Webaes LLC ("Webaes," "we," "us," or "our") operates https://www.webaes.com, https://motionads.webaes.com, and https://takeover.webaes.com (together, the "Site") and provides design, development, e-commerce, SEO, content, video, and managed announcement-banner services (the "Services").
This policy explains what information we collect, why, who we share it with, and what you can ask us to do about it. It applies to the Site and to the Services. It does not apply to the websites or stores we build for our clients — those are governed by our clients' own privacy policies.
Webaes LLC is a Colorado limited liability company located at 10799 W Alameda Ave # 151178, Lakewood, CO 80215.
01Two different roles
We handle information in two different capacities, and the difference matters:
When we decide. For our own Site visitors, prospects, and clients, we decide what to collect and why. This policy governs that information.
When our clients decide. In the course of delivering Services, we access information that belongs to our clients — their customer lists, order data, store analytics, CRM records, form submissions, and similar. We handle that information only on our clients' instructions and only to perform the Services. We do not use it for our own purposes, we do not sell it, and we do not combine it with anyone else's data. Our client's privacy policy — not this one — governs that information, and individuals with questions about it should contact the business they bought from.
When a client's information passes through our systems, it is subject to the same vendors and safeguards described in Sections 6 and 8 below.
02What we collect
From Site visitors
- Email address, if you subscribe to our newsletter or contact us
- Name, business name, email, and anything else you choose to tell us when you book a call or send an inquiry
- Usage data collected automatically: IP address, browser type and version, device identifiers, pages visited, time and date of visit, time on page, referring URL, and campaign parameters (utm_source, utm_campaign, utm_content)
- Cookies and similar technologies — see Section 5
From clients
- Business contact and billing details
- Materials you provide for a project: brand assets, product photography, copy, credentials, and content
- Access we need to do the work: platform accounts, hosting, analytics, ad accounts, and similar
From Webaes Motion clients
- Product photography, brand assets, and creative briefs you submit for video and still production
03What we do not collect
- Payment card numbers. Payments run through Stripe. We never see or store card details.
- Sensitive categories. We do not seek out or knowingly collect Social Security numbers, government IDs, health information, precise geolocation, biometric data, or information about race, religion, sexual orientation, or political affiliation.
- Information from children. See Section 9.
04How we use it
- To provide, maintain, and improve the Site and Services
- To respond to inquiries, schedule calls, and provide support
- To send invoices, receipts, and account or subscription notices
- To send newsletters and occasional updates about our work — you can unsubscribe from any of these at any time using the link in the email
- To understand how the Site is used and improve it
- To detect, prevent, and address technical issues, fraud, and abuse
- To perform our contracts with clients and enforce our rights, including billing and collection
- To comply with legal obligations
We do not sell your personal information. We do not rent it. We do not share it with third parties for their own marketing.
05Cookies and tracking
We use a small number of cookies and similar technologies to run the Site and understand how it's used. We do not use them for advertising, remarketing, or cross-site tracking.
Analytics we use
- Google Analytics 4 helps us see which pages are visited and how people move through the Site. It loads only on our production site, and it is governed by consent: until you accept, it is set to store nothing on your device, and it never receives advertising or ad-personalization signals.
- Vercel Web Analytics gives us privacy-friendly, aggregate traffic counts. It does not use cookies and does not identify you.
We do not use Google Ads, Meta/Facebook Pixel, or any other advertising or remarketing tag, and we do not use a Google Tag Manager container. If you inspect network requests you will see a script loaded from googletagmanager.com — that host is where Google serves the Google Analytics 4 library itself, and no tag-manager container is configured.
The cookie banner
When you first visit, a banner offers Accept or Decline. If you accept, Google Analytics may set analytics cookies (such as _ga). If you decline, no analytics cookies are set and Google Analytics records only anonymous, cookieless measurements. Your choice is remembered for one year and applies across webaes.com and motionads.webaes.com. It does not apply to takeover.webaes.com, which loads no analytics of any kind and sets no cookies, so there is nothing there to consent to. You can change it any time by clearing the webaes-cookie-consent cookie for this site, and you can install Google's browser opt-out add-on at https://tools.google.com/dlpage/gaoptout.
Cookies set by features you use
If you book a call, our scheduling is provided by Cal.com through an embedded calendar, and Cal.com may set its own cookies within that calendar. See Section 6 for the vendors involved.
Do Not Track
We do not respond to Do Not Track or Global Privacy Control browser signals, because there is no consistent industry standard for interpreting them.
06Who we share it with
We use the following vendors to run our business. Each receives only what it needs to do its job, and each is bound by its own agreement with us.
