Privacy Policy

1. Who We Are

Web-Nothing is a brand operated by Smart AI Solutions. Smart AI Solutions is the trading name of Y. P. Law, who is the data controller for the personal data described in this policy and is registered with the Information Commissioner's Office under registration reference ZC259936.

Service address:
5 Brayford Square
London
E1 0SG
United Kingdom

Email: support@smartaisolution.co.uk

2. What Data We Collect

When you use Web-Nothing, we collect:

• Account information — your name, email address, and profile picture from Google OAuth sign-in.
• Prompts — the text you submit to generate apps.
• Generated app specifications — the JSON app definitions created by AI from your prompts.
• App data — records you create, edit, or import within your generated apps.
• Usage metadata — timestamps, token counts, and request logs for rate limiting and service improvement.
• Purchase and consent records — when you buy a paid plan or prompt pack: what you bought, when, the amount, and the version of the consent wording you accepted at checkout. We keep this to evidence the consent required by the Consumer Contracts Regulations 2013 and to send you the confirmation of your purchase.

3. How We Use Your Data

• To provide and operate the Web-Nothing platform.
• To generate apps from your prompts using AI providers.
• To enforce rate limits and prevent abuse.
• To improve the quality and reliability of the service.

We do not sell your personal data to third parties.

4. Third-Party Services

We use the following third-party services to operate Web-Nothing:

• OpenAI — processes your prompts to generate app specifications. Your prompt text is sent to OpenAI's API. See OpenAI's Privacy Policy.
• Google — provides OAuth authentication. See Google's Privacy Policy.
• Vercel — hosts the application. See Vercel's Privacy Policy.
• Neon — stores application data in PostgreSQL. See Neon's Privacy Policy.
• Upstash — provides rate limiting via Redis. See Upstash's Privacy Policy.
• Stripe — processes payments for paid plans and prompt packs. We never see or store your card details. See Stripe's Privacy Policy.
• Resend — delivers the emails we send you (purchase confirmations, waitlist notices). See Resend's Privacy Policy.

5. Data Storage and Security

Your data is stored in a PostgreSQL database hosted on Neon (AWS US East 1 region). API credentials for connected services are encrypted using AES-256-GCM. We use HTTPS for all data transmission. Access to the database is restricted to authorised application services only.

6. Data Retention

Your data is retained for as long as your account is active. You may delete your apps and associated data at any time through the Web-Nothing workspace. If you wish to delete your account entirely, contact us at support@smartaisolution.co.uk.

Purchase and consent records are kept for six years after the purchase, the limitation period for contract claims in England and Wales, even if you delete your account earlier.

7. Your Rights

Under UK GDPR and the Data Protection Act 2018, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to or restrict the processing of your data.
• Request a portable copy of your data.

To exercise any of these rights, email support@smartaisolution.co.uk.

8. Cookies

Web-Nothing uses a session cookie for authentication purposes only. We do not use tracking cookies, advertising cookies, or any third-party analytics cookies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of Web-Nothing after changes constitutes acceptance of the revised policy.

10. Contact

Y. P. Law, trading as Smart AI Solutions
5 Brayford Square, London E1 0SG, United Kingdom
support@smartaisolution.co.uk