Privacy Policy

[COMPANY LEGAL NAME] (“we”) operates AIPageBuilder at https://aipagebuilder.app. This policy explains how we handle personal information about visitors to our website, people who sign up for and use AIPageBuilder (“Customers” and their team members), and people who contact us.

Our Customers are businesses that use AIPageBuilder to run their own pages, bookings, CRM, payments, email and client portal. When you visit a Customer’s page, book with them, pay them or receive their email, that business decides how your information is used and its privacy policy applies. We process that information only on the Customer’s behalf, as their service provider, under our Data Processing Addendum. Please contact the business directly with requests about that data; if you contact us, we will pass your request on.

• Account information: name, email, password (stored hashed by our auth provider) or Google sign-in profile, business name, role and team invitations.
• Billing information: plan, billing address and payment details. Card details are collected and stored by Stripe; we see only limited details such as card brand and last four digits.
• Workspace data: pages, templates, files, settings, messages, automations and anything else you put into AIPageBuilder.
• End-Customer data we process for Customers: contact details, form answers, bookings, invoices and payment records, messages and portal activity of the Customer’s own clients and leads.
• Connected accounts: if you connect Google, Microsoft, Zoom or iCloud, we store encrypted access tokens and the calendar or mailbox data needed for the feature you turned on.
• Usage and device data: pages viewed, features used, clicks, IP address, approximate location, browser and device type, and error reports.
• Page analytics and session replay: Customers can turn on analytics for their published pages. We then record page views, clicks and scrolling and, where the Customer enables it, a session replay (via PostHog) of how visitors use the page. We do this on the Customer’s behalf. Form inputs are masked, replays set no cookies, and we do not record passwords or payment card fields.
• Communications: messages you send our support team and your email preferences.

We use essential cookies to keep you signed in and secure the app, and analytics cookies and local storage (PostHog) to understand how the product is used. Session replay on Customers’ published pages keeps its data in memory for the current tab rather than in cookies. We do not use advertising or cross-site tracking cookies. You can block or delete cookies in your browser; the app needs essential cookies to work. We treat a Global Privacy Control (GPC) signal as a request to opt out of any sale or sharing, as described below.

• to provide, maintain and secure the Service, including AI features you ask to run;
• to process payments and manage subscriptions;
• to send service messages (receipts, security alerts, product changes) and support replies;
• to send product news and marketing email, which you can unsubscribe from at any time;
• to analyse usage, fix bugs and improve the product;
• to prevent fraud, abuse and spam, and to enforce our Terms;
• to comply with law and respond to lawful requests.

We share personal information only:

• with service providers (subprocessors) that host, process and deliver the Service for us under contract; see the current list of subprocessors;
• with services you choose to connect (for example Google Calendar or Stripe);
• with the Customer whose page, booking or portal you used, for End-Customer data;
• when required by law, or to protect the rights, safety and security of users, the public or us;
• in a merger, acquisition or sale of assets, subject to this policy.

We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined in the California Consumer Privacy Act (CCPA/CPRA). We have not done so in the past 12 months.

Depending on where you live, including under the CCPA as amended by the CPRA, you have the right to:

• Know and access the categories and specific pieces of personal information we hold about you, where it came from, why we use it and who we disclose it to;
• Delete personal information we collected from you, subject to legal exceptions;
• Correct inaccurate personal information;
• Opt out of the sale or sharing of personal information (we do neither) and of certain profiling;
• Limit the use of sensitive personal information. We use sensitive information (such as account passwords) only for purposes the law permits, so no further limitation is needed;
• Non-discrimination: we will not deny service, charge different prices or provide a lower quality of service because you exercised a right.

How to submit a request: email support@aipagebuilder.app from the address on your account, or with enough detail for us to identify you. We will verify your identity by matching information we already hold and respond within 45 days (we may extend once by another 45 days with notice). An authorised agent may submit a request on your behalf with your signed permission; we may ask you to confirm your identity directly. If we deny a request you may appeal by replying to our decision.

If your request concerns data a Customer holds about you as their End-Customer, we will refer it to that Customer and assist them in responding.

We keep account and workspace data while your account is active. After you close a workspace, we delete or de-identify its data within 90 days, except for backups (which roll off on their normal schedule) and records we must keep for tax, accounting, fraud-prevention or legal reasons. Analytics and session replay data are kept for up to 12 months. Customers control how long End-Customer data is kept and can delete it at any time.

We use encryption in transit (TLS) and at rest, row-level access controls that separate each workspace’s data, encrypted storage of third-party access tokens, role-based access for our staff, rate limiting and error monitoring. No system is perfectly secure; if we learn of a breach affecting your personal information we will notify you as the law requires.

AIPageBuilder is a business tool and is not directed to children. We do not knowingly collect personal information from children under 13, and we do not sell or share personal information of consumers under 16. If you believe a child has given us personal information, contact support@aipagebuilder.app and we will delete it.

You can unsubscribe from our marketing email with the link in any message or by emailing support@aipagebuilder.app. We will still send service messages about your account.

We send text messages only to people who have agreed to receive them. Reply STOP to opt out and HELP for help; message and data rates may apply. We do not share mobile numbers or SMS consent with third parties for their marketing. Customers who send texts through AIPageBuilder must collect their own recipients’ consent.

AIPageBuilder is operated from and hosted in the United States. If you use it from outside the US, your information will be transferred to and processed in the US, where data-protection laws may differ from those in your country.

We will post changes on this page and update the “Last updated” date; for material changes we will also notify account owners. Questions or requests: support@aipagebuilder.app, or write to [COMPANY LEGAL NAME], [COMPANY POSTAL ADDRESS].