Privacy policy

This policy explains what personal data WeBuyAPI collects when you use this website and its request forms, why, and the rights you have under the EU General Data Protection Regulation (GDPR).

1. Who is responsible

The data controller is IntusLab.io (WeBuyAPI), Coastal Highway, Lewes, Delaware 19958, United States. Company registration number: [to be completed]. Contact for any privacy question: hello@intuslab.io.

2. What we collect

• Request forms (sell, buy, make an offer, company enquiry): your name, email, company, the platform, credit balance or volume, expiry, budget, timeline and any notes you write.
• Chat helper: the questions you type. Questions the helper cannot answer are saved together with its reply so our team can follow up.
• Your device: your light/dark theme choice is stored in your browser only. We do not use advertising or tracking cookies.

Please do not send account passwords, API keys or payment card details through the forms or the chat.

3. Why we use it and legal basis

• To answer your request and prepare a possible deal — steps taken at your request before a contract (Art. 6(1)(b) GDPR).
• To keep records of enquiries and protect against fraud — our legitimate interest (Art. 6(1)(f) GDPR).
• To meet legal, accounting and tax obligations once a deal is completed (Art. 6(1)(c) GDPR).

We do not sell your data and do not use it for automated decisions with legal effect.

4. Who processes it

Your data is stored with our hosting and database provider, and chat questions are processed by an AI service provider to generate answers. These providers act on our instructions. Some may process data outside the European Economic Area; where they do, transfers rely on safeguards such as the European Commission's standard contractual clauses.

5. How long we keep it

Requests that do not lead to a deal are deleted within 24 months of our last contact. Records of completed deals are kept for as long as accounting and tax law requires.

6. Your rights

You can ask to access, correct, delete, restrict or receive a copy of your data, and object to its use, by writing to hello@intuslab.io. We reply within one month. You may also complain to your national data protection authority (in France, the CNIL).

7. Changes

We may update this policy; the date at the top shows the latest version.