Privacy

What is stored

• For each studio: its name and the email address used to sign in. Password sign-ins store a salted hash, never the password itself. A session cookie keeps you signed in across visits and is renewed while you use your studio. Signing out removes this access; changing a password ends the studio's other sessions. Clearing browser cookies or a browser's storage limits can require you to sign in again.
• New studio sign-ins use Supabase Auth, which stores the account identity, email address, confirmation state and a password hash for email-and-password accounts. A Google account can also use email sign-in when its owner adds a password in Account. Additional HTTP-only cookies hold the Auth session and sign-in confirmation state. Connecting an existing invitation account requires its previous Widgio password; its projects and client links stay in place.
• For each project: the project and client names, the requests, due dates and review comments the studio enters.
• From clients: the texts they send and the files they upload. Photos (JPEG, PNG, WebP) are kept at full quality with location, camera and date details removed, plus a smaller preview. PDF, SVG, AI, EPS and Word files can retain details saved inside them, such as the author name in a Word file. File names are kept as supplied, including letters from any language, except that paths and unsafe characters are removed or replaced, long names are shortened, and file extensions are standardized.
• Counters of recent sign-in, upload and password attempts, which protect the service. Sign-in counters use a hash of the IP address and email; they stop counting after 15 minutes and are cleared at a later sign-in.

Widgio uses no analytics, advertising or tracking cookies. Email registration and password recovery use messages sent by Supabase through its configured email delivery provider. Client materials are not sent by email.

Password safety

When you create or update a password, or sign in with one, Widgio checks it against Pwned Passwords. Only the first five characters of a SHA-1 hash go to that service. Your password, full hash, email and account details are not sent. A match blocks the password; if the check is unavailable, try again later.

A completed password reset ends the studio's previous sessions. Reset links work once; Widgio does not change your password just because a link was opened.

Google sign-in

Google sign-in, when available, is optional. If you choose it, Google handles the sign-in and shares your email address, basic profile (such as your name and profile picture) and account identifier with Supabase Auth. Supabase keeps this identity and profile information with your Auth account. Widgio uses your verified identity and email to sign you in and find your studio. These permissions do not give Widgio access to Gmail, Google Drive or your Google Calendar. Your project materials are not sent to Google by Widgio.

You can remove Widgio's access in your Google Account settings. To close your Widgio studio and request deletion of its data, contact Support: support@getwidgio.com.

Where it is kept

• The database and files are stored with Supabase in the EU (Frankfurt, Germany). Files are in private storage and are never public.
• The website runs on Netlify. Its server code runs in the United States (Ohio): signing in, saving answers and checking uploaded files happen there. Files pass through while they are checked and cleaned; they are not kept there.
• Supabase and Netlify keep their own technical logs, such as IP addresses, under their own policies.
• Unsent text drafts stay in your browser on this device, separately for each client link and request. Your studio receives them only when you send your answer. Files are not saved as drafts. Drafts are cleared after a successful send when your browser permits it; if clearing fails, Widgio tells you. Clearing this site's browser data also removes drafts. Drafts do not move between devices or between Widgio's different website addresses.

Who can see it

• The studio that created the project, when signed in.
• Anyone with the project's client link. The link works like a key, so share it only with your client. It works for 30 days unless the studio extends it, and the studio can replace or revoke it at any time.
• Each download uses a separate link that works for 60 seconds and is issued only after Widgio verifies that the signed-in studio owns the project, or that the client link belongs to that project and has not expired or been revoked.
• The person running Widgio has administrator access to the database and storage to keep the service working. Supabase and Netlify host the project data and files. An email delivery provider also receives studio email addresses and confirmation messages. Client materials are not sent by email.

How to delete data

• Until the studio accepts a file, the client can replace it or, in a request for several files, remove it. For anything else, ask the studio.
• Studios can delete a request, a website page or a whole project. The texts and files go at once, including from storage; if storage does not answer at that moment, the removal is retried when Widgio is used and by a scheduled cleanup every 15 minutes.
• To close a studio account and delete everything in it, contact Support: support@getwidgio.com.
• Widgio makes no backups of its own, so deleted data cannot be restored.

Free to use

Widgio is free while it is tested with a few studios. There is no payment and no contract. The service can change, pause or end, and it may not always be available, so keep your own copies of important files. A studio can export a project at any time.

Contact

Support: support@getwidgio.com