Contacts
Get in touch
Close

Contacts

4900 W Expy 83 Suite 270 U
McAllen, TX 78501

+ 1 (956) 672-0624
+ 1 (956) 560-6639

contact@iwebcreations.net

Privacy Policy

Privacy Policy for iWeb Creations

Last updated: July 6, 2026

iWeb Creations (“iWeb Creations,” “we,” “our,” or “us”) respects privacy and takes data protection seriously. This Privacy Policy explains how we collect, use, disclose, retain, and protect information when you visit https://iwebcreations.net, contact us, purchase from us, use our websites, plugins, automations, software, or AI-powered services, including the iWeb AI Agent and related WordPress AI chat/booking tools.

This Policy is written to be transparent and practical. It does not replace a signed services agreement, statement of work, data processing agreement, or other written contract between iWeb Creations and a client. If a written agreement conflicts with this Policy, the written agreement controls for that client relationship to the extent allowed by law.

Important: No privacy policy can eliminate all legal risk or prevent every claim. This Policy is intended to explain our practices and reduce risk through clear disclosures. It should be reviewed by qualified legal counsel for your specific business, industry, and jurisdictions.

1. Who We Are

iWeb Creations is a web development, software, automation, and AI services company based in McAllen, Texas, USA. We build websites, eCommerce stores, custom business systems, WordPress plugins, AI agents, integrations, and digital tools for businesses.

Contact:
Email: support@iwebcreations.net
Website: https://iwebcreations.net
Location: McAllen, Texas, USA

2. Scope of This Policy

This Policy applies to information collected through:

  • Our website, forms, booking flows, chat widgets, and contact methods.
  • Our client communications, proposals, invoices, support channels, and project management tools.
  • Our plugins, AI agents, automations, custom software, and integrations, when we operate them or process data for support, maintenance, hosting, or configuration.
  • Our marketing, analytics, advertising, and social media interactions.

If you interact with an iWeb AI Agent or iWeb-powered chat tool on a third-party client’s website, that client may be the business or data controller responsible for its own privacy policy, consent notices, and legal compliance. In those situations, iWeb Creations may act as a service provider, processor, contractor, developer, or technical vendor, depending on the arrangement.

3. Information We Collect

3.1 Information You Provide Directly

  • Name, email address, phone number, business name, job title, and contact preferences.
  • Messages, project descriptions, website requirements, support requests, uploaded files, and consultation notes.
  • Billing information, business address, tax-related information, and payment status. Payment card details are processed by third-party payment processors; we do not intentionally store full credit card numbers on our own servers.
  • Account login details if you create an account, purchase a product, use a client portal, or access a software dashboard.
  • Any information you submit through forms, email, chat, SMS, WhatsApp, phone calls, or social media messages.

3.2 Information Collected Automatically

  • IP address, device type, browser type, operating system, approximate location, referring URL, pages viewed, time on site, and interaction data.
  • Cookies, pixels, local storage, analytics identifiers, session data, and similar technologies.
  • Security logs, error logs, server logs, spam prevention signals, and fraud prevention information.

3.3 Information Processed by the iWeb AI Agent

Depending on how an AI agent, chatbot, automation, or booking tool is configured, it may process:

  • Chat messages, prompts, answers, conversation history, timestamps, and session identifiers.
  • Lead details such as name, email, phone number, requested service, preferred appointment time, business details, and location.
  • Business knowledge base content provided by a client, such as FAQs, service descriptions, pricing guidelines, policies, hours, locations, documents, and website content.
  • Booking information, calendar availability, event details, CRM fields, support ticket data, and workflow automation data.
  • Technical metadata needed to operate, secure, troubleshoot, and improve the AI agent.

Please do not submit sensitive personal information to an AI agent unless specifically requested and appropriate for the service. Do not submit Social Security numbers, government IDs, financial account numbers, medical records, health information, passwords, private legal facts, confidential third-party information, or emergency information through an AI chat unless a written agreement and appropriate compliance framework expressly covers that use.

3.4 Information From Third Parties and Integrations

We may receive information from third-party tools that you or a client connect to our services, including:

  • Google Calendar, Google APIs, and other Google services.
  • OpenAI, Anthropic, or other AI model/API providers, depending on configuration.
  • WordPress, WooCommerce, WPForms, Elementor, hosting providers, security tools, analytics tools, CRMs, email platforms, payment processors, Make, Zapier, and similar automation tools.
  • Social media platforms if you interact with our profiles or links.

