actuateBack to the site

Draft for review · last updated 26 October 2026

Privacy Policy

This page describes how the service actually works today. Items marked [Draft: confirm] are for the company to confirm before publishing. Nothing here is legal advice.

What this service does

You enter a company website address. We read the public pages of that website, fetch its public brand assets and a screenshot of its homepage, and generate a preview of a software system for one business function. If you choose to, you can ask one question about the website, send a read-only link to the preview to a colleague, and leave an email address so we can follow up.

What we collect, and why

  • The website address you enter, and the text of up to five public pages of that website. We use them to build the preview. We do not log in to anything or read private pages.
  • Public brand assets for that website: logo, colours and fonts from Brandfetch, the site icon from public icon services (Google, DuckDuckGo), and a screenshot of the homepage from ScreenshotOne. These make the preview look like the company.
  • Your edits in the check step (company name, colour, one line about the business, city), which you type yourself and which go into the preview.
  • Your one question, if you ask it. It is answered only from the pages we read.
  • Public search results about your market, when we look for what similar businesses do. They come from Exa, are used only to write the market panel, and every claim in it links to the result it came from.
  • Your email address and an optional note, only if you submit the form to book a call or receive next steps. Under the form is a tick-box for occasional updates from us. It is unticked by default; if you tick it we record the time, and if you do not, we use your address only to reply to you.
  • Booking details (name, email, the time you chose and the company address) from Cal.com, when you book a call from the preview. We keep one record per booking and send you a confirmation email.
  • A colleague’s email address, if you use “Send to a colleague” to email the preview link. It is used once, to send that email, and is not stored by us. The email contains only the link and the company name.
  • Usage events for the funnel (a read started, a preview landed, a form submitted). Each event carries an anonymous visitor identifier that is a short hash of your IP address and browser identifier. We do not store the raw IP address with events. Analytics are sent to PostHog when configured.
  • Rate-limit counters keyed by a hash of your IP address and by the website domain, so each company gets one free read and nobody can flood the service. These live in Upstash Redis for a limited time.

Who processes it

Page text and your edits are sent to Anthropic (the model that writes the preview) and to Voyage AI (which turns page text into search vectors so your question can be answered from your pages). Records are stored in Supabase (Postgres, hosted). Counters and locks are in Upstash. Brand assets come from Brandfetch, screenshots from ScreenshotOne, page rendering from Firecrawl when a page needs it. Search results come from Exa, and the text of those results is also sent to Anthropic to write the market panel. Bookings run on Cal.com. Emails (booking confirmations, lead notifications, shared links) are sent through Resend. The site is hosted on [Draft: confirm] Vercel.

How long we keep it

  • The page text used to answer your question (stored as chunks with search vectors) expires one hour after the read.
  • The generated preview and the brand details for the read are kept [Draft: confirm] for 90 days so we can review quality and so a link to your preview keeps working.
  • Email addresses and notes you submit are kept [Draft: confirm] until you ask us to delete them or for 24 months, whichever is sooner.
  • A share link works for 7 days, or until you turn it off, then shows a short note instead of the preview.
  • Rate-limit counters expire within 30 days.

Cookies and storage

We set one cookie, __Host-wa_sid, that is needed for the service to work: it lets us recognise your browser, so that only you get your own preview back and only you can make or turn off its share links. It is not readable by scripts, is not used for tracking, and expires after 30 days. We do not use third-party advertising. The page uses no other browser storage. Anyone you send a share link to receives no cookie from us.

Your choices

You can use the service without giving an email address. To have your email, note or preview deleted, write to hello@weactuate.com from the address you used and we will remove it [Draft: confirm] within 30 days.

Who we are

[Draft: confirm] Legal entity name, registered address and country. Contact: hello@weactuate.com.

Changes

If this policy changes, the date at the top changes with it. Material changes will be noted on this page.