Privacy Policy

For the data of Htech AI account holders, Htech International LLC is the controller:

Htech International LLC
8 The Green, Ste D, Dover, DE 19901, USA
Email: office.htechinternational@gmail.com

For the data of visitors and customers of the websites and stores that our customers build with Htech AI, the owner of that website or store is the controller and we only process the data on their behalf (see section 11).

• Account data: your email address, your password (stored only in encrypted, hashed form, which we cannot read), your name if you give it, your language, and when you accepted our Terms.
• Business and website data: your business name and the answers you give when creating a site (for example your industry, city, ideas, links and wishes), the texts and design of your sites, the logos and photos you upload, your products, prices, store settings and connected domains.
• Content Studio: the topics you enter and the texts we generate for you.
• Chat editor: the messages you write, the AI's replies and the history of changes, so that you can undo them.
• Usage records: for every AI action we record the feature, the AI model, the amount of text processed, the cost, whether it succeeded and when, linked to your account and business. We use them for limits, to prevent abuse and to set our prices.
• Technical data: your IP address, browser and device information, and request logs, which our hosting provider processes to deliver pages and protect the service from attacks.
• Messages you send us by email.
• When paid plans are available: billing data such as your billing address and tax number. Card payments are processed by Stripe; we only receive limited details such as the card brand, the last four digits and the country, never the full card number.

We do not ask for sensitive data (such as health data). Please do not upload it.

• To provide Htech AI: creating your account, building, hosting and publishing your sites and stores, running the AI features and storing your files. Legal basis: performance of our contract with you.
• To keep Htech AI safe: preventing fraud, abuse and attacks, applying usage limits and checking AI requests against our rules. Legal basis: our legitimate interest in a secure service.
• To understand our costs and improve Htech AI, using usage records and statistics. Legal basis: our legitimate interest in running and improving our business.
• To send you service emails, such as account confirmation, password reset and important changes. Legal basis: performance of our contract.
• To comply with the law, for example tax and accounting rules or requests from authorities. Legal basis: legal obligation.
• Marketing emails: only if you agree to receive them. We do not send any at the moment.

Where we rely on legitimate interests, you can object at any time (see section 9).

To write and change your website texts and to create social media texts, we send the information needed for the task to our AI provider, OpenAI: for example your business name, the answers from the site creation form, your chat messages, the topic you enter and the current texts of your site. We also use OpenAI's moderation service to check that texts follow our rules.

• Under OpenAI's terms for business customers, data sent through its API is not used to train its models. OpenAI may keep it for up to 30 days to detect abuse, unless the law requires longer.
• The photos you upload are not sent to the AI at the moment.
• We do not use AI to make decisions that have legal or similarly significant effects on you.

We do not sell your personal data and we do not use advertising trackers. We share data only with service providers that help us run Htech AI and that process it on our instructions:

• Supabase, Inc.: database, accounts and sign-in, and the emails for account confirmation and password reset. Our database is located in London, United Kingdom.
• Cloudflare, Inc.: hosting of the platform and of our customers' sites, content delivery, protection against attacks, storage of uploaded files and security certificates for domains. Cloudflare works through a global network.
• OpenAI, L.L.C.: AI text generation and moderation (United States).
• Resend, Inc.: delivery of our service emails, once we switch to our own email sending (United States).
• Stripe: payments, once paid plans and store payments are available.
• Google LLC: our email inbox (Gmail), when you write to us.

We may also disclose data when the law requires it, to protect our rights or the safety of others, or to a buyer or successor if our business is sold or reorganised; in that case this Policy will continue to protect your data.

Htech International LLC is based in the United States, and some of our providers process data in the United States or other countries outside the European Economic Area and the United Kingdom. When this happens, we rely on safeguards recognised by law, such as the European Commission's Standard Contractual Clauses (with the UK addendum) or the EU-US Data Privacy Framework where the provider is certified under it. You can ask us for more information about these safeguards.

• We keep your account and business data while your account exists.
• When you delete your account, we immediately delete your account and the businesses where you are the only owner, with their websites, stores, orders, uploaded files and content. Copies in our providers' backups are removed within about 30 days.
• We keep the AI usage records, but without any link to you or your business.
• Technical logs are kept for a short time, usually no longer than 30 days.
• If paid plans apply, we keep invoices and payment records for as long as tax and accounting laws require.
• Emails you send us are kept as long as needed to deal with your request.

We only use what is strictly necessary for Htech AI to work, so we do not show a cookie banner:

• Sign-in cookies (names starting with "sb-"): keep you signed in.
• NEXT_LOCALE: remembers the language you chose (1 year).
• price_currency: remembers the currency you chose on our pricing page (1 year).
• In online stores built with Htech AI, the shopping cart is saved in the visitor's browser (local storage). It only contains product codes and quantities and is never sent to us until the visitor places an order.
• htech_store: remembers which of your online stores your dashboard shows (1 year).

Visitor statistics on websites built with Htech AI are anonymous and use no cookies or local storage. We count page views, time spent on a page, the website the visitor came from, the country (from the network, not stored with the visit) and the type of device. The visitor's IP address is only used to compute an anonymous code that changes every day; it is never stored, and the daily codes are deleted after two days. We process these statistics on behalf of the website's owner.

We do not use analytics or advertising cookies. If we ever add them, we will ask for your consent first.

Depending on where you live, you have the right to access your data, to correct it, to have it deleted, to restrict or object to its processing, to receive it in a portable format and to withdraw any consent you gave.

• In Settings, under My data, you can download all your data and delete your account yourself, at any time.
• For any other request, write to office.htechinternational@gmail.com. We answer within one month and may ask you to confirm your identity.
• If you live in the European Union or the United Kingdom, you can also complain to your data protection authority (in the UK, the ICO).
• We do not sell personal data and we do not share it for cross-context behavioural advertising, as defined by US state privacy laws.

We protect your data with encrypted connections (HTTPS), database rules that keep each business's data separate from all others, hashed passwords, checks on uploaded files and strict access to our secret keys. No system is completely secure, but if a security incident affects your data, we will inform you and the authorities as the law requires.

If you visit a website or buy from a store built with Htech AI, the business that owns that site is responsible for your data and should explain in its own privacy policy how it uses it. We host the site and process the data (for example the details of your order) only on that business's behalf. Please send requests about your data to the business. If you contact us, we will forward your request to them and help them answer it.

Htech AI is meant for adults running a business and is not intended for anyone under 18. We do not knowingly collect data from children. If you think a child has given us personal data, please contact us and we will delete it.

We may update this Policy when our service or the law changes. The date at the top shows the latest version. If the changes are important, we will tell you by email or in your dashboard before they take effect.

For any question about your privacy, write to office.htechinternational@gmail.com or to Htech International LLC, 8 The Green, Ste D, Dover, DE 19901, USA.