Skip to content
GDPR & CCPA CompliantEffective Date: November 2026

Privacy Policy

At WebPeak, we hold privacy, data sovereignty, and security in the highest regard. This policy outlines exactly what information we collect, how it is secured, and your rights.

Executive Summary & Commitments

  • We do not sell, rent, or trade your personal information to third parties or brokers.
  • Interactive tools run in-browser or on zero-retention serverless instances.
  • You have the right to request deletion or export of your records at any time.

1. Information We Collect

We only collect information necessary to deliver high-quality engineering, growth strategy, and interactive web tools. This includes:

  • Contact Details: Name, work email address, company name, and project scope submitted through our contact and consultation forms.
  • Usage & Telemetry: Aggregated, privacy-friendly analytics (such as page views, browser type, and referrer) to optimize performance.
  • Client Project Assets: Source repositories, design mockups, and API credentials provided under mutual Non-Disclosure Agreements (NDAs).

2. How We Use Your Data

Your data is strictly utilized to:

  • Architect, execute, and support custom Next.js web applications and AI SEO campaigns.
  • Communicate progress reports, sprint milestones, invoices, and security advisories.
  • Ensure compliance with international privacy mandates (GDPR, UK GDPR, and California CCPA).

3. Data Retention & Deletion

We retain client deliverables and communications only as long as necessary to fulfill project warranties or statutory accounting requirements. You can submit an immediate "Right to be Forgotten" deletion request by emailing info@webopeak.org.

4. Security Infrastructure

All traffic is strictly encrypted in transit using TLS 1.3, and server databases enforce AES-256 encryption at rest. Access to production environments is strictly role-gated with mandatory hardware two-factor authentication (2FA).