How WebOptiva supports EU/UK General Data Protection Regulation obligations for the website data, contact details, and connected third-party integrations it processes on a tenant's behalf.
Data we process and why
WebOptiva processes public website content for audits, contact details submitted for reports/leads/signup, real-user performance and security event data from connected domains, and content passed to AI-generated intelligence and workflow features — each for the specific purpose the customer configured it for.
Public page content and audit evidence
Report/lead/account contact details
RUM and security-event telemetry from connected domains
AI-processed audit content and generated recommendations
Third-party and cross-border processing
Where a tenant connects an external service — Google Analytics, Search Console, a CMS, Slack, GitHub, or a CRM — WebOptiva stores only the scoped credentials and sync metadata needed to operate that connection, and each integration can be reviewed or revoked from the dashboard at any time.
Scoped, revocable third-party connections
Encrypted credential storage
Connection, permission, and sync status visible per integration
Data subject rights
EU/UK data subjects can request access to, correction of, or deletion of their personal data held by WebOptiva. Retention, export, and deletion policies apply to workspace, report, and telemetry data according to configured retention windows.
Access and correction requests
Deletion requests subject to legal/operational retention limits