| Vendor | What it does | What it receives |
|---|---|---|
| Zoho Corporation | Business email | Email addresses, message contents, contact records, and any client materials sent to or from our mailbox |
| Tally | Intake forms after purchase | The business details you submit after purchase — for Takeover, your website address, brand colours, and who to contact about banner copy; for Webaes Motion, your product photography, brand assets, and creative brief |
| Vercel Edge Config | Storage for Takeover banner campaigns | Your website address and the banner content we schedule for you — the wording, colours, link, and start and end dates. No information about your visitors is stored here. |
| Buttondown | Newsletter delivery | Your email address and subscription status, if you subscribe |
| Stripe, Inc. | Payments and invoicing | Billing details and transaction data. Card numbers go directly to Stripe; we never receive or store them. |
| Cal.com | Call scheduling | Name, email, and anything you enter when booking. Our booking page uses an embedded Cal.com calendar, so Cal.com may set its own cookies there. |
| Vercel Inc. | Website hosting and traffic analytics | Server logs, IP addresses, request data. Vercel's analytics are cookieless and don't identify you. |
| Google LLC | Website analytics | Usage data, subject to your cookie choice — see Section 5 |
| Tally | Client intake for Webaes Motion | Contact details, creative briefs, and the product photography and brand assets you submit |
| Higgsfield | AI video and still production for Webaes Motion | Product photography and brand assets. You don't upload to Higgsfield through our Site — we send your materials there ourselves as part of producing your work. |
| Anthropic (Claude) | AI assistance for development, content, and analysis | Business and project information we work with, which may include client contact details and materials, where we use Claude to help deliver the Services. We don't submit information a client has marked confidential without asking them first. |
We may also disclose information:
- To comply with law, legal process, or valid requests from public authorities
- To enforce our agreements or protect our rights, property, or safety
- In connection with a merger, acquisition, or sale of assets, in which case we will note it on this page
- With your consent
Client logos and work. We may display a client's name, logo, and the work we did for them on our Site and social channels, and we may publish anonymized performance results — never named, never attributed, never in a form that identifies a client or their customers. Any client can opt out of this by asking, or by requesting an NDA.
07How long we keep it
We keep personal information only as long as we need it for the purposes in this policy, or as long as the law requires.
One thing worth being direct about: our business email runs on Zoho. Under our agreement with Zoho, when a Zoho service is terminated, data is deleted from Zoho's primary servers at the next routine cleanup cycle, which runs once every six months, and from Zoho's backups three months after that. So anything that has passed through our email may persist in Zoho's systems for up to roughly nine months after we've deleted it on our end. We can delete our copies faster, and will on request, but we'd rather tell you what we actually control than promise a timeline we don't.
Newsletter subscriptions are held by Buttondown until you unsubscribe. Usage data is generally kept for a shorter period, except where it's used for security or where the law requires longer.
08Security
We use reasonable technical and organizational measures to protect information: encrypted transport, access controls, two-factor authentication on business-critical accounts, and vendors who maintain recognized security programs.
No method of transmission or storage is completely secure. We can't and don't guarantee absolute security.
09Children
The Site and Services are not directed to anyone under 18, and we don't knowingly collect information from anyone under 18. In accordance with the Children's Online Privacy Protection Act, if we learn we've collected personal information from a child under 13 without verifiable parental consent, we'll delete it as soon as reasonably practical. If you believe a child has provided us information, email hello@webaes.com.
10Your choices
You can, at any time:
- Unsubscribe from our emails using the link in any message
- Ask what we have about you
- Ask us to correct anything inaccurate
- Ask us to delete it, subject to Section 7 and to records we're required to keep
Email hello@webaes.com. We'll respond within 30 days. We may ask you to verify your identity first. We won't treat you differently for asking.
If your request concerns data we hold on behalf of a client — for example, if you're a customer of a store we built — we'll refer you to that business, because it's their data and their decision.
11California residents
This policy is provided in accordance with the California Online Privacy Protection Act. As required:
- You can visit our Site without telling us who you are
- This policy is linked from every page of our Site, and the link contains the word "Privacy"
- We'll post any changes to this policy on this page and update the effective date above
- You can update or correct your information by emailing hello@webaes.com
- Our response to Do Not Track signals is described in Section 5
12Where your data goes
Webaes is based in the United States and our vendors process data in the United States. If you're outside the US and contact us, your information will be processed in the US.
13Links to other sites
Our Site links to sites we don't control, including our clients' stores. We're not responsible for their privacy practices. Read their policies.
14Changes
We may update this policy. We'll post the new version here and update the effective date. Material changes will be noted on the Site or by email before they take effect. Prior versions are available on request.
15The Takeover script on your website
If you subscribe to Webaes Takeover, we place a small script on your website. This section describes exactly what it does, because it runs on your property and in front of your visitors.
What it collects about your visitors: nothing. The script sets no cookies. It writes nothing to local storage or session storage. It does not read anything that identifies a visitor — no advertising identifiers, no device fingerprinting, no referrer or user-agent inspection, no analytics of any kind. If a visitor dismisses a banner, that dismissal is deliberately not remembered, because remembering it would mean storing something on their device.
The one request it makes. The script asks our server which banner, if any, you currently have scheduled. That request carries your website's identifier and nothing else, and it is sent with credentials explicitly omitted, so it cannot carry cookies — not ours, and not any your own site has set. The response sets no cookies.
What our server sees. Like any request to any web server, that request arrives with the visitor's IP address and browser user-agent, because that is how the internet works and we cannot receive a request without them. We do not log, store, profile, or retain them, and we do not use them to identify or track anyone. Our server logs record errors, not visitor requests.
What we do store. The banner content we schedule for you — the wording, colours, link, and start and end dates — together with your website address. That is information about your business, not about your visitors. It is held in Vercel Edge Config, listed in Section 6.
Your visitors are your responsibility. Your own privacy policy governs your website. Because the script collects nothing about your visitors and sets no cookies, it does not by itself require you to obtain consent or to add a cookie banner — but you know your obligations and your jurisdiction better than we do, and nothing here is legal advice about your site.
16Contact
Webaes LLC
10799 W Alameda Ave # 151178
Lakewood, CO 80215
hello@webaes.com