Privacy Policy

01

What We Collect

WeboEasy collects the minimum data required to provide the service. When you create an account or join a room, we collect:

• Email address — used for authentication and account identification
• Display name — the name you choose, shown to teammates in your rooms
• Firebase UID — a unique identifier assigned by Firebase Authentication
• Presence data — online/offline status, typing state, and active file (updated in real-time, not stored long-term)
• Project files — code and file content you or your team upload to a room

We do not collect payment information, phone numbers, or any data beyond what is listed above.

02

AI Features & Groq

WeboEasy provides an AI coding assistant powered by Groq. When you use the AI feature, the code context from your currently open file is sent to the Groq API to generate a response.

• Only the code you explicitly send to the AI is transmitted to Groq
• Requests are made server-side through our Netlify Functions — your Groq API key is never exposed to the client
• Groq's data handling is governed by Groq's Privacy Policy

We recommend you avoid sending sensitive credentials or secrets to the AI assistant.

03

Firebase & Data Storage

User accounts, room data, file content, and presence information are stored in Google Firebase (Realtime Database and Authentication). Firebase is subject to Google's privacy and security standards.

• Firebase Authentication handles Google Sign-In and Email/Password login
• Room data is stored under access-controlled paths — members can only read rooms they belong to
• Firebase Security Rules enforce all access permissions server-side
• An audit log records significant actions (invites, role changes, file access) for security purposes

04

GitHub Integration

WeboEasy offers optional GitHub integration. If you connect GitHub, we access your repositories only to fetch or push files as directed by you. We do not store GitHub tokens or read repositories outside of explicit user actions within the app.

05

Cookies & Tracking

WeboEasy does not use advertising cookies, tracking pixels, or third-party analytics. We do not share your data with advertisers.

• Firebase may set session cookies for authentication purposes
• localStorage is used to remember your theme preference and recently visited rooms
• No external tracking services (Google Analytics, Mixpanel, etc.) are used

06

Your Rights

You have the right to access, correct, or delete your personal data at any time. To request deletion of your account and associated data, contact us at the email below. We will process deletion requests within 30 days.

You may also update your display name at any time from within the app.

07

Data Retention

Room data and file content remain stored as long as the room exists. Presence data (online status, typing indicators) is ephemeral and cleared when you disconnect. If you delete your account, your personal identifiers are removed, though room content you contributed may remain for other members.

08

Security

We take security seriously. Key measures include:

• Server-side membership verification on every API request
• Rate limiting on all API endpoints to prevent abuse
• CORS restricted to weboeasy.com
• Invite codes are single-use and deleted immediately upon use
• Firebase Security Rules prevent unauthorized reads and writes

If you discover a security vulnerability, please contact us at security@weboeasy.com.

09

Changes to This Policy

We may update this Privacy Policy as the service evolves. Material changes will be communicated via email or an in-app notice. Continued use of WeboEasy after changes constitutes acceptance of the updated policy.

Questions? Contact us at privacy@weboeasy.com