Privacy policy

1. Controller

Muhammad Baleegh, Webliify
Dahmestraße 77
12526 Berlin
Germany
Email: hello@webliify.com

2. Hosting and server logs

This website is delivered through the network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you open a page, Cloudflare processes technically necessary data: IP address, date and time, the page requested, the referrer, and browser and device information. This is needed to deliver the website and protect it from attacks. Requests are usually handled in a data centre near you. Cloudflare sets no cookies here.

The legal basis is our legitimate interest in running the site securely and reliably (Art. 6(1)(f) GDPR). We have a data processing agreement with Cloudflare. For transfers to the USA, Cloudflare relies on the EU-U.S. Data Privacy Framework or the European Commission’s Standard Contractual Clauses. See Cloudflare’s privacy policy.

3. Fonts

The fonts on this website are served from our own server. No connection is made to Google or any other font provider.

4. Audit and contact form

When you use the form, we process your name, email address, business name or store link, website (optional) and the language of the page. If you used one of our calculators first, the numbers you entered there are sent with it. The calculators themselves store nothing and send nothing until you submit the form. We use this data to prepare your audit and reply to you by email.

The legal bases are steps taken at your request before a contract (Art. 6(1)(b) GDPR) and your consent to be contacted by email (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future.

The data is sent through a server function at Cloudflare to our own automation server (n8n) and stored there in our enquiries database. This server runs at Google Cloud (Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland), in a data centre in Berlin, Germany. We have a data processing agreement with Google. Where Google can access data from the USA in individual cases, it relies on the EU-U.S. Data Privacy Framework or the European Commission’s Standard Contractual Clauses. We’re notified of new enquiries by a short email that contains no personal data from your request.

We delete your enquiry once it’s dealt with and no contract follows, at the latest after 12 months. If a contract follows, statutory retention periods apply.

5. Ivy, our AI receptionist

Ivy only loads when you click “Talk to Ivy”. Until then, no connection is made to ElevenLabs. When it loads, the widget also fetches small images (such as flags for the language menu) from storage that ElevenLabs runs on Google Cloud (storage.googleapis.com). This sends your IP address to Google.

For each conversation, our website creates a random conversation ID that only lasts for that visit. Nothing is stored in your browser, no cookies are set, and no device fingerprint is created.

When you start a conversation, your voice or typed messages are sent to ElevenLabs Inc. (USA) to turn them into text, generate a reply and speak it. The replies are generated by a Google language model (Gemini) that ElevenLabs uses for this. Your microphone is only used after you allow it in your browser.

We don’t store audio recordings. Transcripts are kept for 90 days and then deleted. If you request an audit during the conversation and agree to be contacted, Ivy sends your name, email address and business details to our automation server (see section 4).

The legal basis is your consent, given by starting the conversation (Art. 6(1)(a) GDPR), and for audit requests also Art. 6(1)(b) GDPR. For transfers to the USA, ElevenLabs relies on the EU-U.S. Data Privacy Framework or Standard Contractual Clauses. Please don’t share sensitive data such as health or payment details with Ivy. More in our AI notice.

6. Email and WhatsApp

If you email us, we process your message and contact details to reply (Art. 6(1)(b) or (f) GDPR).

Our mailbox (hello@webliify.com) is run by Zoho Corporation B.V., Beneluxlaan 4B, 3527 HT Utrecht, Netherlands, in data centres in the EU. We have a data processing agreement with Zoho. Where Zoho companies outside the EU get access in individual cases, for example for support, Zoho relies on the European Commission’s Standard Contractual Clauses.

WhatsApp is only linked on this website, not embedded. No data is shared until you use the link. If you message us on WhatsApp, WhatsApp Ireland Limited also processes your data under its own terms.

7. Your rights

You have the right to:

• access the data we hold about you (Art. 15 GDPR)
• rectification (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing based on legitimate interests (Art. 21 GDPR)
• withdraw consent with effect for the future (Art. 7(3) GDPR)

Just email us at hello@webliify.com. You can also complain to a data protection authority, for example the Berlin Commissioner for Data Protection and Freedom of Information.

8. No automated decisions

We don’t make automated decisions within the meaning of Art. 22 GDPR.

9. Encryption

This website is only served over encrypted HTTPS (TLS).

10. Changes

We update this policy when our website or the law changes. The current version on this page applies.