webAI App Privacy Policy

Last Updated: July 21, 2026

This Application Privacy Policy explains how webAI, Inc. (“webAI,” “we,” “us,” “our”) collects, uses, and discloses your data when you use the webAI Application (the “Application”). It describes the data we collect and how it is handled, including which data is processed on your device and which data is sent to us or to third-party providers when you use certain features. For information about our website, marketing, and general business operations, please see our main Privacy Policy at webai.com/privacy.

Please read this Application Privacy Policy carefully so you understand how we handle your data. Where we rely on your consent for a particular use, we will ask for it separately; the legal bases we rely on are described in “Legal Bases for Processing” below. If you do not agree with this Privacy Policy, please do not use or access the Application.

1. Data You Provide to Us

Some features of the Application require you to provide certain information. This includes your contact and account details, such as your name and email address and the credentials you use to create and access your account. We use this information to create and maintain your account, to provide the Application, and to send you communications about the Application and webAI.

We may use your contact information to send you communications about the Application that may be of interest to you, including product updates, offers of other products or services, or helpful tips and documentation. You can choose to unsubscribe from our marketing emails at any time by clicking the ‘unsubscribe’ link at the bottom of the email, or by emailing us at privacy@webai.com. If you do so, we will not send you any more marketing messages, although you may continue to receive messages we sent to you prior to unsubscribing.

2. Data We Receive from Your Use of the Application

When you use the Application, we and our service providers collect:

Device and usage data. We collect device and usage data, such as device type, operating system, app version, log data, and date and time stamps, to provide, secure, and troubleshoot the Application.
IP address. We collect your IP address while you use the Application for authentication, connectivity, and security, and we derive an approximate location from it only if you enable the weather feature.
Analytics, performance, and error data. We use third-party analytics, feature-management, performance-monitoring, and error-reporting providers to understand how the Application is used, manage feature availability, monitor performance, and diagnose problems. This may include an account identifier and technical, usage, and diagnostic information. Where required by law, we ask for your consent before non-essential analytics and similar technologies store information on, or access information from, your device, and you can change or withdraw your choice at any time in the Application’s settings. Some of these technologies are necessary for the Application to function and cannot be turned off.

3. Deidentified Information

We may deidentify or anonymize your information so that it cannot reasonably be used to infer information about you or be linked to you (or we may collect information that is already deidentified or anonymized), and we may use such information for any purpose.

4. Face Presence Mode

If you enable Face Presence mode, the Application uses your device’s camera to detect when you step away or when another person is present, so it can automatically hide your content. This detection runs on your device, determines only whether a face is present (not whose face it is), and does not identify you or anyone else. No video or images are stored or transmitted.

Information you choose to share with other users, for example in direct messages or rooms, is exchanged directly between your device and theirs, and in some instances, is routed through infrastructure operated by webAI or its service providers to connect you with other users. To connect with peers, the Application shares network connection information, such as your IP address, public key, and a persistent peer or device identifier, so their device can reach yours. Once you share something, the recipients control their copy of it.

6. Data Shared with Third-Party Services and Providers

We do not “sell” personal data or “share” personal data for cross-context behavioral advertising, and we do not process personal data for “targeted advertising” purposes (as those terms are defined under state privacy laws).

We share personal data with trusted third parties where necessary to provide and operate the Application or for our legitimate business purposes. Such third parties may include our affiliates and others within our corporate group; vendors and service providers who help us deliver the Application’s features (for example, identity and authentication, analytics and product measurement, feature management, error and crash reporting, network routing to connect you with other users, and providing the weather); and professional advisors such as auditors, law firms, and accountants. We may also disclose personal data in connection with a corporate transaction, such as a merger, acquisition, asset sale, or bankruptcy.

We may also disclose your information as needed to comply with applicable law, to cooperate with law enforcement, judicial orders, and regulatory inquiries, to enforce our terms, and to protect the safety, security, and rights of webAI, our users, and others.

7. International Data Transfers and Data Privacy Framework

webAI is based in the United States, and the personal data we process may be transferred to and processed there and in other countries whose data protection laws may differ from those in your jurisdiction. In addition to the Data Privacy Framework described below, we rely on the European Commission’s Standard Contractual Clauses (with the UK Addendum) where another transfer mechanism is needed.

Data Privacy Framework (DPF). webAI complies with the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”) and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. Data Privacy Framework (“Swiss-U.S. DPF”) as set forth by the U.S. Department of Commerce. webAI has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (“EU-U.S. DPF Principles”) with regard to the processing of personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF. webAI has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (“Swiss-U.S. DPF Principles”) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) Program, and to view our certification, please visit https://www.dataprivacyframework.gov/.

Dispute resolution. In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, webAI commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF to TRUSTe (part of TrustArc), an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://feedback-form.trustarc.com/watchdog/request for more information or to file a complaint. The services of TRUSTe are provided at no cost to you.

EU, UK, and Swiss individuals should first contact webAI at:

webAI, Inc.
Attn: Privacy and Legal
515 Congress Avenue, Ste 2650
Austin, TX 78701
United States of America
privacy@webai.com

webAI will investigate and attempt to resolve complaints regarding the use and disclosure of personal information by reference to the Principles. In addition, the U.S. Federal Trade Commission (FTC) has jurisdiction over webAI’s compliance with the DPF, and webAI is subject to the investigatory and enforcement powers of the FTC. Under certain conditions, you may invoke binding arbitration for residual complaints not resolved by the other mechanisms, under the binding-arbitration option in Annex I to the EU-U.S. DPF Principles. The remedies available under such arbitration are limited to individual-specific, non-monetary equitable relief (such as access, correction, deletion, or return of the individual’s data in question) necessary to remedy a violation of the Principles with respect to that individual.

