Privacy Policy

Effective date: March 16, 2026 · Policy version: 2026-03-16

1. Data We Collect

During the onboarding process and use of our services, we collect:

Business information: Company name, service types, service areas, certifications, and other details you provide during the onboarding conversation
Contact details: Your name, email address, and phone number
Photos and logos: Images you upload for use on your website
Consent records: Timestamps of when you agreed to our terms and policies
Usage data: Session information and interactions with the onboarding wizard

2. How We Use Your Data

Website Generation

Your business information is processed by AI language models to generate website content including page copy, service descriptions, and market positioning. Photos are analyzed by AI vision models to generate descriptions and determine layout placement.

Market Research

We use your business details (service area, service types) to conduct automated research about your local market, competitors, and industry context. This research informs the content generated for your website.

Communications

If you opt in to email communications, we may send you updates about your website, product features, and tips for improving your online presence. You can unsubscribe at any time.

3. Data Storage

Structured data (business information, session data) is stored in PostgreSQL databases on our infrastructure
Uploaded files (photos, logos) are stored in MinIO object storage on our infrastructure
Generated websites are stored on our hosting infrastructure

4. Third-Party Services

We use the following third-party services to provide our platform:

AI language models (Anthropic Claude, OpenAI): for content generation and onboarding conversation
Research APIs (Jina, Tavily): for automated market and business research

Data shared with third-party services is limited to what is necessary for their specific function. We do not sell your data to third parties.

5. Data Retention

We retain your data for as long as your account and website are active. If you request account deletion, we will remove your personal data and uploaded content within 30 days, except where retention is required by law.

6. Your Rights

You have the right to:

Access: Request a copy of the personal data we hold about you
Correction: Request correction of inaccurate data
Deletion: Request deletion of your personal data and uploaded content
Opt out: Unsubscribe from marketing emails at any time

7. Security

We implement reasonable technical and organizational measures to protect your data, including encrypted connections, access controls, and secure storage. However, no method of transmission or storage is 100% secure.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the email address associated with your account.

9. Contact

For privacy-related questions or to exercise your data rights, contact us at privacy@fullstackhvac.com.