Legal & Data Protection · EU GDPR / RODO

Waspes Privacy Policy

Last updated: October 2026. This Privacy Policy explains what personal data Waspes (waspes.com, headquartered in Kraków, Poland) collects when you use our AI website builder, 3D Studio, Waspex agent, desktop application, and Model Context Protocol (MCP) server, how we use and protect that data, and how to exercise your rights under the EU General Data Protection Regulation (GDPR / RODO).

1. Information We Collect

  • Account Information: When you register via email/password or OAuth (Google, GitHub), we store your email address, display name, profile avatar, and authentication identifiers in Supabase Auth.
  • Prompts, Projects & 3D Assets: We store the chat prompts, uploaded reference images, generated HTML/CSS/JS websites, custom domain settings, and 3D models associated with your workspace so you can access, edit, and publish them across devices.
  • Contact Form Submissions: When visitors submit a contact form on a site you built with Waspes, we process the submitted fields (such as name, email, and message) solely to verify and deliver the message to the site owner's designated inbox.
  • Billing & Payment Data: Payments for Mini ($1.50/mo), Lite ($4/mo), Pro ($8.50/mo), Max ($14/mo), and Super Credits are processed by Stripe or Whop. Waspes never stores raw credit card numbers.
  • Technical & Usage Logs: We record daily generation counters, API/MCP key usage, IP-based rate-limiting counters, and error diagnostics to keep the service secure and reliable.

2. How We Use Your Information & Subprocessors

We use your information strictly to provide, secure, and improve the Waspes service. We never sell your personal data or prompts to third parties or advertisers. To run the platform, we share only the minimum required data with trusted infrastructure providers: Supabase (database and authentication), Vercel (edge hosting and serverless functions), Stripe and Whop (payment processing), Resend (transactional email and form delivery), Meshy (3D model generation), and frontier AI model providers to fulfill your generation requests.

3. Your GDPR Rights & Data Deletion

Under EU GDPR and applicable privacy laws, you have the right to access, export, correct, restrict, or permanently delete your personal data and projects at any time. You can delete individual chats, websites, and 3D models directly inside the app, or request full account erasure by emailing our privacy team at hello@waspes.com.