Privacy Policy - Type Site

1. What we collect

What you give us. Your name, business name, email, phone number and address. Everything you tell us about your business: services, hours, service area, pricing, license numbers, team members, photos, logos, videos and reviews. The content of your texts, iMessages, WhatsApp and RCS messages, emails, voice memos and form submissions. Your billing details, which go straight to Stripe; we see the last four digits of your card, not the number. If you connect accounts to us, we receive what those accounts share: your Meta Business Manager, ad accounts, pages, pixels and lead forms; your Google Business Profile, Search Console and Analytics; your existing website and domain settings; your Stripe account if you use our agency billing option.

Calls. When you call us, or we call you, we may record and transcribe the call. If you buy call tracking, we record, transcribe and summarize calls to your tracking numbers, which means we also collect the caller's number, the recording and what was said. Some of our calls are placed or answered by an AI voice assistant.

Collected automatically. IP address, device and browser type, pages viewed, links clicked, referring URLs, approximate location derived from IP, and timestamps, on our own sites and dashboards. We use cookies and similar technologies for this (Section 6).

From other sources. If you submit a lead form on Facebook or Instagram, click one of our ads, or book a call through a scheduling link, those platforms send us what you entered. For outreach to businesses, we use public business listings, websites and directories to find contact details and to learn about a business before we get in touch.

2. How we use it

To build, host, edit and market your website, your ads, your content and your listings.
To deliver your leads and your call summaries to you, and to track where leads came from.
To answer your messages and calls, including with AI assistants and automated replies.
To bill you, send receipts and renewal notices, and recover failed payments.
To send you account notices, service updates and, unless you opt out, offers.
To research your competitors and your market so the work we do for you is grounded in real data.
To train our team, improve our workflows and measure the quality of our AI output.
To detect fraud, abuse, chargebacks and misuse, and to enforce our Terms.
To comply with the law and respond to lawful requests.

3. AI processing

We use AI models from providers such as OpenAI, Anthropic and ElevenLabs to draft copy and designs, research competitors, write ads and content, summarize calls and messages, and answer routine questions. Your business information, messages and call transcripts may be sent to those providers to do that work. We use their business APIs, under terms that prohibit them from using your data to train their models. A person on our team reviews AI output before it is published for you.

4. Text messages and calls

Text is our main support channel. When you give us a mobile number you agree to receive texts from us about your account, your services, your leads, billing and offers, including automated texts and texts from AI assistants. Message and data rates may apply. Reply STOP to any marketing text to stop those; account and billing notices continue while you are a customer. Reply HELP or text (727) 301-5630 for help. We do not share your mobile number or your text opt-in with third parties for their own marketing.

Calls with our team may be recorded and transcribed. We say so at the start of a recorded call, and you can ask us not to record. Transcripts and recordings are stored with your account and used for service, training and dispute resolution.

5. Who we share it with

We share personal information only with the companies that help us deliver the service:

Hosting and infrastructure: Vercel, Supabase, GitHub, Hetzner and Cloudflare.
Payments: Stripe, and Zoho Books for invoicing on some agency and custom services.
Domains and email hosting: Vercel's registrar service and MXroute.
Advertising and search platforms, when you connect them or ask us to run them for you: Meta (Facebook and Instagram) and Google.
Messaging and email delivery: Linq, ManyChat and Resend.
Call tracking, recording and transcription: WhatConverts, Plivo and Fireflies.
AI providers: OpenAI, Anthropic and ElevenLabs, as described in Section 3.
Analytics and measurement on our own sites: Google Analytics, Google Tag Manager, the Meta Pixel and Umami.
Your agency, if you came to us through a white-label partner. They see your account the way we do, so they can support you under their brand.
Professional advisers, and authorities, when the law requires it or when we need to defend a claim, collect a debt or respond to a chargeback.
A buyer or successor if our business is sold or merged, under this same policy.

Each of these companies is limited to using your data to provide their service to us. We do not sell personal information and we do not share it with data brokers.

6. Cookies, pixels and analytics

On typesite.io and our dashboards we use first-party cookies to keep you logged in and remember your preferences, and third-party tools to understand traffic and measure our ads: Google Analytics, Google Tag Manager and the Meta Pixel. The Meta Pixel lets Meta show our ads to people who visited our site and measure whether they worked, which some state laws treat as "sharing" for cross-context advertising. You can opt out of that by blocking cookies in your browser, by using the ad settings inside your Facebook and Google accounts, or by turning on the Global Privacy Control signal, which we honor. We do not currently respond to older "Do Not Track" browser signals.

7. The websites we build for you, and their visitors

When we build and host a website for your business, the people who visit it and fill in its forms are your customers, not ours. You decide what your site asks for and why. We process that data on your behalf: form submissions are stored and forwarded to you, and privacy-friendly analytics (Umami, which sets no cookies) count visits. We do not use your visitors' data for our own purposes and we do not sell it. You are responsible for having a privacy policy on your site that fits your business and your local law; we can add a standard one for you on request.

If we run ads for you, lead information from your Meta lead forms and landing pages is collected under your ad account and your business's terms, and we deliver it to you.

8. How long we keep it

Account, website and campaign data: while your account is active, plus 30 days after cancellation so you can restart. After that it is deleted or anonymized, except as below.
Messages, call recordings and transcripts: up to three years, because they are how we resolve disputes and prove what was agreed.
Billing records: seven years, as tax and accounting law requires.
Records of a chargeback, a dispute, a legal claim or an abuse investigation: until the matter is closed and any limitation period has passed.
Preview sites that were never published: up to 30 days.
Business outreach records: until you ask us to stop contacting you, then a suppression record so we do not contact you again.

9. Security

Data is encrypted in transit and at rest with our hosting providers. Access inside our team is limited to the people who need it, staff dashboards blur customer contact details by default, and payment card numbers never touch our systems. No system is perfectly secure; if we discover a breach affecting your personal information we will tell you and any regulator the law requires, without unreasonable delay.

10. Your choices and rights

Whoever you are and wherever you live, you can ask us to show you the personal information we hold about you, correct it, delete it, give you a copy of it, or stop using it for marketing. Email support@typesite.io from the address on your account, or see the data deletion page for the one-step version. We respond within 30 days and we never charge for a request or treat you differently for making one. We may ask you to confirm your identity first.

California. The California Consumer Privacy Act gives you the rights above plus the right to opt out of "sharing" for cross-context behavioral advertising (Section 6) and the right to know the categories of information we collect, which are listed in Section 1. We have not sold personal information in the last 12 months and we do not use or disclose sensitive personal information for anything other than providing the service.

Other US states. Residents of states with privacy laws (including Virginia, Colorado, Connecticut, Texas, Oregon, Florida and others) have equivalent rights and can appeal a decision by replying to our response.

Canada, the UK and the EU. We serve businesses in Canada and occasionally elsewhere. If you are there, we process your data on the basis of our contract with you, our legitimate interest in running and marketing our business, and your consent where it is required (for marketing texts, for example). Your data is stored and processed in the United States. You have the rights above plus the right to complain to your local data protection authority.

11. Children

Our services are for businesses and adults. We do not knowingly collect information from anyone under 18, and under 13 never. If you think we have, email us and we will delete it.

12. Where your data lives

We are a US company and our systems and vendors are mostly in the United States. If you use our services from outside the US, your information will be transferred to and processed in the US, where privacy law may differ from your country's.

13. Changes to this policy

When we add a service or a vendor we update this page and change the date at the top. For changes that reduce your rights or expand what we collect, we email or text active customers first.