What we collect
When you order
- Your username.
- Your order brief: your business name, what it does, the site you want, colours, reference sites, the copy you send and your deadline.
- Files you upload, like your logo, photos or documents.
- Payment details are entered on Stripe’s checkout page. We receive confirmation of payment, the amount, and the last four digits and brand of your card. We never see or store your full card number.
When you chat with us
- After you order, your conversation with us in your dashboard, including files you send, is stored so we both have a record. We also store when messages were read, and when you were last active on your dashboard.
Automatically
- To stop abuse (like repeated login attempts), we keep a one-way hash of your IP address with a request count for a short time. We don’t store the IP address itself for this.
- Our hosting provider keeps standard request logs (like IP address and browser type) for security.
In your browser
- We use cookies only to keep you logged in. We don’t use advertising or analytics cookies.
How we use it
- To build, deliver and support your website.
- To take payment and keep records we’re required to keep.
- To show your order’s status, updates and our replies in your dashboard.
- To answer your questions in your dashboard chat.
- To prevent fraud and abuse.
We don’t sell your information.
Who helps us
We use a small number of service providers. Each one only gets what it needs to do its job.
- Supabase stores our database (accounts, orders, briefs, messages) and uploaded files, and handles logging in. Your password is stored securely by Supabase; we never see it.
- Stripe processes payments. Stripe has its own privacy policy for the information you give it at checkout.
- Vercel hosts this website.
How long we keep it
We keep order records, briefs and messages for as long as you’re a customer and for as long as tax and accounting rules require after that. You can ask us to delete your information at any time, and we will, except for records we’re legally required to keep.
Your choices
You can ask for a copy of your information, ask us to correct it, or ask us to delete it. Message us from your dashboard and we’ll take care of it.
Security
Your data is stored with access controls so customers can only see their own orders, messages and files. Uploaded files are private and shared only through short-lived links. Payment details never touch our servers.
Children
Wexlo is for businesses and isn’t meant for anyone under 16.
Changes
If we change this policy, we’ll update the date at the top of this page.