Trust
Built like infrastructure, not like a demo.
A website rebuild touches your content, your customers’ data, your domain and your money. These are the rules ReWynder is built by — each one enforced by code or infrastructure, not by a policy document.
An EU platform; your site where you choose
The platform runs on Google Cloud europe-west4 in the Netherlands, and rebuilt sites default there — but the world map lets you publish in any datacenter worldwide: Google Cloud today, AWS, Azure and Scaleway coming soon. Customer-managed encryption keys on every platform bucket and database, rotated every 90 days. No public IPs on databases. Audit logs kept for a year in a locked sink.
Isolated by the database
Every row carries its tenant and the database itself does the filtering. A buggy or malicious query cannot cross tenants; a linter refuses any query that forgets. Files are tenant-prefixed and reachable only through short-lived signed links.
One door for AI
A single gateway holds every model key; providers are contracted directly, never through an intermediary. Every call is metered, capped by a daily budget and written to a ledger with the exact prompt version, so any result can be reproduced.
AI never decides money, rights or legal outcomes
Models classify, count, generate and explain. Prices are arithmetic on a versioned rate card. Rights follow from your declaration and a deny-list of protected properties. Customer emails are fixed templates.
Generated HTML never runs in our origin
Every design variant is sanitised — no scripts, no external requests except Google Fonts — and previews render from signed links or an isolated host. Your site’s admin pages are never cached, indexed or framed.
Nothing secret changes hands
The platform acts on your cloud project through one deployer identity it can only impersonate; no keys exist anywhere. Credentials you grant for a copy live in a vault for the duration of the copy and are revoked at once.
Copyright
Two ways to use ReWynder, and a clear line between them.
You tell us your relationship to the website and confirm the copyright statement with a switch. Without the confirmation, ReWynder treats the request as “no rights” — quietly, without scolding — and uses the site only as a structural and thematic example.
| You hold the rights | No rights | |
|---|---|---|
| Which pages are read | Every page, plus connectors, uploads and exports | Public pages only, robots.txt honoured, one example of each layout |
| Texts | Carried over as they are (or polished, your choice) | Every text rewritten; only facts kept — name, address, hours, prices |
| Images | Carried over, compressed where needed | Never fetched or stored; a placeholder is generated from the alt text and the slot |
| Logo | Preserved | Never reproduced — the name is set as text |
| Retention of what was read | 30 days after delivery | 30 days, then deleted |
| Domain | Your own domain, after proof | A fresh domain only — never the original or a look-alike |
- The declaration is an immutable record: choice, switch, time, address, browser.
- Clearly protected properties — banks, big brands, public bodies — are refused even with a declaration. A declaration is not a key.
- No-rights reads are never shared with rights-holder reads, and the original pixels are never sent to any model.
- If you later obtain the rights, you start a new project with them.
Content policy
What we refuse to build at all.
Rights or no rights, ReWynder does not rebuild, host or maintain websites that propagate, encourage, sell, recruit for or facilitate any of the following. A site is not refused for mentioning a subject — reporting, research, prevention, support, treatment, legal defence, satire and fiction are fine. The line is purpose: whether the website is the thing.
- pornography
- terrorism and violent extremism
- anti-Semitism, including Holocaust denial
- hatred of, or incitement against, people because of who they are
- sexual abuse or exploitation of children
- abuse, violence or non-consensual material as content
- human trafficking, smuggling or exploitation of people
- criminal activity — offering or instructing crimes, forgery, laundering
- the sale of illegal drugs
- the illegal sale of weapons or explosives
- the promotion or instruction of suicide, self-harm or eating disorders
- fraud, phishing and deceptive investment schemes
- malware, attack services and credential theft
- unlicensed or anonymous gambling and match-fixing
- the sale of counterfeit or replica branded goods
- animal fighting, cruelty as entertainment, illegal wildlife trade
- doxxing, stalking and targeted harassment of people
- organisations under sanctions, and the evasion of sanctions or export controls
How the check works
Every page passes a free keyword screen. Only a flagged page is inspected once by a model that is asked one question: does the page propagate the category or merely mention it? “Propagates” stops the reading at that page; nothing further is read, stored or generated. The decision to stop is code, on the basis of that inspection.
What you see
The category, the page that triggered it, the matched terms and the reasons, in plain language. No legalese — the person reading it may well be a legitimate owner we got wrong.
Your right to object
One text field, one button. A person reviews the objection and either lifts the stop — the reading continues — or confirms it with a short explanation. If the inspector is unreachable, the page is allowed and logged: we fail open on infrastructure, never on evidence.
Your data, your site
What we keep, how long, and what can become yours.
Retention
- What we read from your site: 30 days, then deleted — for rights holders and no-rights projects alike
- Raw connector captures: a dedicated encrypted bucket with a hard 7-day delete rule and an hourly teardown sweep
- Credentials for a copy: revoked the moment the copy ends
- Health reports of live sites: one sample a day, 365 days
- Your data is never sold and never used to train models
Ownership
- On payment you receive the right to use the generated code, designs and texts as your website for as long as we host it
- Your site runs in a cloud project created for it, at the provider you choose; your account can look inside from day one
- PRO: the code is available to you — full source access and download on request; access to or handover of the cloud project is a separate request, after which the platform removes itself
- Maintenance is a one-year contract per site that renews unless cancelled a month before the end
Found a vulnerability, or believe a site we built infringes your rights? Write to hello@rewynder.com with the address of the site and what you object to. We acknowledge promptly, may take a site offline while we look, and tell the account holder.
The texts these promises refer to
The regulation, the guidelines and the provider documentation behind this page.
- Regulation (EU) 2016/679 (GDPR) The data-protection regulation the platform and every rebuilt site are held to.
- Google Cloud locations The regions a site can be deployed to, and where the platform itself runs.
- Web Content Accessibility Guidelines 2.2 The accessibility level (AA) every rebuilt page is checked against.
- OWASP Top Ten The web security risks the build’s security review covers.
See your website rewound.
Nine designs in minutes, no login. Choose one, and ReWynder rebuilds the whole site — page by page, in a cloud project of its own.
ReWynder is not open to customers yet — both buttons lead to the waiting list today, and we write the moment you can start.