Privacy Policy
Last updated: 16 May 2026
Who we are
WebsiteOS is a website team service operating in Dubai, United Arab Emirates. Data controller contact: hello@websiteos.ai. Our service is available at websiteos.ai.
What data we collect
- Contact information you provide (name, email, phone, WhatsApp number) when booking a strategy session or submitting a form.
- Business information you share during onboarding (business name, industry, location, services).
- Publicly available business contact information (business name, website, role-based email such as info@ or contact@, public phone number, Google Maps profile details) we use for B2B outreach to service businesses in the UAE. Processed under the legitimate-interest basis of UAE Federal PDPL (2021) and equivalent GDPR Art. 6(1)(f). You can opt out at any time using the unsubscribe link in any email we send you, or by emailing hello@websiteos.ai.
- Website analytics collected via Google Analytics 4 and Google Tag Manager (page views, scroll depth, button clicks). This data is anonymized and aggregated.
- Technical data: IP address, browser type, device type, operating system. Used for security and performance optimization.
How we use your data
- To build and manage your website.
- To run the AI SEO Engine and generate content for your site.
- To track which marketing channels bring you leads (attribution).
- To improve our platform and services.
- To communicate with you about your account and service updates.
Cookies and tracking
We use essential cookies for site functionality and analytics cookies (Google Analytics 4, Google Tag Manager) to understand how visitors interact with our marketing site. You can opt out of analytics cookies via the cookie consent banner. Our tracking does not use advertising cookies or cross-site tracking.
Third-party services
- Google Analytics 4 - website analytics (privacy policy: policies.google.com/privacy)
- Google Tag Manager - tag management (privacy policy: policies.google.com/privacy)
- Vercel - website hosting (privacy policy: vercel.com/legal/privacy-policy)
- Cloudflare - DNS and CDN (privacy policy: cloudflare.com/privacypolicy)
- Cal.com - appointment scheduling (privacy policy: cal.com/privacy)
- Supabase - database for lead and customer records (privacy policy: supabase.com/privacy)
- Resend - transactional email delivery (privacy policy: resend.com/legal/privacy-policy)
- Stripe - payment processing and subscription management (privacy policy: stripe.com/privacy)
Data retention
Customer contact and business information: retained for as long as your account is active. Prospect contact information collected for B2B outreach: deleted within 12 months if no engagement, immediately on unsubscribe or opt-out request. Analytics data: retained according to Google Analytics default settings (14 months). You can request deletion of your data at any time by emailing hello@websiteos.ai.
Your rights
You have the right to access, correct, or delete your personal data. You can also object to processing or request data portability. To exercise these rights, email us at hello@websiteos.ai.
International data transfers
Your data may be processed in the United States (Vercel, Google), the European Union (Cloudflare), and the UAE (our operations). We rely on standard contractual clauses and adequacy decisions where applicable.
Contact
For privacy-related questions, email hello@websiteos.ai.