Privacy policy

1. Data we collect from you

If you have an account:

• Your email address and password. The password is stored encrypted; we cannot read it.
• The brand details you choose to add: agency name, logo, website and contact email.
• Your generated proposals, your prospects and your purchase history.

2. Data we collect without an account

You can generate a proposal without signing up. In that case we store a random identifier in a cookie and an irreversible digest of your IP address, solely to know how many free generations have been used from there.

That digest cannot be turned back into your IP and is used for nothing else.

3. Third-party personal data

When someone fills in the contact form of a site published with KOXOTA, we store their name, their email or phone and their message, and forward them to the business.

For that data the controller is the freelancer or agency who published the site; we only process it on their instructions. If you are that person and want a message of yours deleted, write to us.

4. Cookies

We use only two, and neither is for advertising or cross-site tracking:

• __session — keeps you signed in. Without it you cannot log in.
• koxota_anon_id — anonymously identifies someone generating without an account, to manage the free generation.

5. Who we share data with

We work with providers that process data on our behalf. Each receives the minimum needed for its function:

• Supabase — accounts, database and storage.
• Google Cloud and Firebase — application hosting.
• Stripe — payments. Your payment details go straight to them; we never see them.
• Resend — email delivery.
• OpenRouter — AI generation of the sites. Receives the public information of the business being redesigned.
• Google Places — business search. Receives what you type in the search box.
• Unsplash — stock images for the proposals.

6. What we do not do

We do not sell your data. We do not pass it to advertisers. We do not use your proposals or prospects to train our own models, and we do not show them to other users.

KOXOTA staff can enter your account to give you support. Every one of those accesses is logged with who entered, when, and why.

7. How long we keep it

For as long as your account is open. If you close it, we delete your personal data and your proposals, except billing records, which the law requires us to keep.

Proposals generated without an account are deleted after a while if nobody claims them.

8. Your rights

You can ask us for a copy of your data, correct it, delete it or take it elsewhere. Write to info@hostcarriel.com from your account email and we will reply within a reasonable time.

Much of it needs no request: from your dashboard you can edit your brand, delete proposals and download any of them as a ZIP.

9. Where the data lives

Our providers host data in the United States and in the European Union. If you write to us from outside the United States, your data may be processed there.

10. Changes and contact

If we change anything significant we will let you know. For any privacy question: info@hostcarriel.com.