organizational measures to protect your data from unauthorized access, loss, destruction, or disclosure.
These measures include encrypted communications (HTTPS/TLS), strict access control for authorized personnel, regular backups, and periodic security audits.
In the event of a data breach, we will notify the CNIL (the French Data Protection Authority) and, where necessary, the affected individuals, in accordance with applicable law.
8. Hosting and Service Providers
We work with trusted external partners to provide certain technical functions:
- Supabase for data hosting and storage,
- OpenAI for AI-powered analysis and content generation,
- Stripe for secure online payments,
These partners act as data processors under the GDPR and process data only on our instructions.
We ensure that each of them offers sufficient guarantees of security and compliance.
9. International Data Transfers
Some data may be transferred outside the European Economic Area, particularly to the United States (for example, for services like OpenAI or Stripe).
When this happens, we rely on the European Commission's Standard Contractual Clauses (SCCs) or other appropriate safeguards to ensure that your data enjoys a level of protection equivalent to that required in the EU.
For more information about these safeguards, you may contact us at gabriel@webanatomy.ai.
10. Data Retention
We retain your data only for as long as necessary to fulfill the purposes for which it was collected.
In practice:
- Account data is kept for up to three years after your last activity.
- Billing data is retained for ten years (legal obligation).
- Analysis data (URLs, results) is retained for twelve months.
- Technical logs are kept for six months.
- Marketing data is retained until you withdraw your consent.
After these periods, your data is either anonymized or securely deleted.
11. Your Rights
Under the GDPR, you have the following rights:
- the right to access your data,
- the right to rectify inaccurate or incomplete data,
- the right to erasure ("right to be forgotten"),
- the right to restrict processing,
- the right to object to certain processing activities,
- the right to data portability,
- and the right to withdraw consent at any time.
To exercise your rights, please contact us at gabriel@webanatomy.ai or by post at 60 RUE FRANCOIS IER, 75008 PARIS.
We may ask you for proof of identity for security reasons.
If you believe your data protection rights have not been respected, you may file a complaint with the CNIL (www.cnil.fr).
12. Cookies and Similar Technologies
We use cookies strictly necessary for the operation of our Site (authentication, preferences, security).
With your consent, we may also use cookies to measure traffic, analyze Site usage, and personalize your experience.
A cookie banner is displayed on your first visit, allowing you to accept or refuse non-essential cookies.
You can modify your preferences at any time via the "Manage cookies" link.
13. Links to Other Websites
Our Site may contain links to third-party websites.
We do not control these sites and are not responsible for their content or privacy practices.
We encourage you to review their privacy policies before using them.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect legal, technical, or operational changes.
The "Last updated" date at the top of this page indicates its latest version.
For significant changes, we will notify you by email or through the Site.
Your continued use of the Service after any updates constitutes acceptance of the revised Policy.
15. Contact
For any questions about your personal data or this Policy, please contact:
GABRIEL AMZALLAG SASU
60 RUE FRANCOIS IER, 75008 PARIS