Privacy Policy

1. Data controller

WebLingo is provided by Bredis SAS. You can reach us at:

• 44 Rue Victor Hugo, 29200 Brest, France
• contact@weblingo.app

2. Data we collect

We only collect the information required to operate, secure, improve, and bill the service:

• Email address for account access, billing notifications, and preview links you request.
• Name, email address, and message details submitted through the contact form or the waitlist.
• Website URLs and language selections submitted to perform translation and localization.
• Payment data processed by Stripe (never stored by WebLingo).
• Product analytics identifiers and metadata, including internal user and account IDs, plan/status, workspace audience, event names, device/session metadata, and privacy-protected replay events.
• Technical data required to secure the service, such as IP addresses used for rate limiting and, for waitlist signups, the browser user agent and referring page.

3. Analytics

WebLingo uses PostHog EU Cloud for product analytics, error and reliability signals, and privacy-protected session replay on allowlisted public or sanitized website pages. Replay is disabled on the logged-in dashboard, preview-content pages, translation editing, runtime observation, glossary and override controls, admin routes, and customer-content pages. For the deployed public service, browser analytics requests route through WebLingo's PostHog managed proxy at metrics.weblingo.app; while this managed proxy beta is enabled, PostHog routes that proxy traffic through Cloudflare. PostHog receives pseudonymous event data and dashboard identifiers such as internal user/account IDs, plan/status, and workspace audience; it does not receive payment card details.

Browser capture is configured without autocapture, automatic pageview/pageleave capture, cookies or persistent browser storage, heatmaps, console logs, performance capture, or network request payloads. Session replay is sampled, masks all inputs and page text, disables canvas recording, and drops captured network requests.

Session replay only starts after you accept the recording prompt shown on eligible public pages. You can change or withdraw your choice at any time using the replay preference controls at the bottom of this page.

4. Data storage & processors

WebLingo relies on the following processors to operate the service, each bound by a data processing agreement:

• Vercel Inc. (USA) — website hosting and serverless infrastructure.
• Cloudflare Inc. (global) — content delivery, security, and Turnstile bot protection.
• Supabase — account authentication and database, including contact and waitlist submissions (hosted in Singapore).
• Upstash — short-lived rate-limiting counters derived from IP addresses.
• PostHog EU Cloud (EU) — product analytics and privacy-protected session replay.
• Stripe — payment processing.
• Resend — transactional email such as preview access links.

5. International transfers

Some of the processors listed above store data outside the European Economic Area, including in the United States and Singapore. These transfers are covered by the European Commission's Standard Contractual Clauses and by the processors' data processing agreements. You can request a copy of the applicable safeguards at contact@weblingo.app.

6. Data stored in your browser

The Try-Now preview flow stores your preview requests in your browser's local storage, including the submitted page URL, the selected languages, the email you optionally attach, and the access tokens used to reopen your preview. This data stays on your device, is never used for advertising, and can be removed at any time by clearing your browser's site data. Your session-replay consent choice is also stored locally.

7. Your rights (GDPR)

Under the GDPR you have the right to access, rectify, and erase your personal data, to restrict or object to its processing, to data portability, and to withdraw consent at any time (including for session replay, via the controls below). To exercise these rights, email contact@weblingo.app. You also have the right to lodge a complaint with the French supervisory authority, the CNIL (www.cnil.fr), or with your local supervisory authority.

8. Legal basis

Processing is based on contract performance for registered users and preview requests, on WebLingo's legitimate interest in securing the service and in pseudonymous, privacy-limited product analytics, and on your consent for session replay, which you can withdraw at any time.

9. Data retention

We retain account data while your account remains active or as required by applicable law. Contact-form messages and waitlist signups are deleted no later than 24 months after our last exchange with you. PostHog session replays are retained for 30 days.

10. Updates

We may update this Privacy Policy at any time. The latest version is always available at https://weblingo.app/legal/privacy.