4. How We Use Information

We use information for legitimate business, contractual, legal, safety, and operational purposes, including to:

  • Respond to inquiries, provide quotes, schedule consultations, and communicate with you.
  • Build, deliver, maintain, secure, troubleshoot, and improve websites, software, AI agents, automations, plugins, and related services.
  • Process orders, payments, subscriptions, invoices, licenses, renewals, refunds, and customer support.
  • Operate AI-powered chat, lead capture, booking, customer support, and workflow automation features.
  • Sync bookings with calendars, CRMs, email tools, and connected business systems when requested.
  • Monitor performance, prevent abuse, detect fraud, protect accounts, debug errors, and maintain security.
  • Send transactional messages, service updates, support responses, appointment confirmations, and administrative notices.
  • Send marketing communications where permitted, with the ability to unsubscribe.
  • Comply with legal obligations, enforce agreements, protect rights, and respond to lawful requests.

5. AI Agent and Automated Interactions

The iWeb AI Agent and related AI tools may generate automated responses based on client-provided content, website content, prior conversation context, tool configuration, and third-party AI models. AI responses may be incomplete, inaccurate, outdated, or not appropriate for every situation. AI output should not be treated as legal, medical, financial, tax, emergency, or professional advice unless a qualified professional separately reviews and approves it.

AI agents are intended to assist with general customer support, lead capture, appointment booking, FAQs, business workflows, and similar uses. Users should independently verify important information before relying on it. Clients using an AI agent on their own website are responsible for reviewing responses, configuring appropriate guardrails, providing accurate business information, and complying with laws that apply to their industry and visitors.

Unless otherwise agreed in writing, iWeb Creations does not guarantee that an AI agent will prevent every incorrect response, missed lead, booking error, unauthorized user statement, or misuse by a visitor. We may use reasonable technical and operational controls, but no AI system is perfect.

6. Google API Services and Limited Use Disclosure

Some iWeb AI Agent and booking features may use Google API Services, including Google Calendar API, to check availability and create, update, or manage calendar events requested through a booking workflow.

  • What may be accessed: calendar availability, calendars, and event information needed to provide booking and synchronization features, depending on the scopes authorized by the user or site owner.
  • What may be stored: OAuth tokens, refresh tokens, connected account identifiers, booking event IDs, event metadata, and sync status data needed to operate the integration. In plugin deployments, tokens may be stored on the client’s own WordPress site or hosting environment.
  • How it is used: only to provide, maintain, troubleshoot, and secure calendar sync, booking, reminder, and related automation features requested by the user or client.
  • What we do not do: we do not sell Google user data, use Google Calendar data for advertising, or use Google user data to train generalized AI models.

Our use and transfer of information received from Google APIs is intended to comply with the Google API Services User Data Policy, including Limited Use requirements, where applicable. Users can revoke Google access through their Google account permissions or by disconnecting the integration in the applicable plugin, account, or website settings.

7. AI Providers and Model Training

Depending on the service configuration, AI requests may be processed by third-party AI providers such as OpenAI, Anthropic, or other model/API providers. We transmit only the information reasonably needed to provide the requested AI functionality, subject to the configuration and client instructions.

We do not knowingly use client private business data, end-user chat transcripts, or Google user data to train public generalized AI models controlled by iWeb Creations. Where providers offer enterprise/API settings that limit training on submitted content, we aim to use those settings when commercially and technically available. Third-party providers process data under their own terms, security commitments, and data processing practices.

8. Cookies, Analytics, Advertising, and Tracking

We and our service providers may use cookies, pixels, analytics scripts, embedded content, and similar technologies to operate the website, remember preferences, secure sessions, measure traffic, improve services, and understand marketing performance.

These technologies may collect device and usage data. You can usually control cookies through your browser settings. Blocking cookies may affect website functionality, checkout, login, forms, analytics, or embedded tools.

We do not intentionally sell personal information for money. If any advertising, analytics, or tracking activity is considered a “sale,” “sharing,” or targeted advertising under an applicable privacy law, you may request opt-out using the contact details below. Where legally required and technically feasible, we will honor valid opt-out preference signals such as Global Privacy Control.

