Privacy notice

1. Who we are

ReWynder operates this website (rewynder.com) and the ReWynder platform. Questions about this notice go to hello@rewynder.com.

2. This website

This website is static and loads nothing from third parties by default — fonts and scripts are served from rewynder.com itself. It stores your cookie choice in your browser (and your language, once you pick one from the globe menu) and, only if you switch the Analytics category on, uses Google Analytics 4 to see how the site is used; everything about that, including how to change your choice, is in the cookie statement. Our hosting provider (Google Cloud, in the EU) records standard access logs — IP address, requested page, browser — for security and operation; they are kept for a short period and not used for anything else.

If you join the waiting list, we store your email address, the website you named, which version of the terms of use you accepted and when, the time of the entry, and the IP address and browser it came from — as evidence of the request. The list lives in this website’s own database in the EU. We use it only to send one confirmation and, later, news about the opening of the service through our e-mail provider (Postmark, ActiveCampaign LLC — see section 6); every such message carries an unsubscribe link, and an unsubscribe is honoured immediately. We delete your entry on request, and the whole list when the service has opened and the list has served its purpose.

If you leave your email address in a form on this site (for example to talk about a business account), we store the address, the optional website you entered, the page it came from, the time, and your IP address and browser as evidence of the request. We use it only to reply, keep it until the conversation is over or you ask us to delete it, and never pass it on.

3. The platform

3.1 Anonymous use

When you paste a website address without an account, the platform creates an anonymous session identified by a random code stored in your browser. Your designs are kept under that session for 30 days. The declaration you make about your relationship to the website is recorded together with the time, your IP address and browser, because we rely on it.

Drawing those designs costs us real money, so before we start the platform asks Google reCAPTCHA v3 whether there is a person on the page. It runs on the screens of that first, account-free flow and nowhere else. Google receives your IP address, your browser and how you interacted with the page, and returns a score; we see the score and nothing more. There is no puzzle to solve and no cookie of ours involved. Google’s use of that data is described in its privacy policy and terms of service. Once you have an account the check is not used at all.

3.2 Your account

An account holds your email address and a password (stored by Google Cloud Identity Platform, never by us in readable form), optional two-factor settings, your projects and their history, your declarations and consents, and the payment references needed to charge maintenance. Card details are handled by Adyen; we never see or store a card number.

3.3 Your website and its content

To rebuild a website we read its pages, texts, images and structure, and — with your consent at that step — content-management data you connect, upload or export. A database can contain personal data of your customers or members; before any database is copied you choose whether such data is left out (the default), pseudonymised or included, and you accept data-processing terms. Raw captures are deleted at the latest seven days after the site model has been produced. Credentials you grant are revoked or destroyed immediately after use.

3.4 AI processing

Reading, designing and building use AI models from established providers, accessed directly through their business interfaces under our own agreements. We send them the content needed for the task and record which model and prompt version produced each result. We do not sell your data and we do not train models on it.

3.5 Your rebuilt site

A published site runs in a Google Cloud project of its own, with its own database. Its form submissions are relayed to your inbox and stored in the site’s admin. It reports its health to the platform every 30 minutes; we keep one report a day for 365 days. At handover — a PRO request, after a fully paid contract year — the project becomes yours and the platform removes itself.

4. Where data lives

The platform runs on Google Cloud in region europe-west4 (Netherlands, within the European Economic Area), with customer-managed encryption keys on storage and databases, and the platform transfers no data outside the EEA. Rebuilt sites are hosted in the region and on the provider you choose — anywhere in the world; the default is the same Dutch region. If you choose a region outside the EEA, your site and its content run there on your instruction.

5. Retention

• Anonymous designs: 30 days. Designs of a signed-in project: 90 days, for good once the project is paid.
• What we read from a website: 30 days, then deleted.
• Raw connector captures and uploads: at most 7 days.
• Health reports of live sites: 365 days.
• Platform logs: 30 days. Audit logs of the cloud platform: one year.
• Your account, projects, declarations and invoices: as long as your account exists, and afterwards as long as the law requires.

6. Who else sees data

Google Cloud (hosting, identity, storage), Google reCAPTCHA (the human check described in section 3.1), Adyen (payments), Postmark (transactional email and the waiting-list messages) and the AI providers named above process data on our behalf under their respective agreements. We do not share your data with anyone else unless the law requires it.

7. Your rights

You can access, correct, export and delete the personal data we hold about you. Deleting your account deletes your projects; paid results you have taken over remain yours. Write to hello@rewynder.com; we confirm deletions promptly. You may also lodge a complaint with your data-protection authority.

8. Changes

We update this notice when the platform changes. The date at the top tells you which version you are reading. See also the terms of use and the trust page.