Legal

Privacy Policy

WebCraft LLC · Effective date: July 20, 2026 · Last updated: July 20, 2026

The short version: we collect only what you give us and basic usage data, we never sell it, and you can ask anytime to see or delete what we have.

On this page

1. Who We Are

WebCraft LLC ("WebCraft," "we," "us," or "our") is a Minnesota limited liability company that designs, builds, hosts, and maintains websites for business clients. This Privacy Policy describes how we collect, use, and share personal information when you visit our website at webcraftscompany.com (the "Site"), submit a project inquiry through our intake, or otherwise communicate with us.

This policy covers our own Site and our direct communications with you. Websites we build and operate for our clients are governed by each client's own privacy policy, not this one.

Questions about this policy or our data practices: privacy@webcraftscompany.com.

2. Information We Collect

Information you provide through our project intake

When you start a project inquiry on the Site or contact us directly, we collect the information you choose to provide, which may include:

  • Your name and your business's name
  • Your email address
  • Your business type and a description of what your business does
  • What you want your website to accomplish and a description of your customers
  • Your current website address, if you have one
  • Your project timeline
  • Your budget range (optional — you may skip this)
  • Anything else you include in your message

Providing this information is voluntary, but we cannot respond to an inquiry without at least a name and an email address.

Information you provide as a client

If you become a WebCraft client, we additionally collect information needed to deliver our services: billing contact details, your communication preferences (including a phone number if you opt into text-message updates), the content and materials you provide for your website, and records of our communications, support requests, and the services performed.

Information collected automatically

When you visit the Site, we and our service providers automatically collect certain information about your device and how you interact with the Site, including:

  • IP address and approximate location (city/region level)
  • Browser type, device type, and operating system
  • Pages viewed, time spent, links clicked, and the referring page
  • Cookie identifiers and similar technologies (see Section 6)

Payment information

Payments to WebCraft are processed by Stripe, Inc. Stripe collects your payment card or bank information directly; we never receive or store your full payment card number. We receive confirmation of payment, amounts, and billing contact details. Stripe's handling of your information is governed by Stripe's own privacy policy.

3. How We Use Your Information

We use the information we collect to:

  • Respond to your inquiry and communicate with you about a potential or active project
  • Assess your project and provide a preliminary estimate of its scope and a recommended service plan
  • Provide, maintain, improve, and support our services, including the websites we build and maintain for clients
  • Send transactional communications, such as a confirmation that we received your inquiry, service updates, and (if you opt in) text-message notifications
  • Process payments, manage subscriptions, and maintain business records
  • Administer our referral program, where applicable
  • Understand how visitors use the Site so we can improve it
  • Protect the security and integrity of the Site and our systems
  • Comply with legal obligations and enforce our agreements

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

4. How We Share Information

We share personal information only with:

  • Service providers who process it on our behalf under contractual restrictions, currently including:
    • Google LLC (Google Cloud / Firebase) — hosting and data storage
    • Google LLC (Google Analytics) — site usage analytics (see Section 6)
    • Twilio Inc. (SendGrid) — email delivery
    • Stripe, Inc. — payment processing
    • DocuSign, Inc. — electronic contract execution for clients
  • Professional advisors (lawyers, accountants) where reasonably necessary
  • Authorities or other parties when legally required — to comply with law, a subpoena, or a court order; to protect our rights, safety, or property; or to detect and prevent fraud or security issues
  • A successor entity in connection with a merger, acquisition, financing, or sale of all or part of our business, in which case this policy will continue to apply to your information until updated

We do not share your information with third parties for their own marketing.

5. Data Retention

We retain project-inquiry information for up to 24 months after our last contact with you, so we can respond, follow up, and maintain business records. If you become a client, we retain information for the duration of the client relationship and as required afterward for legal, tax, and accounting purposes; client website data is handled per our client agreements (including post-termination retrieval windows). Analytics data is retained per the settings described in Section 6. We may retain information longer where required by law or to resolve disputes.

6. Cookies and Analytics

The Site uses cookies and similar technologies — small files stored on your device that help the Site function and help us understand usage.

  • Essential cookies are required for the Site to work (for example, security and load-balancing). These cannot be disabled through the Site.
  • Analytics cookies are set by Google Analytics 4, which helps us understand how visitors use the Site (pages visited, session duration, general location, device type). You can opt out using the Google Analytics Opt-out Browser Add-on or your browser's cookie controls.

Most browsers let you refuse or delete cookies through their settings. Refusing analytics cookies does not affect your ability to use the Site.

Global Privacy Control: We honor Global Privacy Control (GPC) signals sent by your browser as a valid request to opt out of any disclosure that state law treats as a "sale" or "sharing" of personal information.

Do Not Track: Because there is no industry standard for "Do Not Track" signals, the Site does not respond to DNT; we respond to GPC as described above.

7. Your Privacy Rights (All U.S. States)

We extend the following rights to all U.S. residents, regardless of state. Where a state privacy law (including the California Consumer Privacy Act as amended, and the comprehensive privacy laws of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states) grants specific rights, we honor them; where states differ, we apply the most protective standard as our baseline practice.

You have the right to:

  • Know / Access — request confirmation of whether we process your personal information and receive a copy of it
  • Correct — request correction of inaccurate personal information
  • Delete — request deletion of your personal information, subject to legal exceptions (for example, records we must keep for tax or legal purposes)
  • Portability — receive your information in a portable, readily usable format
  • Opt out of sale, sharing, and targeted advertising — we do not sell personal information or use it for cross-context behavioral advertising, so there is nothing to opt out of; if that ever changes, we will update this policy and provide an opt-out mechanism first
  • Limit use of sensitive personal information — we do not collect sensitive personal information as defined by state law in the ordinary operation of the Site
  • Non-discrimination — we will not deny you services, charge different prices, or provide a different quality of service because you exercised a privacy right

How to exercise your rights

Email privacy@webcraftscompany.com with your request. We will verify your identity using the email address associated with the information (and, if needed, reasonable additional verification) before acting. We will respond within 45 days, extendable once by an additional 45 days where reasonably necessary, in which case we will tell you. You may use an authorized agent; we will require proof of the agent's authorization.

Appeals

If we decline your request in whole or in part, you may appeal by replying to our decision email with the word "Appeal." A different review of your request will be conducted and we will respond within 60 days. If your appeal is denied, you may contact your state Attorney General.

California-specific notices

For California residents: in the preceding 12 months we have collected these categories of personal information — identifiers (name, email, phone if provided, IP address), professional/commercial information (business details, project inquiry contents, client records, payment records), and internet activity (Site usage data) — collected from you directly and from your device, for the business purposes in Section 3, and disclosed only to the service providers in Section 4. We do not sell or share personal information as defined by the CCPA/CPRA and have not done so in the preceding 12 months. We have no actual knowledge of selling or sharing the personal information of consumers under 16.

8. Data Security

We use commercially reasonable technical and organizational safeguards to protect personal information, including encrypted transmission (HTTPS), access controls, hosting on Google Cloud infrastructure, and server-side handling of form submissions with restricted database access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Children's Privacy

The Site is a business-to-business service and is not directed to children. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us personal information, contact privacy@webcraftscompany.com and we will delete it.

10. Where Information Is Processed

We are based in Minnesota, and information is processed and stored in the United States on Google Cloud infrastructure. The Site and our services are intended for users in the United States.

11. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date above and post the new version on this page, indicating material changes prominently. Your continued use of the Site after an update constitutes acceptance of the revised policy.

12. Contact Us

WebCraft LLC privacy@webcraftscompany.com Or through the contact options on our Site.