# Privacy Policy — Waspes (GDPR / RODO Compliant)

**Canonical URL:** https://waspes.com/privacy  
**Data Controller:** Waspes (Kraków, Poland · `hello@waspes.com`)  
**Effective Date:** April 2026 (Last Verified: 2026-10-24)

## 1. Who We Are
Waspes (`https://waspes.com`) operates the Waspes AI Website Builder, 3D Studio, and MCP Agent Platform. For any privacy or data protection questions, contact our privacy team at `hello@waspes.com`.

## 2. Information We Collect
- **Account Information:** Email address, display name, and authentication identifiers when you register via email/password or Google OAuth.
- **User Content:** Prompts, website configurations, uploaded assets, form submissions, and generated HTML/3D files stored in your workspace.
- **Billing Metadata:** Subscription tier, transaction IDs, and billing status processed securely by **Stripe** (Waspes never stores raw credit card numbers).
- **Technical & Usage Telemetry:** Anonymized page analytics, rate-limit counters, and error diagnostics required to keep the service secure and reliable.

## 3. How We Use Your Data
- To authenticate your account, generate and host your websites and 3D models, deliver wired contact form emails, process payments, and enforce security and rate limits.
- **No Sale of Personal Data:** Waspes does not sell, rent, or broker your personal data to third parties or advertisers.
- **No AI Training on Private Projects:** Your private prompts, business data, and unpublished websites are never used to train public foundation models.

## 4. Infrastructure & Sub-processors
- **Supabase:** Database, authentication, and row-level security (RLS).
- **Vercel:** Edge hosting, serverless API execution, and TLS delivery.
- **Stripe:** PCI-DSS Level 1 payment processing.
- **AI Inference Providers (OpenAI, Google Gemini, Anthropic, Meshy):** Process generation prompts transiently under zero-data-retention API agreements.

## 5. Your Rights Under GDPR / RODO
You have the right to access, rectify, export, restrict, or permanently delete your personal data at any time. Contact `hello@waspes.com` and we will respond within 30 days.