Capture Desktop, Tablet, and Mobile together, so you can see how a Page truly responds across devices.
Privacy Policy | WebMoment
Legal
Privacy Policy
How WebMoment collects, uses, and protects personal data.
Last updated July 16, 2026
Privacy Policy
This Privacy Policy explains how MobApp Labs LLC, operating as WebMoment ("we", "us", or "our"), collects, uses, stores, shares, and protects personal data through the Services.
We provide tools to Capture, preserve, and organize web content through Workspaces, Pages, Moments, Tracking, Replay, Collections, APIs, notifications, exports, and related services. This Policy applies to our websites, applications, APIs, billing, support, Capture and preservation features, and related product interactions.
This Policy should be read with the Terms of Service, Cookie Policy, and, where applicable, the Data Processing Addendum. It does not apply to third-party websites, products, or services that we do not operate, even if they are linked from or accessible through the Services.
1. Controller and Processor Roles
As a data controller, we manage account administration, billing, security, service communications, support, fraud prevention, and legal compliance.
As a data processor or service provider, we process Customer Data on behalf of a customer. For example, customers decide which Pages to submit, which Moments and Replay archives to create, which Trackings to run, what assets to upload, and how Workspace data is used.
Customers are responsible for determining the lawful basis, notices, permissions, and rights handling for personal data they include in Customer Data or Captured Content.
Our role depends on the specific processing activity and customer relationship.
2. Information We Collect
The information we collect depends on how the Services are used.
2.1 Account Data
Account Data may include:
name;
email address;
authentication identifiers;
profile settings;
Workspace membership;
role and permission information;
login and security events.
2.2 Workspace Data
Workspace Data may include:
Workspace name and settings;
users and roles;
Pages;
Moments;
Trackings;
Collections;
comments;
API Keys;
custom domain settings;
notification settings;
Workspace activity.
2.3 Billing Data
Billing Data may include:
plan information;
billing contact details;
invoices;
payment status;
payment history;
tax information;
transaction identifiers.
Full payment card numbers are handled by payment providers rather than by us.
2.4 Captured Content
Captured Content may include URLs, screenshots, Replay archives, page metadata, titles, favicons, Open Graph images, technology metadata, uploaded assets, exports, comments, and related artifacts generated through the Services.
Depending entirely on what customers choose to capture, Captured Content may contain personal information, confidential information, proprietary information, regulated information, or third-party content. We neither determine nor control the content of submitted Pages, uploaded assets, Replay archives, exports, or shared links.
2.5 API and Usage Data
API and Usage Data may include:
API request metadata;
API Key identifiers;
endpoint usage;
rate limit events;
job status;
capture duration;
feature usage;
SDK or client version;
integration metadata;
error information.
2.6 Logs and Device Data
Logs and Device Data may include:
IP address;
browser and device information;
timestamps;
pages viewed;
authentication events;
security events;
diagnostic errors;
network metadata.
operating system
2.7 Communications
Communications may include support requests, product feedback, sales inquiries, administrative emails, legal notices, and other communications with us.
3. How We Use Information
Information is used to:
provide, operate, and maintain the Services;
secure the Services and investigate abuse or security issues;
create screenshots, Moments, Replay archives, previews, metadata, and exports;
run Trackings;
manage Workspaces, permissions, and API Keys;
provide support and respond to requests;
process billing and account administration;
send service, security, and product notifications;
troubleshoot, debug, and improve reliability;
measure product performance and develop new features;
improve accessibility and usability;
comply with legal obligations and enforce agreements.
Customer Data is not sold.
4. Customer Data
Customer Data belongs to the customer, as described in the Terms of Service. Except as expressly provided in the Terms, we acquire no ownership rights in Customer Data.
We process Customer Data only as needed to provide and operate the Services, including to store and retrieve Moments, run Trackings, create Replay archives, generate exports, secure the platform, provide support, troubleshoot issues, and comply with law.
Customer instructions are governed by the applicable agreement and, where signed or incorporated, the Data Processing Addendum. Customers are responsible for the legality of Customer Data and for obtaining any required permissions, notices, consents, or other lawful bases.
5. Platform Data
Platform Data is operational data generated to run, secure, debug, measure, or improve the Services. Examples include logs, telemetry, usage metrics, billing records, and security events.
Platform Data does not include Customer Data except where technically necessary to operate, secure, analyze, or improve the Services. Customer Data is not used in a way that conflicts with the Terms of Service, this Policy, or applicable law.
6. Cookies and Similar Technologies
Cookies and similar technologies support authentication, security, preferences, and product functionality.
Where GDPR or similar laws apply, we may process personal data based on:
performance of a contract;
legitimate interests, such as operating, securing, and improving the Services;
consent, where required;
compliance with legal obligations;
protection of rights, safety, and security.
Additional legal bases may apply where permitted under applicable law.
For personal data included in Customer Data or Captured Content, customers are responsible for establishing the applicable lawful basis.
8. Sharing Information
Information is shared only as needed to provide the Services, comply with law, protect rights and security, or complete business transactions.
8.1 Operational Sharing
Information may be shared with subprocessors and service providers that support infrastructure, hosting, storage, authentication, billing, operational monitoring, support, and communications.
Information may be disclosed to authorities, courts, regulators, professional advisers, or other parties when required by law or when necessary to protect us, customers, users, or third parties.
8.3 Business Transfers
Information may be disclosed or transferred in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction.
9. AI
AI-assisted features may be added in the future.
Customer Data will not be used to train AI models unless customers have explicitly opted in.
If AI Features are introduced, additional terms, settings, or disclosures may explain how those features process data.
10. Retention
Different categories of information may have different retention periods.
Retention depends on the category of information, features used, plan type, Workspace configuration, billing requirements, legal obligations, security investigations, abuse prevention, backups, and disaster recovery requirements.
Customer Data may be deleted after account closure, Workspace deletion, plan expiration, retention expiry, or customer instruction, subject to backups, legal obligations, and technical limits.
11. Security
Administrative, technical, and organizational measures are used to protect personal data.
Security practices evolve over time as the Services, risks, and operational requirements change. No security measure can eliminate every risk.
Information may be processed in countries other than the country where users or customers are located.
Where required, appropriate transfer mechanisms are used, such as Standard Contractual Clauses or other lawful mechanisms. International transfer terms may also be addressed in the Data Processing Addendum.
13. Privacy Rights
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of certain personal data. You may also have the right to withdraw consent or lodge a complaint with a supervisory authority.
Residents of certain U.S. states may have rights to know, access, delete, correct, or opt out of certain processing. Customer Data is not sold.
Identity verification may be required before a privacy request is processed. Authorized agents may submit requests where permitted by applicable law.
If a request relates to Customer Data controlled by a customer, we may direct the requester to that customer or assist the customer in responding, consistent with the applicable agreement and the Data Processing Addendum.
14. Automated Decision-Making
Personal data is not used to make automated decisions that produce legal or similarly significant effects.
The Services may use automated systems for security, abuse prevention, rate limiting, capture processing, and reliability, but these systems are designed to operate the platform rather than make legally significant decisions about individuals.
15. Children's Privacy
The Services are not intended for children under the age required by applicable law.
We do not knowingly collect personal data from children.
16. Subprocessors
The current subprocessor list is available in Subprocessors.
17. Changes
This Privacy Policy may be updated from time to time.
Updates will be posted with a new lastUpdated date. If changes materially affect privacy rights, notice will be provided where required.
18. Contact
Privacy questions or requests may be sent through our contact page, unless another written agreement specifies a different privacy contact.
