Privacy Notice

Digital Bridge, Gorey, Co. Wexford, Ireland, is the data controller for personal data processed through Digital Bridge Website Builder. Contact us about privacy at hello@digitalbridge.ie.

• Account data — name, email address, hashed password or Google sign-in identifier.
• Billing data — plan, subscription status, billing period, country and VAT status, and a payment reference. We never see or store your full card number.
• Content data — the websites, pages, text, images, blog posts and product records you create or upload, and the prompts you send to the AI tools.
• Support data — support tickets and messages you send us.
• Technical data — IP address, browser and device information, and server logs generated when you use the service.
• Usage data — feature and AI usage counts used for fair-use limits and diagnostics.

• To provide the service (account, building, hosting, publishing your site) — performance of our contract with you.
• To take payment and manage subscriptions — performance of contract and legal obligation.
• To keep the platform secure and prevent abuse — our legitimate interests.
• To provide support — performance of contract and legitimate interests.
• To send service emails — performance of contract. Marketing email is sent only with your consent, and you can withdraw it at any time.
• To meet accounting and tax obligations — legal obligation.

We use a small number of processors and partners. We do not sell personal data.

• Paddle.com Market Ltd — our Merchant of Record. Paddle processes your payment, billing address, tax status and invoices as a recipient of your personal data, and handles refund and billing enquiries.
• Supabase — database, authentication and file storage hosting.
• Cloudflare — content delivery, DNS and SSL for published sites.
• AI model providers — process the prompts and content you submit to generate copy and images. Prompts are not used to train models on our account settings.
• Email delivery providers — transactional and support email.
• Professional advisors and authorities — where required by law.

Some providers process data outside the EEA. Where they do, transfers are covered by the European Commission's Standard Contractual Clauses or an adequacy decision.

• Account and content data — for as long as your account is open, then 30 days after deletion.
• Billing and tax records — 6 years, as Irish tax law requires.
• Support tickets — 2 years after closure.
• Server and security logs — up to 12 months.

Under the GDPR you have the right to access your data, correct it, erase it, restrict or object to processing, port it to another provider, and withdraw consent where processing relies on consent. Email hello@digitalbridge.ie and we will respond within one month.

You may also complain to the Irish Data Protection Commission (dataprotection.ie) or your local supervisory authority.

We use strictly necessary cookies and local storage to keep you signed in and to secure the service. Our checkout provider sets cookies needed to process a payment. We do not run third-party advertising trackers.

If your published site collects personal data from your own visitors, you are the controller for that data and are responsible for your own privacy notice and lawful basis. We act as your processor for it.