Privacy Policy
Last updated: 4 July 2026
1. Who we are
interwebs.ai is operated by INTERWEBS LTD (Company No. 17302734), registered office: Apt 1 Llwyn Onn Hall, Abenbury, Wrexham, LL13 0NY (“we”, “us”). We are the data controller for the personal data described here. Questions or requests: support@interwebs.ai.
2. What we collect
- Account data — your email address and a password. Passwords are never stored in readable form: we keep only a one-way cryptographic hash (scrypt).
- Billing and usage records — wallet top-ups, per-request usage charges and payouts, recorded in an append-only ledger so your spend is exact and auditable. We do notsee or store your card number: payments are processed by Stripe on Stripe’s own pages, and we receive only a confirmation of the amount paid.
- Content you submit — prompts and inputs you send for processing, and the outputs (text, images, video, reports) generated for you, which we store so you can retrieve your results.
- API keys and sessions — stored only as one-way hashes.
- Technical data — standard server logs (IP address, request time, status) used for security and reliability.
3. Cookies
We set a single, strictly necessary session cookie (iw_session, valid 30 days) so you stay logged in. We use no analytics, advertising or tracking cookies, and no third-party cookies on our pages. When you top up your wallet you are taken to Stripe’s checkout, which operates under Stripe’s privacy policy.
4. How we use your data
- To provide the service: route your requests to AI model providers, deliver results, and meter your wallet (performance of a contract).
- To keep accurate financial records (legal obligation).
- To prevent fraud and abuse and keep the platform secure (legitimate interest).
- To respond to your support requests (performance of a contract).
We do not sell personal data, and we do not use your data for advertising.
5. Who we share data with
- AI model providers — the prompt/input for a request is sent to the provider that serves it (for example OpenAI, Anthropic, DeepSeek, Zhipu, Replicate or an aggregator such as aivideoapi, depending on the model you choose), solely to generate your result. Providers may process data outside the UK.
- Stripe — payment processing and payouts.
- Infrastructure providers — the hosting on which the service runs.
- Authorities — only where the law requires it.
6. How long we keep it
- Account data: for as long as your account is open.
- Financial and ledger records: 6 years, as required by UK tax law.
- Prompts and generated outputs: until you delete them or close your account, except records we must retain.
- Server logs: rotated on a short cycle.
7. Your rights
Under UK GDPR you can ask us for access to, correction of, deletion of, or a portable copy of your personal data, and you can object to or ask us to restrict certain processing. Email support@interwebs.aiand we will respond within one month. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk).
8. Security
All traffic is encrypted in transit (TLS). Passwords, API keys and session tokens are stored only as one-way hashes. Billing runs on an append-only ledger with least-privilege database access, so records cannot be silently altered.
9. Changes
If we make material changes to this policy we will update this page and the date above.