Privacy policy

Web Alpha (webalpha.io) is owned and operated by Commarad, LLC, a company owned by Arad Okanin (aradokanin.com). When this policy says “we”, it means Commarad, LLC. You can reach us at contact@getwebalpha.com.

Account information. When you create a Web Alpha account we store your name, email address, and a securely hashed password. If you join or create a workspace we store its name and your role in it.

Content you create. Websites, pages, settings, domains, and files you add to the platform are stored so we can host and display them as you direct. Text you submit to the AI drafting features is sent to our model provider to generate the result and is not used to train models.

Billing information. Payments are processed by Stripe. We store your plan, subscription status, invoice references, and billing email; card numbers never touch our servers.

Form submissions. When you contact us, submit a project inquiry, or apply for a partnership, we store the details you provide so we can respond and, where relevant, work with you.

Usage and technical data. We keep server logs and privacy-conscious analytics. Visitor identifiers are one-way hashes of the IP address and browser that rotate daily; we do not use tracking cookies on public pages.

• To provide, secure, and improve the platform, including hosting your websites and running the apps you use.
• To respond to your messages and deliver services you request.
• To send transactional email such as verification links, password resets, invitations, deployment notices, and billing receipts.
• To detect abuse, enforce rate limits, and keep accounts secure.
• To understand which features are used, in aggregate, so we can improve them.

We do not sell personal information. We share it only with service providers that help us operate the platform (infrastructure hosting, email delivery, payment processing, and AI model providers), when required by law, or to protect the rights and safety of Web Alpha and its users. Each provider is bound to use the information only to provide its service to us.

Signed-in areas use a session cookie that is required for authentication and a cookie remembering which workspace you last used. The accessibility panel stores your display preferences in your browser only. We do not set advertising cookies.

Account and workspace data is kept while your account is active. You can delete websites at any time from your dashboard, and you can request deletion of your account by contacting us; we remove personal information within thirty days except where we must keep records (for example invoices) for legal or accounting reasons.

Passwords are hashed with scrypt, sessions are stored hashed, traffic is encrypted with TLS, the database is reachable only from our application servers, and access to production systems is restricted to authorized personnel.

You can update your profile and email address in account settings, revoke sessions, export the content of your websites by publishing or copying it, and contact us to access, correct, or delete your information. Where local law grants additional rights, we honour them.

When we change this policy we update the date at the top and, for material changes, notify account holders by email.