Wherewell for Webflow: Privacy Policy
Effective date: October 1, 2026 Publisher: Great Work LLC, 651 N Broad St Suite 206, Middletown, DE 19709, USA Contact: hello@greatwork.company
This policy covers the Wherewell app for Webflow (the "App"): the panel that runs in the Webflow Designer, the Great Work server it talks to, and the locator script the App adds to the pages of your site where you place a locator. It doesn't cover Webflow's own products, which have their own policy.
1. Summary
- The App reads your locations collection, turns addresses into coordinates and writes them back to your CMS, only through Webflow's official APIs.
- Great Work stores an encrypted Webflow access token, your locator settings, a public copy of the mapped fields of your published items (what your live site already shows), and a fingerprint of each address we geocoded.
- On your live site, the locator script loads that public copy and, when a visitor presses Search, sends what they typed to our server to find the place. It sets no cookies, uses no browser storage, reads no forms and doesn't track visitors.
- We don't sell or share personal information, show ads, use analytics trackers, or use your content to train AI.
2. What we process, and why (site owners)
| Data | Why | Where it lives and for how long |
|---|---|---|
| Webflow OAuth access token for the site(s) you approve, its scopes, site and workspace ids, timestamps | To read your collection, write coordinates, keep them in sync and manage the locator script | Our server, encrypted with AES-256-GCM. Deleted when you remove Wherewell from the site, when Webflow tells us it's revoked (for example after you uninstall), or by our daily check, so within 24 hours of an uninstall |
| Webflow user id and email, and the site id, from Webflow's identity check when you open the App | To confirm who you are and which site you're on; the email is the billing contact for receipts | Held in memory for the 15-minute session. Site id, workspace id and email are passed to our billing service (below) |
| Locator settings: the collection, which fields are the address, coordinates, filters and details, display options, the pages the locator is on | To run the locator | Our server, until you delete the locator or remove Wherewell |
| CMS items of the chosen collection (the mapped fields) | To find items to geocode, write coordinates, and build the map data | Staged items pass through our server's memory during a request only. The map data is built from published items only, reduced to the mapped fields, stored as a file on our server and served publicly to your site's own domains; rebuilt from Webflow, deleted with the locator |
| Geocoding fingerprint per item: a hash of the address and the coordinates Wherewell wrote | To tell an address change from coordinates you placed by hand, so hand-placed pins are never overwritten | Our server, until the item is deleted or you remove Wherewell |
| Addresses sent for geocoding | To turn them into coordinates | Sent to our geocoding service (geo.greatwork.company), which looks them up with Geocodio and keeps a shared cache of address-to-coordinates results keyed by the address text, with no user or site identifier |
| Your site's domains (webflow.io, preview and custom domains) | So only your site can load its map data | Our server, refreshed daily, deleted with the site |
| License record: site id, workspace id, billing email, plan, trial dates, lookup counts, Stripe customer and subscription ids | To run the trial, plans and monthly lookup limits | Our billing service at addons.greatwork.company, for as long as you have a trial or plan, then as long as tax and accounting law requires |
| Server request logs: time, method, path (without query strings), status and duration. IP addresses are used in memory for rate limiting and not logged | Security and reliability | Our server, 30 days. Never includes tokens, codes, visitor searches or CMS content |
3. Visitors to your published site
The locator script runs only on the pages where you placed a locator.
- It loads your locator's map data (published locations) from addons.greatwork.company and the map style, tiles and fonts from tiles.openfreemap.org (OpenFreeMap, run by Hyperknot Software Kft. in Hungary; map data from OpenStreetMap contributors). Like any website request, these servers see the visitor's IP address and browser details. OpenFreeMap says it keeps no user database and sets no cookies.
- When a visitor types an address or postcode and presses Search, that text goes to addons.greatwork.company, which looks it up through our geocoding service (geo.greatwork.company, using Geocodio). The text and the resulting coordinates may be cached, without the visitor's IP address or any other identifier, for up to 7 days in our server's memory and in the geocoding service's shared cache. Searches are not stored with anything that identifies the visitor, and nginx access logs are turned off for these requests.
- Near me uses the browser's location only after the visitor allows it. The location stays in the visitor's browser and is never sent to us.
- Directions links open google.com/maps in a new tab, only when the visitor clicks one.
- The script sets no cookies, uses no local storage, reads no form fields and doesn't fingerprint or track visitors. As a site owner, mention the map provider in your own privacy notice if your jurisdiction requires listing embedded third-party services.
4. Third parties and domains
The App and the locator script talk only to these:
- webflow.com / api.webflow.com (Webflow, Inc.): the Designer API, Data API, webhooks and the OAuth screens.
- addons.greatwork.company (Great Work LLC): our backend, the map data, visitor search and billing service, hosted on a DigitalOcean server in the United States (DigitalOcean, LLC is our infrastructure provider).
- geo.greatwork.company (Great Work LLC, same DigitalOcean server): our geocoding service, which uses Geocodio (Dotsquare LLC, United States) to turn addresses into coordinates.
- tiles.openfreemap.org (OpenFreeMap): map styles, tiles and fonts on your published site. Map data (c) OpenStreetMap contributors.
- checkout.stripe.com and billing.stripe.com (Stripe, Inc.): only if you click to buy or manage a plan. Stripe processes payment details under its own privacy policy; we never see card numbers.
- greatwork.company: our docs, privacy and terms pages, opened only when you click them.
- Resend (Resend, Inc.): sends receipts and billing emails from hello@greatwork.company.
- google.com/maps: only when a visitor clicks a Directions link.
5. Sharing
We don't sell, rent or share personal information. We disclose it only to the providers above, to do what this policy describes, or if the law requires it.
6. AI and model training
The App uses no AI services. Nothing it processes is used to train any model.
7. Security
Tokens are encrypted at rest and never sent to a browser. The backend runs as its own unprivileged user behind HTTPS (TLS) with strict CORS and short-lived sessions bound to the site Webflow confirms. Public endpoints used by your live site can't change anything and answer only your site's own domains. The locator script is served from an immutable, versioned URL and checked by your visitors' browsers against a fixed integrity hash. Report a security issue to hello@greatwork.company; we treat it as urgent.
8. Your choices and rights
- Remove Wherewell from a site any time in the App (Settings > Remove Wherewell from this site): this deletes everything listed in section 2 except the license record, removes the script from your pages and deletes our webhooks. Or uninstall the App in Webflow: our server deletes the token and data within 24 hours of the uninstall.
- Cancel your plan any time from Manage billing.
- If you're in the EEA, UK or California, you can ask us to access, correct, export or delete personal information we hold about you. Write to hello@greatwork.company; we reply within 30 days.
9. Children
The App is for businesses and website builders and isn't directed at children under 16.
10. Changes
We'll post changes here with a new effective date and, for material changes, email paying customers at least 14 days before they apply.