9. How We Share Information

We may share information with:

  • Service providers, processors, contractors, and vendors that help us operate our business and services.
  • Hosting providers, security tools, analytics providers, payment processors, email/SMS providers, CRM tools, automation platforms, calendar providers, AI providers, and software vendors.
  • Clients when we process information on their behalf through an AI agent, website, form, booking flow, CRM, or automation.
  • Professional advisors such as attorneys, accountants, insurers, consultants, and auditors.
  • Authorities, courts, regulators, or third parties when required by law, legal process, security, fraud prevention, or rights protection.
  • Successors in connection with a merger, acquisition, financing, reorganization, sale of assets, or business transfer.

We do not sell personal information in the traditional sense of exchanging it for money. We do not knowingly sell or share personal information of children under 16.

10. Client Responsibilities When Using iWeb AI Agent

If a client deploys the iWeb AI Agent, a chatbot, a booking flow, a form, or automation on the client’s own website, the client is responsible for:

  • Providing accurate business information, policies, pricing, availability, and instructions.
  • Maintaining its own privacy policy, cookie notice, consent flows, terms, and industry-specific legal notices.
  • Obtaining any required consent from its website visitors, customers, employees, or users.
  • Ensuring it has the right to upload, transmit, or process any data it provides to the AI agent.
  • Reviewing AI outputs and monitoring the agent for business, legal, safety, and accuracy issues.
  • Complying with laws applicable to its industry, including healthcare, finance, insurance, employment, education, children’s data, marketing, and consumer protection laws.

Unless expressly agreed in writing, iWeb Creations is not responsible for a client’s failure to provide required notices, obtain required consent, configure the AI agent properly, review AI outputs, or comply with laws that apply to the client’s business.

11. Data Retention

We retain information only as long as reasonably necessary for the purposes described in this Policy, unless a longer period is required or permitted by law, contract, accounting, tax, security, dispute resolution, backup, or legitimate business needs.

Examples:

  • Contact inquiries may be kept as long as needed to respond and maintain business records.
  • Project, support, invoice, and contract records may be kept for business, legal, tax, and warranty purposes.
  • AI chat logs, booking logs, analytics logs, and security logs may be kept for support, training of the specific client configuration, troubleshooting, abuse prevention, and quality review, subject to applicable agreements and settings.
  • Backup copies may persist for a limited period even after deletion from active systems.

When information is no longer needed, we may delete, de-identify, aggregate, or securely archive it.

12. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, and disclosure. Measures may include access controls, encryption where appropriate, secure hosting, authentication, backups, monitoring, least-privilege practices, and vendor review.

No website, server, plugin, API, AI system, email system, or internet transmission is 100% secure. We cannot guarantee absolute security. You are responsible for using strong passwords, protecting your accounts, limiting what you submit, and promptly notifying us of suspected unauthorized access.

13. Payment Processing

Payments may be processed by third-party payment processors such as WooCommerce-connected payment gateways, Stripe, PayPal, banks, or similar providers, depending on the transaction. These providers process payment information under their own terms and privacy policies. We do not intentionally store full credit card numbers on our own servers.

14. SMS, Phone, Email, WhatsApp, and Marketing Communications

If you provide a phone number, email, or messaging contact, we may use it to respond to your inquiry, provide service updates, schedule appointments, send transactional messages, and communicate about your project. Where required, marketing messages will be sent only with appropriate consent or another lawful basis. You may opt out of marketing emails using the unsubscribe link or by contacting us. For SMS, reply STOP where supported or contact us to opt out. Message and data rates may apply.

We do not sell mobile opt-in information or SMS consent data to third parties for their own marketing.

15. Children’s Privacy

Our website and services are intended for businesses and adults. We do not knowingly collect personal information from children under 13. If you believe a child provided personal information to us, contact us and we will take reasonable steps to delete it. Clients using our tools must not configure them to collect children’s data unless they have the legal authority and compliance measures required to do so.

16. Sensitive Information and Regulated Data

Unless we expressly agree in writing, our website, general contact forms, AI agents, and standard services are not designed to collect or process highly sensitive or regulated information such as protected health information under HIPAA, full payment card numbers, Social Security numbers, government IDs, biometric identifiers, precise geolocation, criminal records, or information about children.

