Privacy policy

Last updated: 2 July 2026

Ashdub (“we”, “us”) operates ashdub.com, a service that builds and hosts websites and business apps. We handle your data in line with UK GDPR and the Data Protection Act 2018. For any privacy question, or to exercise your rights, email privacy@ashdub.com.

What we collect

When you create an account we collect your email address and a password (stored hashed, never in plain text). When you describe your business to the builder we process that description to generate your site. Content you add to your website or back office belongs to you and is stored so we can host and serve it. We also collect basic technical logs (IP address, browser type) needed to run and secure the service.

How we use it

To provide the service: building, hosting and serving your sites; signing you in; sending you essential account emails such as verification links. We use AI models to generate site content from your descriptions; your inputs are sent to those providers solely to produce your content. We never sell your personal data.

Who we share it with

Only the providers that run the service on our behalf: hosting and delivery (Vercel), database and authentication (Supabase), email delivery (Resend), payment processing (Stripe, which handles card details directly so we never see them), and AI content generation providers. Each processes data under contract and only for these purposes.

Your websites and their visitors

If you build a site on ashdub, you are the controller of the data your site collects from its visitors (for example enquiry forms). We process that data on your behalf as part of hosting your back office.

Cookies

We use essential cookies to keep you signed in and make the site work, and analytics cookies only with your consent. Full details are in our cookie policy.

Retention

We keep account data while your account is active. Ask us to delete your account at any time by emailing privacy@ashdub.com and we delete or anonymise your personal data within 30 days, except where the law requires longer (for example payment records).

Your rights

Under UK GDPR you can access, correct, delete, restrict or object to our use of your personal data, and request a copy of it. Email privacy@ashdub.com and we’ll act on it. You can also complain to the Information Commissioner’s Office (ico.org.uk).

International transfers

Some providers process data outside the UK and EEA under appropriate safeguards such as standard contractual clauses.

Changes

We may update this policy from time to time; the date above always shows the latest version.