User data deletion

In accordance with the General Data Protection Regulation (GDPR, Article 17) and the requirements of third-party identity platforms (Google, Facebook, Apple), Websir lets you request deletion of your account and all associated personal data at any time.

This page explains the two available methods for exercising this right.

Method 1 — Automatic deletion from your account

The fastest and recommended method:

Sign in to your customer area on www.websir.fr/en.
Go to Profile › Account settings.
Scroll down to the “Danger zone” section.
Click “Delete my account”.
Confirm your password (or re-authenticate with your third-party provider) and confirm deletion.

Deletion is immediate and irreversible. You will receive a confirmation email at the address linked to your account.

Method 2 — Request by email

If you cannot access your account (lost password, locked account, revoked third-party access), send a deletion request by email:

Address: [email protected]
Subject: “Account and data deletion request”
Content: include the email address associated with your Websir account and, where relevant, the identity provider used (Google, Facebook, Apple).

To verify your identity and prevent fraudulent deletion, we may ask you to confirm the request via an email sent to the address registered on your account.

We commit to processing your request within a maximum of 30 days from receipt, in accordance with Article 12 of the GDPR.

Scope of deletion

Deleting your account permanently deletes the following data:

Your user profile (name, email, hashed password, third-party provider identifier).
All your projects and generated sites, including source code.
Conversations with the AI assistant.
Files and media you uploaded.
Usage logs linked to your account.
Your preferences and settings.
Authentication tokens and active sessions.
Connection data linked to third-party identity providers (Google, Facebook, Apple).

Data kept for legal obligations

Some data may be retained after account deletion to comply with legal or regulatory obligations:

Invoices and payment history: kept for 10 years in accordance with the French Commercial Code (Article L. 123-22).
Anonymized security logs: kept for 12 months for fraud prevention and service security.
Pseudonymized statistical data: retained without the ability to re-identify you.

All other identifying data is permanently erased.

Execution timeframes

Deletion from your account: immediate. Encrypted incremental backups containing your data are purged within a maximum of 30 days.
Email request: response within 72 business hours, effective deletion within a maximum of 30 days.

Revoking access from a third-party provider

If you signed in to Websir with Google, Facebook or Apple, you can also revoke Websir access directly from your third-party account. This revocation does not automatically delete your Websir data; it only prevents future sign-ins. To delete your data, use one of the two methods above.

Google: myaccount.google.com/permissions
Facebook: Settings › Security and login › Apps and websites › select “Websir” › Remove.
Apple: iCloud settings › Password and security › Apps using Apple ID › Websir › Stop using Apple ID.

Contact

For any question about deletion of your data or exercising your other GDPR rights:

Data Protection Officer: [email protected]
Postal mail: Carredas Communication SAS — DPO, 7 Rue de la Distillerie, ZA de la Plaine, 59493 Villeneuve-d'Ascq, France

If you disagree with our response, you may lodge a complaint with the CNIL: www.cnil.fr/fr/plaintes.