Privacy Policy

This Privacy Policy explains how Koalatech Pte. Ltd. ("Koalatech", "we", "us", or "our") collects, uses, shares, and protects personal information in connection with WebCabin, our AI marketing platform available at getwebcabin.com and app.getwebcabin.com (the "Service").

WebCabin is a product operated by Koalatech Pte. Ltd., a company registered in Singapore. By using the Service, you agree to the practices described in this policy.

1. Information we collect

Account information. When you register, we collect your name, email address, password (stored hashed), and billing details processed by our payment provider.

Content you create. Pages, copy, images, lead forms, knowledge base documents, and other material you create or upload to the Service.

Leads and visitor data. Information submitted by visitors to pages you publish (for example, names, emails, and phone numbers entered into your lead forms), plus privacy-conscious analytics such as pageviews, referrers, device type, and approximate location. We hash visitor IP addresses and do not store them in raw form.

Meta (Facebook and Instagram) integration data. If you connect a Meta Ads account, we receive and store information you authorize through Meta, such as your ad account details, access tokens (encrypted), campaign and performance metrics, and pixel event data. We use this data solely to provide the advertising features you request.

Usage information. Logs, feature usage, and technical data about how you interact with the Service.

2. How we use information

• Provide, operate, and maintain the Service
• Generate pages, copy, creatives, and other AI outputs you request
• Connect to and manage your Meta Ads account when you authorize it
• Process payments and manage your subscription
• Send service-related communications and lead notifications
• Monitor, secure, and improve the Service
• Comply with legal obligations and enforce our terms

3. Legal bases for processing

Where the GDPR or similar laws apply, we process personal data on the basis of: performance of our contract with you; your consent (which you may withdraw at any time); our legitimate interests in operating and improving the Service; and compliance with legal obligations.

4. How we share information

We do not sell your personal information. We share data only with trusted service providers ("subprocessors") who help us run the Service, under contracts that require them to protect it. These providers fall into categories such as:

• AI model, embedding, and content-generation providers
• Cloud hosting, storage, and content delivery providers
• Payment processing providers
• Advertising platforms you choose to connect, such as Meta
• Email and communication providers
• Analytics, search, and other operational tools used to deliver the Service

A current list of our subprocessors is available on request by contacting us. We may also disclose information if required by law, to protect our rights, or in connection with a business transfer such as a merger or acquisition.

5. Meta Platform data

Our use and transfer of information received from Meta APIs adheres to the Meta Platform Terms and Developer Policies. We access Meta data only with your authorization, use it solely to deliver the advertising features you request, store access tokens in encrypted form, and delete this data when you disconnect your account or request deletion. We do not use Meta data for any purpose unrelated to the features you have enabled.

6. Data retention

We retain personal information for as long as your account is active or as needed to provide the Service. After account closure, we delete or anonymize personal data within a reasonable period, except where we must retain it to meet legal, tax, or accounting obligations.

7. Your rights and choices

Depending on your location, you may have the right to access, correct, export, restrict, or delete your personal data, and to object to certain processing. To exercise these rights, contact us at support@getwebcabin.com.

To request deletion of your data, see our Data Deletion Instructions.

8. Security

We use technical and organizational measures to protect your data, including encryption in transit, encryption of sensitive fields such as access tokens at the application layer, and strict tenant isolation so each customer's data is scoped to their account. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. International transfers

We operate globally and may process and store data in countries other than your own, including Singapore and the United States. Where required, we rely on appropriate safeguards such as standard contractual clauses for these transfers.

10. Children's privacy

The Service is not directed to individuals under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us information, please contact us so we can delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide additional notice where appropriate.

12. Contact us

If you have questions about this policy or our data practices, or to reach our data protection contact, contact: