Privacy Policy

1. Controller and contact

Sabiedrība ar ierobežotu atbildību “Web Vizual,” registration number 40203462329, is the controller for the customer information described here. Our registered address is “Viesturi 2”–1, Rendas pagasts, Kuldīgas novads, LV-3319, Latvia. Privacy questions and requests can be sent to [email protected].

2. Information we collect

We collect account name and email, a one-way password hash and salt when email sign-in is used, Google account identifiers when Google sign-in is used, essential session and verification tokens, the existing website URL, lead-recipient email, custom instructions, consent date and document versions, project selections, edits, uploaded logos or materials, technical request information, support communications, approval records, and billing information if you later approve and purchase the website. We do not store your Google password.

We also collect public business information from the website you submit and other public sources, including company identity, services, public contacts, service area, brand assets, source URLs, and legacy URLs needed for SEO migration.

3. How we use information

We use information to create and recover projects; verify business eligibility; research the business; generate content, design, pages, and imagery; deliver lead forms; perform automated checks and review by Flaria’s team; handle setup and change requests; communicate with you; provide hosting; issue and reconcile invoices; manage renewals and unpaid-service suspension; prevent abuse; maintain security; and meet legal obligations. Flaria AI assists with content and service delivery. We do not use it to make decisions with legal or similarly significant effects on you without human involvement.

Information submitted through customer websites

When a visitor submits a lead form on a website we host for a customer, that customer determines why the enquiry is collected and is responsible for its own privacy notice and handling of the enquiry. We process and deliver the form on the customer’s behalf to provide the hosting and form-delivery service. The Data Processing Addendum governs this processing on the customer’s behalf. Customers remain responsible for choosing a lawful basis and giving visitors an appropriate privacy notice before collecting personal information.

4. Legal bases

Where the EU General Data Protection Regulation applies, we process data to take steps at your request before entering a contract, perform a contract after approval, comply with legal obligations, and pursue legitimate interests such as service security, quality, and fraud prevention. We rely on consent where applicable law requires it.

5. Data recipients and Flaria AI

Flaria AI uses submitted instructions, public research context, project content, and support messages to prepare research, website copy, components, and answers. Recipients involved in delivering Flaria include contracted hosting and backup services, automated content-processing services, email delivery, security and traffic-protection services, and people authorized to provide support. Our project and contact-form records are stored in the platform database. The database software itself is not a separate recipient.

When you submit a guided setup or change request, or choose “Talk to a human,” the relevant chat context is sent to Flaria’s team through Telegram. Replies appear in the Flaria conversation. Do not submit passwords, one-time codes, payment-card data, API keys, or other secrets. Payment is currently by bank transfer; Flaria does not collect payment-card details.

Optional Google sign-in shares the authentication information needed to identify your account. Google Analytics receives permitted usage events only after analytics consent. Fonts and other externally loaded resources can expose connection information, such as IP address and browser details, to the resource operator. Stock-image search, public search, domain lookups, and mapping services receive the search terms, public business information, domain names, or addresses needed for the relevant feature.

Contracted processors act under applicable processing and security obligations. Services that act as independent controllers, including some optional account, public-resource, or communications services, apply their own privacy terms. We keep an operational recipient register and can provide details relevant to your project on request at [email protected]. The Data Processing Addendum covers recipients processing customer-controlled data on our behalf.

6. International transfers

Some providers may process data outside Latvia, the European Economic Area, or your country. Where required, we use recognized safeguards such as adequacy decisions, standard contractual clauses, or another lawful transfer mechanism. Contact [email protected] to request information about applicable safeguards and how to obtain a copy.

7. Retention and deletion

Support chat messages have a retention limit of 30 days after the conversation’s last activity. This policy includes the chat record and copies held by Flaria for that conversation in its support channel, attachments, and backups. Starting a new conversation does not require us to retain an older inactive conversation. We do not describe this as a guarantee that every recipient’s independent security or legally required record has the same retention period.

A support request may also create a separate project task, approval, or billing record. We retain only the information needed for that separate purpose, rather than retaining the whole chat indefinitely. Active project and hosting information is kept while needed to deliver the service. At the end of processing, customer-controlled personal data is returned or deleted as described in the Data Processing Addendum. Accounting records, legally required evidence, and proportionate security or dispute records are kept for the period required by the applicable obligation or unresolved issue and then deleted or anonymized.

You can request deletion at [email protected]. We assess requests across the systems involved, explain any legal reason for retaining particular information, and restrict its use to that reason. Information retained by an independent controller is governed by that recipient’s own notice and applicable law.

8. Browser storage, cookies, and analytics

The service uses an essential HttpOnly session cookie for account security and browser storage for project continuity, unsaved interface state, and the support conversation identifier needed to reopen your chat. These are necessary to sign in, protect project ownership, and recover work or a support conversation.

If you choose “Accept analytics,” we use Google Analytics to understand visits and interactions with the public Flaria website. The Google tag remains blocked until you accept. You can reject analytics or reopen Cookie settings and change your choice at any time. We do not use analytics for personalized advertising, and we do not intentionally send account details, form contents, support message contents, reset tokens, or preview-access tokens to Google Analytics.

9. Security

We use reasonable technical and organizational measures designed to protect data, including access controls, transport encryption where available, bounded uploads, server-side validation, and separation of customer projects. No system can guarantee absolute security.

10. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information, withdraw consent, or appeal a privacy decision. Send requests to [email protected]. You may also complain to the Latvian Data State Inspectorate or another competent regulator. We may request proportionate information to verify your identity before acting. Withdrawing consent does not affect the lawfulness of processing before withdrawal.

11. US state disclosures

We do not sell personal information or share it for cross-context behavioral advertising as those terms are commonly defined by US state privacy laws. We do not use submitted customer information to discriminate unlawfully. If our practices change, we will update this Policy and provide legally required choices.

12. Children

The service is intended for business customers and is not directed to children under 18. Please do not submit a child’s personal information through the builder.

13. Changes

We may update this Policy when the service, providers, or legal requirements change. The effective date identifies the current version. Material changes will be communicated where required.