Privacy Policy

Last Updated: July 12, 2025

Widged (“Widged”, ”widged.io”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy describes how we collect, use, store, disclose and safeguard your information when you use our services, including our visual widget builder (“Studio”), published lead generation widgets (“Widgets”) and our website.

By accessing or using Widged, you consent to the practices described in this Privacy Policy.

1. Who We Are

Widged is operated by a sole proprietor based in Republic of Serbia. For the purposes of applicable data protection law, Widged acts as a Data Controller for information processed through the Studio and as a Data Processor for information collected through Widgets on behalf of our clients.

If you have any questions about this Privacy Policy, please contact us at: privacy@widged.io

2. Information We Collect

2.1 Information from Studio Users

When you create an account, subscribe to our services, interact with the Studio or contact us, we may collect:

Account Data: name, email address and related information.
Payment Data: handled securely by our payment processor, Lemon Squeezy.
Technical Data: IP address, device and browser information, cookies, local storage, session storage and similar technologies.

2.2 Information Collected via Widgets

When you interact with Widgets embedded on websites, the information collected depends entirely on how each client configures their Widget. This may include:

Contact Information: such as name, email address, phone number, or any other details voluntarily provided.
Location and Technical Data: country, language, IP address and device/browser data.
Other Data: any other information that you submit through the Widget.

Important: Widged only provides the technical tools. Each client is solely responsible for deciding what information to collect through their Widgets and for ensuring that they comply with applicable data protection laws, including obtaining valid consent where required.

3. How We Use Your Information

We use your personal data for the following purposes:

To provide, operate, maintain and improve our Studio, Widgets and related services.
To authenticate users and manage accounts.
To process and manage subscriptions and payments (via Lemon Squeezy).
To provide customer support and communicate with you, including transaction-related notifications (e.g., account creation, changes to services).
To monitor and analyse usage and trends for service optimization.
To comply with applicable legal obligations.

We do not use your personal data for unsolicited marketing. Transactional and service-related emails may be sent to you as necessary.

4. Legal Basis for Processing

If you are located in the European Economic Area (EEA), we only process your personal data when we have a lawful basis to do so, including:

Performance of a Contract: to provide you with the services you requested.
Legitimate Interests: to operate and improve our services, prevent fraud and secure our systems.
Compliance with Legal Obligations: to fulfil our legal responsibilities.
Consent: where required by law, for example, for certain cookies and tracking technologies.

5. Cookies and Tracking Technologies

We use cookies and similar technologies such as Local Storage and Session Storage to:

Authenticate Studio users and maintain sessions.
Store user preferences.
Enable basic site functionality.
Analyse website traffic and usage via Google Analytics.

Where required by law, you will be presented with a Cookie Consent Banner allowing you to manage your preferences or withdraw consent at any time.

You can control cookies through your browser settings, but disabling some cookies may affect the functionality of our services.

We may share your information with trusted third parties, including:

Clients: Lead data collected through Widgets is shared only with the client who owns the respective Widget.
Payment Processor: We use Lemon Squeezy to process subscription payments.
Customer Support Provider: We use Crisp to handle customer communication and support.
Infrastructure and Analytics: We use Amazon Web Services (AWS) for hosting, Sentry for monitoring application performance and errors and PostHog for product analytics and user behavior insights.
Legal Authorities: We may disclose information if required by law or in response to valid legal requests.

All subprocessors are contractually obligated to process your data only on our instructions and in compliance with applicable data protection laws.

7. International Transfers

Your personal data may be stored and processed on servers located in EU. If your data is transferred outside the EEA, we implement appropriate safeguards to ensure your personal data remains protected in accordance with this Privacy Policy and applicable law.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

9. Data Subject Rights

If you are located in the EEA or other jurisdictions with similar rights, you may have the following rights:

The right to access your personal data.
The right to rectify or update inaccurate or incomplete data.
The right to request erasure of your personal data.
The right to restrict or object to processing.
The right to data portability.
The right to withdraw consent where processing is based on consent.
The right to lodge a complaint with a supervisory authority.

To exercise any of these rights, please contact us at privacy@widged.io. We may need to verify your identity before fulfilling your request.

10. Responsibility for Lead Data

When you interact with a Widget embedded on a client’s website, the client acts as the Data Controller for any personal data you submit. Widged acts only as a Data Processor on behalf of that client. Clients are solely responsible for ensuring that the collection and use of lead data comply with all applicable laws, including obtaining any necessary consents from individuals.

11. Data Security

We implement appropriate technical and organizational measures to safeguard your personal data against accidental loss, unauthorized access, disclosure or destruction. However, please note that no method of transmission over the Internet or electronic storage is 100% secure.

12. Children’s Privacy

Our services are not directed to children under the age of 13, and we do not knowingly collect personal data from children. If we learn that we have collected personal information from a child without verification of parental consent, we will take appropriate steps to delete that information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for other legal, operational or regulatory reasons. The latest version will always be available on our website with the “Last Updated” date.

14. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of Republic of Serbia, without regard to its conflict of law principles.

15. Contact

If you have any questions, requests or concerns regarding this Privacy Policy or our data practices, please contact us at:

care@widged.io (general support)
privacy@widged.io (privacy inquiries)
legal@widged.io (legal notices)