If a project requires regulated data, the client must notify us before providing such data and must enter into appropriate written agreements and compliance arrangements. Do not submit sensitive information through ordinary website forms, email, or AI chat unless we have specifically instructed you to do so through an approved secure method.

17. Your Privacy Rights

Depending on where you live and which laws apply, you may have rights to:

  • Request access to personal information we hold about you.
  • Request correction of inaccurate personal information.
  • Request deletion of personal information.
  • Request a copy of personal information in a portable format.
  • Opt out of certain targeted advertising, sale, or sharing of personal information, where applicable.
  • Limit certain uses of sensitive personal information, where applicable.
  • Appeal a decision regarding a privacy rights request, where applicable.
  • Not be discriminated against for exercising privacy rights.

To make a request, email support@iwebcreations.net with the subject line “Privacy Request.” We may need to verify your identity before responding. If your data was collected by one of our clients through an AI agent, website, form, or automation operated for that client, we may direct you to the client or process the request according to the client’s instructions.

18. California, Texas, and Other U.S. State Privacy Notices

Some U.S. state privacy laws, including California privacy law and the Texas Data Privacy and Security Act, may provide specific rights to residents and may require disclosures about categories of personal information, processing purposes, disclosures, sales, sharing, targeted advertising, and consumer request procedures. Whether a specific law applies can depend on thresholds, residency, business size, data volume, revenue, and processing activities.

We provide the following categories of disclosures as a good-faith transparency measure:

  • Identifiers: name, email, phone, business name, address, IP address, account identifiers.
  • Commercial information: purchases, services requested, invoices, subscriptions, project records.
  • Internet or network activity: site visits, device data, log data, cookies, analytics, interaction data.
  • Professional or business information: job title, company, business needs, project requirements.
  • Customer support and communications: emails, forms, chat transcripts, call notes, messages.
  • AI interaction data: prompts, responses, chat logs, booking data, knowledge base content, automation metadata.
  • Geolocation: approximate location derived from IP address; precise geolocation is not intentionally collected unless a specific feature requires it and appropriate notice is provided.
  • Inferences: limited business or service preferences inferred from inquiries, website behavior, or service history.

We disclose these categories to service providers, processors, contractors, clients, professional advisors, and legal authorities for the purposes described in this Policy. We do not knowingly sell personal information for money. If a legally applicable definition treats certain analytics, advertising, or cookie activity as a “sale,” “sharing,” or targeted advertising, you may request opt-out using the contact information above.

19. International Visitors

iWeb Creations is based in the United States. If you access our website or services from outside the United States, your information may be processed in the United States or other countries where we or our vendors operate. Privacy laws in those locations may differ from the laws in your jurisdiction.

If GDPR, UK GDPR, or similar laws apply, we may process personal data based on contract performance, legitimate interests, consent, legal obligations, or other lawful bases. You may have additional rights under those laws, including access, correction, deletion, restriction, objection, portability, and complaint rights with a supervisory authority.

20. Third-Party Websites and Services

Our website and services may link to third-party websites, social platforms, payment processors, plugins, AI providers, calendars, CRMs, and other services. We are not responsible for the privacy, security, content, or practices of third parties. Review their privacy policies before providing information.

21. Data Processing Agreements

For qualifying business clients, iWeb Creations may enter into a written Data Processing Agreement, Business Associate Agreement, confidentiality agreement, or other data terms where legally required and appropriate for the project. Those agreements must be signed separately and cannot be created merely by using the website or sending data to us.

22. Security Incidents

If we become aware of a security incident affecting personal information under our control, we will take reasonable steps to investigate, mitigate, and notify affected parties where required by applicable law. Clients are responsible for notifying their own users, customers, regulators, or affected parties when the client controls the data or the affected system, unless a written agreement states otherwise.

23. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date shows when it was last revised. Changes are effective when posted unless otherwise stated. Your continued use of our website or services after changes are posted means you acknowledge the updated Policy.

24. Contact Us

Questions, privacy requests, or concerns can be sent to:

iWeb Creations
Email: support@iwebcreations.net
Website: https://iwebcreations.net
Location: McAllen, Texas, USA