Glancewell for Webflow: Privacy Policy
Effective date: October 1, 2026
Glancewell is a Webflow app made by Great Work LLC, 651 N Broad St Suite 206, Middletown, DE 19709, USA ("we"). Contact: hello@greatwork.company. This policy covers what the app stores, where it comes from, who it goes to, how long we keep it and how it's deleted.
Who is who
For the account data of the person who installs and uses Glancewell (your Webflow user id and email), we are the controller. For the data about your Webflow sites that the app reads on your instructions, we act as your processor. Glancewell doesn't collect personal data about your sites' visitors: it counts form submissions by date and never stores their answers.
What we store
- Webflow access token: the read-only token Webflow issues when you approve the app, encrypted at rest with AES-256-GCM. Never sent to your browser, never logged.
- Your Webflow identity: your Webflow user id and email from Webflow's ID token, to know who is asking, to send receipts, and to send the weekly digest when you turn it on (to that verified email only).
- Workspace settings: your agency name for reports, the stale-site window, whether "Fix with" suggestions show, the digest switch, the plan you set per site and which sites are pinned, findings you dismissed.
- Site snapshots: for each site the install covers, the latest scan: name, custom domains, last publish date, locales, page counts and counts of empty SEO fields, collection names and item counts, form submission counts for 7, 30 and 60 days, and the results of checking the live domains (HTTP status, response time, certificate expiry and issuer, robots and noindex signals, the home page's title, description, social image address, favicon address, language and how many images lack alt text, and up to 20 sitemap addresses that returned 404).
- Uptime history: one up or down mark per site per day.
- Scans and digests: when each scan ran and who started it, and the weekly digests (counts, site names and finding titles).
- License state: the plan and trial dates from our billing service.
What we never store
- Form answers. Webflow's API returns them with each submission; we read only the date and discard the rest in memory.
- CMS item content, page content (beyond the home page facts above), assets, or anything from your visitors.
- Visitor IP addresses or cookies: the app adds nothing to your published sites.
Where data comes from and goes
| Domain | Why |
|---|---|
| webflow.com | The OAuth approval screen (you sign in to Webflow there, not with us) |
| api.webflow.com | Read your sites, pages, CMS counts and form submission dates with the token you approved; resolve your ID token |
| Your sites' custom domains and their webflow.io addresses | Our server checks them like a visitor would (home page, robots.txt, certificate, sitemap) as GlancewellBot |
| addons.greatwork.company | Our backend (the Designer Extension talks only to it) and our billing service |
| checkout.stripe.com, billing.stripe.com | Payment and the billing portal, opened by you in a new tab. Stripe receives your email and card details; we never see your card |
| greatwork.company | The product page, documentation and these policies |
| api.resend.com | Only when weekly digest email is switched on: the digest (counts, site names, finding titles) goes to your email through Resend |
Hosting: DigitalOcean (New York), in a database only our app's own server user can read. We don't sell data, share it for advertising, or use it to train AI models.
How long we keep it (retention)
- Site snapshots: replaced at each scan; deleted when a site leaves the workspace or the install.
- Uptime history: 90 days. Scan records: 90 days. Weekly digests: 12 weeks.
- A workspace without an active trial or plan: everything is deleted 30 days after the plan or trial ended.
- Server request logs (method, path, status, time; no query strings, headers or bodies): 30 days. Not logged: tokens, IDs from query strings, form answers.
Deletion on uninstall
- Settings > Remove Glancewell revokes the Webflow token and deletes everything above for the workspace at once.
- Uninstalling or revoking the app in Webflow: Webflow doesn't tell apps about uninstalls, so our server deletes a token and its workspace data the first time Webflow refuses it, and a daily check finds every revoked token within 24 hours.
- Billing records are kept by our billing service and Stripe as tax law requires.
Your rights
You can ask for a copy of your data, a correction or deletion at hello@greatwork.company; we answer within 30 days. EU and UK users can also complain to their data protection authority. We'll tell you before changing this policy in a way that matters, by email and in the app.
Great Work LLC, 651 N Broad St Suite 206, Middletown, DE 19709, USA. hello@greatwork.company