Privacy Policy

Last updated: 28 August 2026

Host Dada Ltd takes your privacy seriously. We value and protect the data of everyone who uses Web Brief AI (the "Service"), whether as a registered customer or a visitor to our website. We will never use your data without a lawful basis, and will always be transparent about what we do with it.

1. Who We Are

Web Brief AI is owned and operated by Host Dada Ltd, a private limited company registered in England and Wales under company number 14514477.

2. What This Policy Covers

This policy explains how we, Host Dada Ltd, collect and use your personal data when you visit our website or use the Web Brief AI service. The Service may contain links to third-party websites or platforms that we do not control. We are not responsible for the privacy practices of those external services and recommend you review their privacy notices separately.

3. Your Rights

Under the UK GDPR and Data Protection Act 2018, you have the following rights:

• The right to be informed about our collection and use of your personal data;
• The right of access to the personal data we hold about you;
• The right to rectification if any data we hold about you is inaccurate or incomplete;
• The right to erasure ("the right to be forgotten");
• The right to restrict processing of your personal data;
• The right to data portability;
• The right to object to processing carried out on the basis of legitimate interests or for direct marketing;
• Rights relating to automated decision-making and profiling.

To exercise any of these rights, please contact admin@hostdada.co.uk. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ico.org.uk).

4. What Data We Collect

Depending on how you use the Service, we may collect:

• Account data: name, email address, password (stored as a one-way hash), business or organisation name;
• Billing data: billing name and address. Card details are entered directly into Stripe and are never stored on our servers — we only retain a reference to your Stripe customer and subscription IDs;
• Project content: any information, text, images or files you submit to the Service in order to generate website briefs and related output;
• Communications: support tickets, emails and any correspondence you send us;
• Technical data: IP address, browser type and version, operating system, referring URL, pages visited, and timestamps of activity (collected via standard server logs);
• Cookies: session cookies and CSRF tokens necessary for the Service to function (see Section 10).

5. How We Use Your Data

We process personal data only where we have a lawful basis to do so. Our lawful bases are:

• Performance of a contract — to provide the Service you have signed up for, process payments, and provide support;
• Legitimate interests — to operate, secure and improve the Service, prevent fraud and abuse, and communicate with you about service-related matters;
• Consent — for any optional marketing communications (where applicable);
• Legal obligation — to comply with our tax, accounting and other regulatory duties.

We do not sell your personal data, and we do not use it to train any third-party AI models without an explicit contractual basis.

6. AI Processing of Your Inputs

To deliver the Service, content you submit (such as project information, briefs, page outlines and prompts) is sent to third-party AI providers — including OpenAI and Anthropic — for processing. These providers act as our processors and are contractually prohibited from using your inputs to train their models. You should not submit any sensitive personal data, financial information, or confidential third-party data through the Service.

7. Who We Share Data With

We share personal data only with the following categories of recipients:

• Stripe — payment processing;
• OpenAI, Anthropic and similar AI providers — for model inference;
• Hosting and email infrastructure providers — to operate the Service;
• Professional advisors — accountants and legal advisors, where necessary;
• Law enforcement and regulators — where required by law.

We do not sell, rent, or trade your personal data to third parties for their own marketing purposes.

8. Data Storage & Security

We use appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), hashed passwords, restricted database access, and regular monitoring. However, no system is 100% secure. We will notify you and the appropriate regulator without undue delay if we become aware of a personal data breach affecting your data.

9. Data Retention

We keep your personal data only as long as necessary for the purposes for which it was collected, or as required by law:

• Account data — for as long as your account is active, plus a reasonable period after closure for backup, dispute resolution and legal compliance;
• Billing records — at least 6 years, in line with UK accounting and tax obligations;
• Project content — until you delete it from the Service or close your account;
• Server logs — typically retained for up to 90 days, except where required for security investigations.

10. Cookies

We use only the cookies that are strictly necessary to operate the Service, including a session identifier and a CSRF security token. We do not currently use third-party advertising or tracking cookies. If this changes, we will update this policy and ask for your consent where required.

11. International Transfers

Some of our service providers (notably AI providers and payment processors) are based outside the United Kingdom. Where personal data is transferred internationally, we rely on UK-recognised safeguards such as the UK Addendum to the EU Standard Contractual Clauses, or transfers to jurisdictions with an adequacy decision.

12. Children

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from children.

13. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top of the page reflects the most recent version. Material changes will be communicated by email or by a prominent notice on the Service.

14. Contact Us

If you have any questions about this Privacy Policy, or wish to exercise any of your rights, please contact us:

Host Dada Ltd
124 City Road, London, United Kingdom, EC1V 2NX
Email: admin@hostdada.co.uk
Tel: 0203 519 9310