Privacy Policy

Last Updated: October 2026

1. Introduction

WebWatch is a SaaS platform operated by BEEM Agency Ltd ("we," "us," "our"), a company registered in England and Wales. WebWatch helps photographers and content creators track the online use of their images.

This Privacy Policy explains how we collect, use, and protect your personal information and uploaded images.

We are committed to transparency and compliance with the UK Data Protection Act 2018, EU General Data Protection Regulation (GDPR), and California Consumer Privacy Act (CCPA).

Company Details

Operator: BEEM Agency Ltd
Company Registration Number: 09371081
Registered Office: 209c Bravington Road, London, England, W9 3AR

2. What Information We Collect

A. Account Information

Email address
Name
Payment information (processed securely via our payment processor; we do not store full credit card numbers)
Optional: Profile information, photographer credentials

B. Images & Metadata

Images you upload for tracking (JPEG, PNG, WebP)
Automatically extracted IPTC metadata — photographer name, date created, keywords, copyright information, and location as entered by the photographer (e.g. city, sublocation). We do not collect GPS coordinates — precise geolocation is deliberately never extracted from your images, by design.
Image fingerprints and perceptual hashes used for matching

C. Usage Data

Scan history and match results
Features used, frequency of use
Device type, browser, IP address (for security and analytics only)
Time of access

D. Communication Data

Support emails and tickets
Notification preferences
Feedback and feature requests

3. How We Use Your Information

Your Images & Metadata

To scan the web for unauthorised use of your images
To generate match results and analytics
To provide evidence snapshots and CSV exports

We do NOT:

Sell your images
License your images to third parties
Use your images for marketing or training AI models
Share your images with other users
Modify or edit your images

Account & Payment Information

To create and manage your account
To process subscriptions and payments
To send service updates and billing notices
To comply with legal and tax obligations

Usage Data

To improve platform performance and user experience
To detect and prevent fraud or abuse
For anonymized analytics (you cannot be identified)
To send product updates relevant to your tier

Legal Basis (GDPR)

Contractual performance: providing the service
Legitimate interests: preventing fraud, improving the platform
Legal compliance: tax and regulatory obligations
Consent: for marketing communications (which you can opt out of anytime)

4. Data Security

All images and personal data are encrypted in transit (TLS 1.2+) and at rest (AES-256)
Servers and infrastructure are hosted on Vercel (application hosting), Neon (database), and Cloudflare R2 (image storage)
Access to your account requires a secure password; we recommend strong, unique passwords
We conduct regular security reviews
We do not store full payment card details; payment processing is handled by our PCI-DSS compliant payment processor

You are responsible for:

Keeping your password confidential
Notifying us immediately of unauthorised access

5. Data Retention

We retain your account data and uploaded images for as long as your account remains active, so the service can keep working for you.

If you close your account or request deletion:

We will delete your images, scan history, and match results within 30 days of a verified request
We will delete your account and profile information within 30 days of a verified request, except where we are required to retain certain records by law (see "Legal/Compliance Data" below)

Legal/Compliance Data

Payment records: retained for 7 years (UK tax requirement)
Abuse/fraud records: retained as long as necessary to protect the platform

To request deletion of your account or data, email privacy@getweb.watch.

6. Sharing Your Data

We do NOT sell, rent, or trade your personal data.

We MAY share data only when:

Third-Party Service Providers (under data processing agreements)

Payment processing (Stripe)
Email delivery (Resend)
Cloud infrastructure (Vercel, Neon, Cloudflare)
Image matching (a third-party web image search service)
Analytics (anonymized data only)

Legal Requirements

Law enforcement or court orders (we will notify you where legally permitted)
To protect our legal rights or prevent fraud

Business Transfer

In the event of merger, acquisition, sale of assets, or incorporation of WebWatch as a separate entity, your data may be transferred (we will notify you)

7. Your Rights

Under GDPR & CCPA, you have the right to:

Access: Request a copy of all data we hold about you
Rectification: Correct inaccurate information
Erasure: Request deletion of your data (subject to legal retention requirements)
Portability: Request an export of your image scan and match data in a structured, portable format (CSV)
Withdraw Consent: Opt out of marketing communications anytime
Restrict Processing: Limit how we use your data
Lodge a Complaint: Contact your local data protection authority

To exercise these rights, email: privacy@getweb.watch

We will respond within 30 days (or as required by law).

8. Cookies & Tracking

Essential cookies — always on, because the service cannot work without them:

Session management (keeping you logged in)
Security (preventing unauthorised access)
Remembering your cookie choice (a cookie named ww_consent)

Analytics cookies — only if you choose "Accept analytics". If you accept, we use Google Analytics, which sets cookies (named _ga and _ga_ followed by an identifier), and PostHog (a product-analytics service hosted in the EU), which stores a small identifier in your browser (named ph_ followed by our project key, in a cookie and local storage). They count visits and show which pages are used and how features are used, so we can improve WebWatch. If you are signed in, these events are linked to your account's internal ID (a random identifier, not your name or email address), so we can see how features are used over time. We do not record your screen or what you type into forms. We do not send your name or email address to either service, and we switch off Google's advertising features. If you choose "No thanks", neither is loaded and no analytics cookies or identifiers are set.

You can change your choice at any time with the "Cookie settings" link at the bottom of our pages. Declining or withdrawing consent removes the analytics cookies and identifiers set on this site.

Our separate page-view counter (Vercel Web Analytics) is configured not to use cookies.

We do NOT use cookies for advertising.

You can also disable cookies in your browser settings, but some features (like staying logged in) may not work properly.

9. Third-Party Services

Our platform integrates with:

A third-party web image search service — your uploaded image is sent to it so it can find web pages that show the same or a similar picture (image scanning and matching)
Google Analytics and PostHog — website and product usage statistics, only if you accept analytics cookies (see section 8)
Public domain registry data (RDAP/WHOIS) — we query publicly available domain registration data directly from ICANN-accredited registries to help identify who operates a website; this is a free, standardized public protocol, not a paid third-party data broker

These services have their own privacy policies where applicable. If you would like to know which provider we use for a service, email us and we will tell you.

10. Children's Privacy

WebWatch is not intended for users under 18. We do not knowingly collect data from children. If we become aware of a child using the service, we will delete their account and data immediately.

11. International Data Transfers

Your data may be transferred to, stored in, and processed outside the UK and EU (including the US). We ensure adequate safeguards via:

Standard Contractual Clauses (for GDPR compliance)
Your explicit consent

12. Changes to This Policy

We may update this policy as our service evolves. We will notify you of material changes via email or a prominent notice on the platform. Continued use of WebWatch constitutes acceptance of the updated policy.