Privacy Policy

1. Data controller

The controller of your personal data is:

2. Data we collect

2.1 Data you provide directly

• Registration data: email address, business name, sector, city and contact details you enter when creating your website.
• Payment data: processed directly by Stripe. Platinium Labs LLC does not store bank card data.
• Affiliate programme data: email, name, IBAN or PayPal to manage commissions.
• Website content: texts, service descriptions and business information you enter to generate your website.

2.2 Automatically collected data

• Usage data: pages visited, session time, features used.
• Technical data: IP address, browser type, operating system, language.
• Cookies: for service operation and usage analysis (see Cookie Policy).

3. Purposes and legal basis

4. Third parties and international transfers

To provide the service we use the following providers, who may process data on your behalf:

We do not sell or share your personal data with third parties for commercial purposes.

MCP Channel · AI Assistant Connectors

Data collected through this channel

When a website is generated via a compatible AI assistant (Claude, ChatGPT, Gemini, Copilot, or others), the assistant passes us the following data provided by the user:

• Business: business name, city, and industry
• Services: list of products or services offered by the business
• Customisation: visual style and language of the website
• Business contact: phone number (required); contact email and business hours (optional)
• User identity: not requested at any point. This data is provided by the user to the AI assistant, not directly to our site

Anonymous generation

No account is created and no identification is required to generate a website. The result is stored temporarily against an internal identifier. Personal data (email) is only collected if the user decides to purchase, at which point Stripe handles the payment.

Retention of MCP-generated websites

Websites generated through this channel that do not result in a purchase are automatically deleted 7 days after creation.

Third parties involved in this channel

• AI assistant provider: the assistant used by the user (Anthropic/Claude, OpenAI/ChatGPT, Google/Gemini, Microsoft/Copilot…) operates outside our control and is governed by its own privacy policy
• OpenRouter: we use it as an inference service for web content generation, acting under our instructions
• Supabase: stores the generated website and order metadata
• Stripe: handles payment if the user decides to purchase and collects the necessary billing information

Technical session data

Solely for the purpose of enforcing usage limits (rate limiting) and preventing service abuse, we log the MCP connector session identifier and the client IP address. These records are retained for 24 hours and are not used for commercial or identification purposes.

5. Data retention

• Active account data: throughout the contract and up to 3 years after cancellation.
• Billing data: 7 years due to tax and accounting obligations.
• Affiliate data: during the relationship and up to 3 years after for commission management and audit.
• Analytics data: maximum 26 months.
• Cookies: as specified in the Cookie Policy.

6. Your rights

As a European user, you have the following rights under the GDPR:

• Access: obtain confirmation of whether we process your data and a copy of it.
• Rectification: correct inaccurate or incomplete data.
• Erasure ("right to be forgotten"): request deletion of your data when it is no longer necessary.
• Restriction: request restriction of processing in certain circumstances.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interest or for direct marketing.
• Withdrawal of consent: at any time, without affecting the lawfulness of prior processing.

7. Security

We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or destruction, including encryption in transit (HTTPS/TLS), secure magic link authentication, and restricted data access by our providers.

8. Minors

Webs by Platinium is aimed exclusively at businesses and professionals. We do not knowingly collect data from anyone under 16. If we detect we have collected data from a minor, we will delete it immediately.

9. Changes to this policy

We may update this policy occasionally. When we make material changes, we will notify you by email or a prominent notice in the service before the changes take effect.

10. Contact

For any questions about this policy or the processing of your personal data: