Privacy Policy

Last updated: September 9, 2026

Information we collect from account holders

Your email address, the domains and settings of sites you add, the answers you give in the AI profile, and billing information processed by Stripe (we never see full card numbers).

Information the widget collects from visitors to customer sites

When a disclosure is shown or acknowledged, the widget sends the site key, the event type and the page path to our servers. Our servers derive a short, daily-rotating hash from the visitor's IP address and browser so repeat views can be counted; the IP address and browser string themselves are not stored. Country and region are recorded when provided by our hosting network. The widget sets one browser storage key per site to remember that a notice was acknowledged. It does not set cookies, does not track visitors across sites, and does not collect names, messages, or chat content.

How we use information

To operate the service, produce logs and reports for the account holder, send sign-in links, billing emails and (on paid plans) weekly law-change digests, and to improve the product. We do not sell personal information.

Service providers

Hosting (Vercel), database (managed Postgres), payments (Stripe), and email delivery (Resend). Each processes data only to provide its service to us.

Retention

Disclosure logs are kept for the retention period of the account's plan, then deleted. Account data is deleted within 30 days of a request.

Your rights

You can access, correct, export or delete your account data by emailing [your support email]. Residents of California, the EU/UK and other jurisdictions with privacy laws may exercise their statutory rights the same way.

Contact

[your business name], [address], [your support email].