Mendwell for Webflow: Privacy Policy
Last updated: October 1, 2026
Mendwell is a Webflow app made by Great Work LLC, 651 N Broad St Suite 206, Middletown, DE 19709, USA (hello@greatwork.company). This policy covers what Mendwell collects, why, where it goes, how long we keep it and how to delete it.
What Mendwell stores
| What | Why | Kept for |
|---|---|---|
| Your site's Webflow access token, encrypted (AES-256-GCM) | To read your site's addresses, page list and CMS links, and to write fixes you confirm | Until you remove Mendwell, uninstall it or revoke access; then deleted |
| Site id, workspace id, site name, published addresses | To run crawls and apply your plan | As long as Mendwell is connected |
| Crawl results: the addresses on your published site, the links found on each page and in your CMS rich text and link fields (address, link text, the item and field it is in), each address's status and redirects, page titles and section ids | To show your issues, orphan pages and link ideas | Full results for the last two crawls; crawl summaries for your plan's history window (6, 12 or 24 months) |
| Undo journal: the old and new values of the CMS fields a fix changed, encrypted (AES-256-GCM) | So you can undo a fix | 30 days, then deleted (the fix stays in History without undo) |
| Who ran a crawl or a fix (Webflow user email) and when | History and accountability inside your team | With the crawl or fix record |
| Your settings: schedule, digest switch, the email the digest goes to, keywords per page, hidden findings | To do what you asked | As long as Mendwell is connected |
| Outside link checks (an outside address, its status and redirects), shared between sites | So a popular outside link is asked once, not once per site | 3 days |
| Server request logs: time, method, path, status, duration | Security and troubleshooting | 30 days. Not logged: query strings, tokens, request bodies, emails |
Mendwell reads only what your published site shows any visitor, plus your CMS fields through Webflow's API. It does not collect your site visitors' data, adds no code or cookies to your site, and doesn't read form submissions, ecommerce data or assets. Crawl results don't contain the text of your pages beyond page titles, link text and section ids.
Personal data. The personal data Mendwell holds is your Webflow user email (sessions, receipts, history and, if you turn it on, the digest). Links and link text from your site can contain names if your content does; they are kept only as described above. We don't sell personal data, don't use it for advertising and don't use it to train AI models.
Third parties and every domain Mendwell talks to
| Domain | Who | What |
|---|---|---|
| api.webflow.com, webflow.com | Webflow, Inc. | Your site's data through the Data API and the sign-in (OAuth) screen |
| Your site's own addresses (custom domains and its .webflow.io address) | Your Webflow site, hosted by Webflow | The crawl reads your published pages, robots.txt and sitemap |
| website-files.com and any outside address your pages link to | Webflow's CDN and the owners of those sites | One status check per link (no data about you is sent; our user agent identifies the crawler) |
| addons.greatwork.company | Great Work LLC (our server, hosted at DigitalOcean, New York) | Mendwell's backend and our licensing service: your site id, workspace id and verified email, to run your trial and plan |
| checkout.stripe.com, billing.stripe.com | Stripe, Inc. | Payment and billing, only when you click a plan or Manage billing. Stripe holds your card details; we never see them |
| api.resend.com | Resend | Only if the weekly digest is turned on and email sending is enabled for Mendwell: your email address and the digest (counts and your site name) |
| greatwork.company | Great Work LLC | Product page, documentation and this policy |
Our server runs on DigitalOcean (United States). Data is encrypted in transit (TLS) everywhere.
Retention and deletion
- Remove Mendwell (Settings) deletes the access token and everything listed above for your site, at once.
- Uninstall or revoke access in Webflow: we delete the token and your site's data the next time Webflow tells us the access is gone (on our next request, and at the latest by the next daily check).
- If a plan or trial ends, your results stay readable for 30 days; then the site's data is deleted.
- Undo journals are deleted after 30 days; crawl summaries after your plan's history window.
- To ask for a copy or deletion of your data, email hello@greatwork.company. We answer within 30 days.
Your rights
Depending on where you live (for example the EU, UK or California), you can ask to access, correct, delete or export your personal data, and object to or restrict its use. Email hello@greatwork.company. Our legal basis for processing is the contract with you (providing the app you installed) and our legitimate interest in keeping the service secure.
Children
Mendwell is a business tool and isn't meant for children under 16.
Changes
We'll post changes here and update the date above. If a change matters, we'll say so in the app.
Contact
Great Work LLC, 651 N Broad St Suite 206, Middletown, DE 19709, USA. hello@greatwork.company