Recapwell for Webflow: Privacy Policy
Last updated: October 1, 2026
Recapwell is a Webflow app made by Great Work LLC, 651 N Broad St Suite 206, Middletown, DE 19709, USA (hello@greatwork.company). This policy covers what Recapwell collects, why, where it goes, how long we keep it and how to delete it.
What Recapwell stores
| What | Why | Kept for |
|---|---|---|
| Your site's Webflow access token, encrypted (AES-256-GCM) | To read your analytics, form submission counts, CMS items and pages | Until you remove Recapwell, uninstall it or revoke access; then deleted |
| Site id, workspace id, site name, published domain and last publish date | To apply your plan, head the report and run uptime checks | As long as Recapwell is connected |
| Settings: brand (agency name, color, contact line), logo image, time zone, default period and sections, schedule and its recipients' email addresses, uptime on or off, your notes draft | So reports look and arrive the way you set | Until you remove Recapwell |
| Saved reports: the period, totals and counts (visits, visitors, page views, top 10 pages, sources, countries, devices, goal conversions, submissions per form name, CMS items per collection, pages updated, uptime), your notes and brand at the time, who saved it, when it was emailed and to how many people | The Saved tab, the client link, the PDF and CSV | The last 36 reports per site |
| Client link tokens: a SHA-256 hash to look the link up, and the token encrypted so the app can show the link again | The private report link | With the report |
| Uptime tallies: per day, how many checks ran, how many failed and the total response time | The uptime section | 400 days |
| Server request logs: time, method, path (link tokens replaced), status, duration | Security and troubleshooting | 30 days. Not logged: query strings, tokens, request bodies, report link tokens |
What we don't store. No form submission values (Recapwell reads submissions only to count them per form, then discards them), no CMS item content, no page content, and no visitor-level data (Webflow Analyze only returns totals to Recapwell). Recapwell adds no code, banner or cookies to your published site, and calls no AI service.
Personal data, in short. Your Webflow user email (from Webflow's sign-in, for receipts and to show who saved a report), the contact line and recipient addresses you enter, and anything personal in your notes, form names or collection names. We don't sell personal data, don't use it for advertising, don't use it to train AI models and don't send it to any AI service. For personal data in your site and your reports, you are the controller and Great Work is your processor (Terms, section 6).
Who can read a report. Anyone you give a client link to, without signing in. Links are long random tokens, are marked noindex for search engines, and stop working when you turn them off, make a new link, delete the report, remove Recapwell or your plan lapses.
Third parties and every domain Recapwell talks to
| Domain | Who | What |
|---|---|---|
| api.webflow.com, webflow.com | Webflow, Inc. | Your site's Analyze reports, forms and submission dates, CMS items and pages through the Data API (read only), and the sign-in (OAuth) screen |
| Your site's published domain | You | The uptime check: one request for the home page's headers every 10 minutes when you turn it on (RecapwellBot) |
| addons.greatwork.company | Great Work LLC (our server, hosted at DigitalOcean, New York) | Recapwell's backend, the client report links, and our licensing service (your site id, workspace id and verified email, to run your trial and plan) |
| checkout.stripe.com, billing.stripe.com | Stripe, Inc. | Payment and billing, only when you click a plan or Manage billing. Stripe holds your card details; we never see them |
| api.resend.com | Resend, Inc. | Only once email is switched on for Recapwell: the report email (site name, summary lines and the link) to the addresses you set |
| greatwork.company | Great Work LLC | Product page, documentation and this policy |
Our server runs on DigitalOcean (United States). Data is encrypted in transit (TLS) everywhere and the token is encrypted at rest.
Retention and deletion
- Remove Recapwell (Settings) revokes the Webflow token and deletes everything Recapwell stored for your site at once: settings, logo, saved reports (their links stop working) and uptime history.
- Uninstall or revoke access in Webflow: we delete the token and your site's data the next time Webflow tells us the access is gone (on our next request or scheduled report, and at the latest by the next daily check).
- Retention runs daily: uptime tallies after 400 days; reports beyond the last 36 are dropped as new ones arrive.
- If your trial or plan ends, links and schedules pause and nothing is deleted for 30 days. After 30 days without a plan, everything for the site is deleted.
Your rights
Depending on where you live (for example the EU, UK or California), you can ask to access, correct, delete or export your personal data, and object to or restrict its use. Email hello@greatwork.company; we answer within 30 days. For data we process for a site owner, we pass your request to them. Our legal basis for your account data is the contract with you and our legitimate interest in keeping the service secure.
Children
Recapwell is a business tool and isn't meant for children under 16.
Changes
We'll post changes here and update the date above. If a change matters, we'll say so in the app.
Contact
Great Work LLC, 651 N Broad St Suite 206, Middletown, DE 19709, USA. hello@greatwork.company