Privacy policy
Effective 15 September 2026. Written to be read, not to be scrolled past.
1. Who we are
Webamend is operated by Amit Malul Lev, a sole proprietor in Israel(“we”, “us”). It is the website at webamend.com and the hosted Webamend service. You can reach us at hello@webamend.com.
2. What we collect, and why
When you visit this website. Our host, Netlify, keeps standard server logs (IP address, browser, pages requested, time) for a short period to run the site and detect abuse.
Analytics. We use analytics tools, currently Google Analytics, to understand how this website is used: which pages are read, from what kind of device, and roughly where from. They set cookies and collect usage data. We use it only to improve the site, never for advertising, and we do not connect it to your name or email. You can block it with your browser’s cookie settings or an ad blocker.
When you use the contact form. Your name, email address and message, so that we can reply. They are sent to us by email and kept in our mailbox.
When you subscribe. Payment is taken by Dodo Payments, which acts as merchant of record. They collect your name, email, billing address and card details under their own privacy policy. We receive your name, email, the plan you chose, and a subscription identifier, and never your card details. After checkout you give us the details needed to set up each website: the repository address, the Netlify site name and the email addresses of the people allowed to request changes.
When your clients use the editor. The email addresses allowed to sign in are part of the website’s setup, which you give us. Signing in sends a link to one of those addresses and asks for a one-time code, and what comes back is a signed cookie in that person’s browser. We keep no record of who signed in or when. A change request, with any file attached to it, goes to the AI model and is then written to a pull request in your GitHub repository, attachments included. Our server holds the request only while it is being worked on.
3. Who else sees it
We share data only with the services needed to run Webamend:
- Dodo Payments, for payment, invoicing and sales tax.
- GitHub, where every change is stored as a pull request in your repository.
- Netlify, which hosts this website and builds your websites’ previews.
- OpenRouter and the model providers it routes to (including Anthropic and DeepSeek), which receive the text of each change request and the files needed to act on it. We do not send them your clients’ email addresses.
- Our email provider, which delivers sign-in emails and our notifications.
- Analytics providers, currently Google, which receive usage data from this website only, never from the editor your clients use.
We do not sell personal data, and we do not share it with anyone for advertising.
4. How long we keep it
Change requests do not stay on our servers at all. Each one lives as a pull request in your GitHub repository, which you control and we do not delete from. A file attached to a request is held while the request runs and removed when it ends. What stays on our server for a connected website is its setup (the repository, the Netlify site, the allowed email addresses and the keys the service runs with) and a cache of your repository that is rebuilt from GitHub. Server logs are kept for two weeks. Contact-form messages are kept in our mailbox until they are no longer needed. Payment records are kept by Dodo Payments for as long as tax law requires. Analytics data is kept for up to 14 months.
5. Where it is kept
The hosted service runs on servers in the European Union. GitHub, Netlify, Dodo Payments and the model providers may process data in other countries, including the United States, under their own safeguards.
6. Your rights
There is not much to hand over. We hold no account of you beyond the setup details of your connected websites and what Dodo Payments keeps for billing, and nothing in the editor is filed under a person’s name or email address. A change request is a pull request in the repository of the customer who owns that website, so if you want one seen or removed, that customer can do it there like any other pull request; if you do not know who that is, write to us and we will tell you. To have a website’s setup details deleted, write to us. For billing records we pass the request to Dodo Payments. Analytics data is not connected to a name or an address, so we cannot look it up per person; you can block it in your browser. For any of this, write to hello@webamend.com.
7. Security
Each website has its own installation, with its own keys and its own storage, walled off from every other installation. The AI agent runs in a throwaway container that holds no key to your repository or your hosting, so it can only edit a working copy, and what it changed is checked against your policy before any of it is committed. Sign-in needs a link sent to an allowed email address and a one-time code; there is no password to leak because there are none. All traffic is encrypted in transit.
8. Children
Webamend is a business tool and is not directed at anyone under 18. We do not knowingly collect data from children.
9. Changes to this policy
If we change this policy in a way that matters, we will email subscribers before the change takes effect and update the date at the top, and we will send you the previous version on request.
10. Contact
Questions about privacy go to hello@webamend.com. This policy is governed by the laws of Israel.