§1Who is responsible
Web to Table is operated by Ali Asad, an individual business based in Pakistan. We are the controller of the personal data on this page. Contact for privacy: support@webtotable.app.
§2What we collect
| Data | What it is |
|---|---|
| Waitlist | Your email, the ask you typed, and the page you joined from. |
| Account | Your email and your name, from the sign-in provider you choose. |
| Billing records | Plan, payments, refunds and country, from Paddle. We never receive card numbers. |
| Tables | The asks you send, the tables we deliver, and the source page and quote for each cell. |
| Connected app data | Only the sheets, pages, records or lists that you choose in an app you connect. |
| Usage and logs | Runs, credits spent, errors, IP address and browser type. We use these for security, billing and debugging. |
| Support | The emails you send us and our replies. |
§3Why we use it
- To provide the service: run your research, deliver tables, check them again and send alerts. (Legal basis: contract.)
- To bill you and keep financial records. (Legal basis: contract and legal duty.)
- To keep the service safe and stop abuse. (Legal basis: legitimate interest.)
- To improve how the agent researches. We learn from runs, for example which sources work for a kind of ask. We never sell your data and we never use it for ads. (Legal basis: legitimate interest.)
- To send you your waitlist invite and important service emails. (Legal basis: consent and contract.)
§4Who processes it for us
We use these kinds of providers. Each one gets only the data it needs for its job.
| Kind | Job |
|---|---|
| Hosting and database | Run the website, the app and store your account and tables (for example Vercel and Convex). |
| Sign-in | Manage accounts and sign-in (for example Clerk). |
| Payments | Take payments, add tax and handle refunds (Paddle, our Merchant of Record). |
| Email delivery | Send invites, alerts and receipts (for example Google Workspace and Resend). |
| AI model providers | Process your asks and the text of web pages to build tables. |
| Research tools | Run searches, read pages and run research code in isolated computers. |
| App connectors | Connect to Google Sheets, Notion, Airtable, HubSpot and Slack for you, when you ask. |
| Browser sessions | Host the browser where you sign in to a website and watch the agent work. |
Email us for the current list of providers.
§5Connected apps
- We read only the data that you choose.
- We add columns and rows. We never delete your data.
- We write to an app only after you approve the change.
- Our integration provider holds workspace access tokens; we encrypt your own API keys.
- You can disconnect an app at any time. Then we stop reading from it and delete its tokens.
- Browser sign-in sessions are read by default; we ask before any change. You can end a session at any time.
§6Data about other people
Tables can hold data about people that is publicly listed, such as a business email on a company website. We collect only publicly listed contact details. We do not collect sensitive data such as health, religion or political opinions. If you find your data in a table and want it removed, email us.
§7How long we keep it
| Data | Kept for |
|---|---|
| Account, tables and connected app data | While your account is open. |
| Run logs and run files | 90 days. |
| Usage records | While your account is open. |
| Waitlist entry | Until we send your invite, or until you ask us to remove it. |
| Billing records | As long as tax law requires. |
When you ask us to delete your account, we delete its data within 30 days. Backups expire on their normal cycle.
§8Your rights
You can ask us to:
- show you the data we hold about you;
- correct it;
- delete it;
- give you a copy in a format a machine can read;
- stop using it for a purpose you object to.
Email support@webtotable.app. We answer within 30 days. We do not charge for this.
If you live in the EU or the UK, you can also complain to your local data protection authority. If you live in California, you have the right to know, to delete, to correct and to not be discriminated against for using these rights. We do not sell or share personal data for ads.
§9International transfers
We operate from Pakistan and our providers process data in other countries, mainly the United States. When data leaves the EU or the UK, we rely on the safeguards our providers offer, such as Standard Contractual Clauses.
§10Cookies
This website uses only the cookies it needs to work, such as sign-in. We use no ad cookies and no tracking cookies.
§11Security
We encrypt data in transit. Our integration provider holds workspace access tokens; we encrypt your own API keys. Research runs in isolated computers. No system is perfectly safe. If a breach affects your data, we tell you without delay.
§12Children
The service is not for people under 16. We do not knowingly collect data from them.
§13Changes
We change this policy when the service changes. The date at the top of this page shows the last change. We tell you about important changes by email. Our terms of service also apply.