8. Data Security and Retention

We implement commercially reasonable technical, administrative, and organizational measures designed to protect personal data from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, no transmission is ever fully secure or error free. Therefore, you should take special care in deciding what information you provide to the Application. In addition, we are not responsible for circumvention of any privacy settings or security measures contained on the Application or third-party websites.

We retain your information for as long as is reasonably necessary for the purposes described in this Privacy Policy. To determine the appropriate period, we consider criteria such as whether we need the information to provide the Application, to resolve a dispute, to enforce our agreements, to prevent harm or promote safety, security, and integrity, to protect our rights, property, or products, and to comply with legal or regulatory requirements.

9. Legal Bases for Processing

Where data protection law applies, we process your personal data on the following legal bases. We rely on the performance of a contract to create and secure your account and to provide the Application and the features you request, such as collaboration and Spaces, in-app web search, connecting to a cloud model using your own API key, and essential feature configuration. We rely on our legitimate interests to operate, maintain, secure, and improve the Application, including product analytics, performance and session monitoring, system telemetry, error and crash reporting, and application updates; and to promote our products to business contacts. We balance these interests against your rights and freedoms, and you may object to this processing. We rely on your consent for optional features that depend on it, such as the weather feature and Face Presence mode, and for any other processing for which we ask your consent, which you can withdraw at any time. And we rely on compliance with a legal obligation where we must process data to meet legal requirements, such as responding to your rights requests, keeping tax and employment records, and responding to lawful requests from authorities.

10. Children

The Application is not intended for or directed to children. You must be at least 18 years old to use it, and by using the Application you confirm that you are 18 or older. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided us with personal information, please contact us at privacy@webai.com and we will take steps to delete it.

This requirement applies to the webAI Application. Our website and other services are governed by the separate webAI Privacy Policy at webai.com/privacy.

11. Third-Party Websites and Services

The Application may let you access third-party websites and services, for example through in-app browsing or web search. We are not responsible for the privacy practices of those third parties, and this Privacy Policy does not apply to them. We encourage you to review their own privacy policies.

If you connect a third-party account, such as Google or Slack, the Application can access data from that account at your direction, using read-only permissions, to perform the tasks you request. Access tokens are stored in your device’s keychain. You can disconnect at any time in the Application’s settings or with the provider, which revokes access going forward. Your use of connected services is governed by their own terms and privacy policies.

12. Data Breach

If we become aware of a personal data breach affecting your information, we will notify you and the relevant authorities where and as required by applicable law.

13. Your Rights

Depending on where you live and the laws that apply to you, you may have certain rights regarding your personal data. These include rights under the EU and UK GDPR and under U.S. state privacy laws such as those of California, Virginia, Colorado, and Connecticut. However, please be aware that these rights are not absolute and we may decline a request if we have a lawful reason for doing so. That said, we strive to prioritize the protection of personal data and comply with all applicable privacy laws.

Subject to applicable law, your rights may include the right to know what personal data we process and to access a copy of it; to receive certain data in a portable format; to request deletion of personal data we hold about you; to correct inaccurate personal data; to object to or restrict processing in certain circumstances, including processing based on our legitimate interests; and to opt out of direct marketing and of any sale or sharing for targeted advertising. As described in “Data Shared with Third-Party Services and Providers,” we do not “sell” your personal data or “share” it for cross-context behavioral or targeted advertising. Much of your content, including your files and local prompts, stays on your device under your control and is not held by us.

We collect the categories of personal data described in “Data You Provide to Us” and “Data We Receive from Your Use of the Application,” use them for the purposes described in this Privacy Policy, and disclose personal data to the categories of recipients described in “Data Shared with Third-Party Services and Providers.” To the extent we process sensitive personal information, we use it only for purposes permitted under applicable law.

Where we rely on your consent (for example, for the weather feature or Face Presence mode), you can withdraw it at any time in your settings, without affecting processing already carried out before withdrawal.

To exercise your rights, you or an authorized agent may contact us at privacy@webai.com; where an agent acts on your behalf, we may require proof of authorization, and we may ask for information sufficient to verify your identity before acting on a request. We will respond within the period required by the law that applies to you; where the EU or UK GDPR applies, we will respond within one month of a verifiable request, which we may extend by up to two further months for complex or numerous requests. You also have the right to lodge a complaint with your local data protection supervisory authority.

We do not make decisions about you based solely on automated processing that produces legal or similarly significant effects.

14. Enterprise and Government Deployments

If you access the Application through an organization, such as your employer or a government entity, your use may be governed by a separate written agreement between webAI and that organization. In those deployments, the organization is generally the controller of your personal data; it may configure or restrict features (including disabling certain functionality) and may apply its own privacy notice. To the extent a separate agreement or the organization’s notice conflicts with this Privacy Policy, that agreement or notice governs for that deployment, and webAI processes personal data as the organization’s service provider or processor on its instructions. Please direct questions about an organization’s privacy practices to that organization.

15. Changes to Our Privacy Policy

We may update this Application Privacy Policy from time to time. We will post the updated version with a new effective date. For material changes, we will provide active notice before the change takes effect, for example an in-App notice or a required acknowledgment the next time you sign in, and where a change requires your consent we will obtain it before the new processing begins. Non-material changes take effect when posted. We encourage you to review the policy periodically.

16. Contact Us

If you have questions or concerns about this Application Privacy Policy or how we handle your data, contact us at privacy@webai.com, or write to us at:

webAI, Inc.
Attn: Privacy and Legal
515 Congress Avenue, Ste 2650
Austin, TX 78701, USA