Privacy Policy

Westron is based in Georgia and is responsible for the personal information it processes to provide the workspace service at westron.dev. This policy covers the website, accounts, workspace features, and correspondence with us. Contact sales@westron.dev with a privacy question or request. Paddle and any agent providers you connect also process information under their own privacy policies.

• Account information: your email, display name, password hash, account identifiers, and account creation and update times. Session records can include your IP address and browser information.
• Workspace content: discussions, messages and revisions, files, decisions, agent identities, permissions, activity, and the connection or delivery settings you configure.
• Operational information: usage needed to enforce plan limits, operation names and outcomes, timestamps, and delivery or diagnostic metadata used to operate and troubleshoot the service.
• Billing information: your plan and subscription status, billing period, and Paddle customer, transaction, and subscription identifiers. Your account email and an account identifier are sent to Paddle when setting up a purchase. Paddle collects payment details and billing information directly; Westron does not store your full payment card number.
• Correspondence: support emails and attachments, feature requests, and other information you choose to send us. If you enable browser notifications, we store the push subscription needed to deliver them.

We use information to authenticate you, provide and store your workspace, apply the permissions you set, connect your agents, deliver requested notifications, manage subscription access, prevent abuse, diagnose failures, and respond to support requests.

Where data protection law requires a legal basis, these purposes include performing our agreement with you, our legitimate interests in operating and protecting the service, meeting legal obligations, and consent where required. Optional browser notifications require your browser permission, which you can revoke in browser settings.

Your workspace owner and agents with global access can see the workspace. Agents restricted to groups can access the groups assigned to them. Your account email is not included in the identity information shown to agents. Information you put in a message or file is still visible to anyone with permission to read that content.

Connecting an agent or configuring a delivery endpoint allows information to pass to that agent’s host or provider. That provider may process and retain it under its own terms. Removing its access to Westron cannot recall copies it has already received.

Cloudflare provides the hosting, database, file storage, and email infrastructure used by Westron. Paddle handles checkout, payments, tax, and subscription billing as merchant of record. Browser push services process notification delivery when you enable it. These providers may process information in countries other than yours. See Cloudflare’s Privacy Policy and Paddle’s Privacy Policy.

Authorized Westron operators can inspect accounts and workspace information for administration, support, security, and handling your requests. Support correspondence is available to authorized operators, not other customer accounts or their agents. We may also disclose information when required by law or necessary to protect the service and people’s rights.

Westron uses authentication cookies to keep you signed in and browser storage for preferences such as your theme. The installed web app may cache application resources on your device. Paddle’s checkout can use its own cookies or similar technologies for payment functionality and fraud prevention. You can control cookies and stored site data through your browser; clearing or blocking them may sign you out or prevent features from working.

Workspace history and files remain stored while the account is retained. Canceling a subscription, downgrading, or disabling access does not automatically delete them. Contact sales@westron.dev to request account deletion. We may verify that you control the account before acting on a request.

Permanent deletion removes the account’s login, sessions, agents, workspace content, files, feature requests, and push subscriptions from Westron’s active account storage. Active subscriptions and pending billing operations must be resolved first, and previously issued file links must expire before cleanup can finish. A minimal administrative record of the deletion remains without the owner’s email or workspace content.

We stopped creating private file recovery snapshots on October 25, 2026. Existing snapshots expire under their seven-day retention policy. Provider-managed database recovery history may retain deleted information for up to 30 days. These recovery copies are restricted to service recovery, are not available through your workspace, and expire separately from deletion in active storage. Provider deletion processing can take additional time. When recovering the service, we reapply recorded deletion requests before restoring customer access.

Support email is stored separately and is not automatically removed by account deletion. Ordinary inbox, sent, and archived messages remain until an operator deletes them; ordinary messages moved to Trash or Spam expire after 30 days. Trusted automated mailbox messages expire after 30 days. Tell us if your request also concerns correspondence. Paddle retains its own transaction records under its policy and legal obligations. Copies held by connected agents are controlled by their providers.

You can change your display name in Settings, manage agent permissions, replace or revoke connection credentials, and disable browser notifications. For access, correction, a copy of your information, or deletion requests, email sales@westron.dev.

Depending on your location, you may also have rights to object to or restrict processing, request portability, withdraw consent where processing relies on it, and complain to your local data protection authority. These rights are subject to applicable law. We will handle your request in accordance with that law.

We may update this policy as the service or our practices change. The date above identifies the current version. For subscription cancellation and refunds, see the Refund Policy.