Privacy Policy

Last updated: 26 October 2026

This policy explains what personal data Web2Agents (web2agents.com) collects, why we use it, who processes it for us, and your rights. We're based in Portugal and follow the EU General Data Protection Regulation (GDPR).

1. Who is responsible
Web2Agents (web2agents.com) is operated by Diogo Pinheiro (NIF 231255950), c/o Minrs, Rua de José Falcão nº 133, 4050-317 Porto, Portugal, who is the controller of your personal data. You can contact us about privacy through our contact form. We don't offer support by email.

2. What we collect
- Free AI check: the website address and email address you enter. For each check we also store the result (score and report link), that you agreed to our emails and the wording you agreed to, where you came from (entry page and campaign tags) and the time of the check.
- AI-Ready Kit: the website address and email you enter, and order details (what you bought, when and for how much). Your payment details are entered on Stripe's checkout page and handled by Stripe. We never see or store your full card details.
- Contact form: your name, email address and message.
- Website usage: our website (hosted on Webflow) and analytics tools may collect technical data such as IP address, browser and device type, and pages visited, using cookies.
- The websites we analyse: we only fetch publicly accessible pages. We never log in or access private areas.

3. Why we use it
- To run your free AI check and show your result on screen (your request).
- To send you occasional emails from Web2Agents with AI-visibility tips, new solutions and relevant articles (your consent). Agreeing to these emails is a condition of the free AI check: in exchange for the free check, you agree to receive them. You can unsubscribe at any time with the link in every email, and you keep your result.
- To keep a record of each free check, including your agreement and the wording you agreed to, so we can show what you agreed to, handle your requests and prevent abuse (legitimate interest).
- To process your order, generate your kit and email the download link (to perform our contract with you).
- To answer your messages and help with access problems, re-runs or refunds (contract and legitimate interest).
- To keep order records for tax and accounting (legal obligation).
- To understand and improve our website and analysis (legitimate interest).
We don't sell your personal data. We use Google Analytics and Google Ads tags on our website to measure visits and the performance of our ads; see Cookies below.

4. Who processes data for us
We share personal data only with the service providers that help us run Web2Agents:
- Stripe – payments for the AI-Ready Kit. Under Stripe Managed Payments, Stripe (through Link) may act as the merchant of record or reseller and processes your payment and billing data under its own privacy policy.
- Zapier – automation for the AI-Ready Kit: passes your order details from Stripe to our server, which generates your kit and emails you the download link. The free AI check doesn't use Zapier and doesn't email you a report.
- Mailchimp (The Rocket Science Group LLC, an Intuit company, USA) – stores the email address of people who run the free AI check, with details of their check (website, score, report link, date and where they came from), and sends our emails. It records whether our emails are opened or clicked. Mailchimp keeps you as a subscriber until you unsubscribe.
- Webflow – hosts this website and its forms.
- Our server (VPS) hosting provider – runs our analysis and the free AI check, and stores reports, kit files and the free-check records. The records are kept in a database on our own server that only our application can access and that isn't reachable over the web.
- Google Analytics and Google Ads (Google Ireland Limited) – tags on our website that measure visits (website usage statistics) and the performance of our ads; see Cookies below.
Some of these providers may process data outside the EU. When they do, they rely on legal safeguards such as the EU Standard Contractual Clauses. Mailchimp is certified under the EU-U.S. Data Privacy Framework and also relies on the Standard Contractual Clauses.

5. How long we keep it
- Kit download links expire 14 days after we send them.
- Reports and kit files are stored on our server so we can resend them or help you with support. Ask us and we'll delete them.
- Free-check records (email, website, score, report link, your agreement and its wording, entry page and campaign tags, and the time of the check) are kept on our server until you ask us to delete them. To ask, use our contact form; we'll delete them within 30 days. Unsubscribing from our emails stops marketing but doesn't delete the record unless you ask.
- In Mailchimp, you stay a subscriber until you unsubscribe. After that, Mailchimp keeps a record that you unsubscribed, so you don't get our emails again.
- Order records are kept for as long as tax law requires.
- Contact messages are kept for as long as we need them to handle your request.

6. Your rights
You can ask to access, correct or delete your data, to restrict or object to how we use it, or to receive a copy of it. Where we rely on your consent, you can withdraw it at any time, for example with the unsubscribe link in any of our emails. Unsubscribing doesn't affect a free check you already ran or its result. Send your request through our contact form. You can also complain to the Portuguese data protection authority (CNPD, www.cnpd.pt).

7. Cookies
We use a small number of cookies and similar technologies. Necessary (always on): we save your cookie choice (cookie and browser storage "w2a_consent", 6 months) and, only while your browser session lasts, the campaign details of the link you arrived on (session storage "w2a_*"; ad click IDs are kept only if you accept marketing). Forms are protected from spam by Google reCAPTCHA, and payments are made on Stripe's own checkout page, which sets its own cookies. Analytics (only if you accept): Google Analytics 4 sets the cookies _ga and _ga_FCJVJC88KN (up to 2 years) to count visits and pages. Marketing (only if you accept): Google Ads sets the cookies _gcl_au and _gcl_aw (up to 90 days), and Google may set related advertising cookies on its own domains, to measure which ads lead to a visit or a purchase. Until you choose, and if you reject, Google tags stay in a restricted mode: no analytics or advertising cookies are set, and Google may receive only basic measurement signals without cookies. You can change or withdraw your choice at any time with "Cookie settings" in the footer of any page, or by deleting cookies in your browser settings. We keep your choice for 6 months and then ask again. Our emails may contain standard tracking (a small image and tracked links) that shows us whether an email was opened or a link clicked.

8. Changes to this policy
We may update this policy; the date at the top shows the latest version.