Privacy Policy

1. Who we are and what this policy covers

DesignTech AI, Inc. ("DesignTech AI", "we") operates DesignTech AI at designtech.app (including the Studio) and the designtech.ai website. We are the controller of the personal data described in this policy that we use for our own purposes: your account, billing, security, support and this website.

For Your Content (as the Terms of Use define it), including personal data in files you upload, pages you import or research, accounts you connect, and the visitors and leads your published pages collect, the organization that owns the workspace is the controller and we are its processor. We handle that data only on the organization's instructions, and questions about it should go to that organization first. Business customers can ask us for a data processing agreement at privacy@designtech.ai.

2. What we collect

• Account data: your email address, name, organization, role and workspace memberships.
• Sign-in and security data: one-time sign-in codes (stored only in a form we cannot read back), IP address, browser and device details, bot-protection signals, and a record of sign-ins and account changes.
• Billing data: the name, email and billing address you give at checkout, what you bought, and your credit ledger. Card details are collected and held by Stripe; we do not receive or store full card numbers.
• Your Content: files, text and prompts you provide; websites you import and pages the Service reads for your research; the brand system and outputs built from them; and data read from accounts you connect.
• Connected account data: the access grants that let the Service read from a connected account, and the content it reads from that account at your instruction. Connected accounts are read-only today; publishing to them is coming soon.
• Agent activity: the OAuth access grants you approve for agents, and a record of the requests made with them.
• Published page data: when you publish a page or share a tracked link, the pages set first-party cookies and record visits, reading, clicks and the details visitors enter in your forms, on your behalf.
• Support data: what you send us when you contact us.
• Usage and operational data: the work you run, its cost in credits, errors, and service logs.
• Website data: on designtech.ai, the pages you visit, how you arrived, your interactions with the page (including a recording of clicks, scrolling and mouse movement made by Microsoft Clarity), identifiers stored in cookies, and your IP address and browser details, collected through the analytics and advertising tags named in sections 6 and 7.

3. Personal data in content collected from the web

The Service reads web content for customers in two ways, described in section 6 of the Terms of Use: pages at addresses a customer gives it, read by our own reader, and research, for which the Service runs web searches and collects public pages and structured records through our data provider, Bright Data. Research currently collects a company's public LinkedIn page and recent posts, public YouTube videos with their transcripts, and public Reddit posts with their top comments, as well as ordinary web pages.

This content can include personal data about people who are not our customers: names, usernames, job titles, profile links, the text of public posts and comments, reaction counts, and whatever is said in a video. We collect only content that is publicly available without signing in, and we process it only to do the research that was asked for. It is kept in the workspace that asked for it, and it is not combined across customers, used to build profiles of individuals, or used for our own purposes.

The customer organization that asked for the research decides its purpose and is the controller of that data; we are its processor (see the Acceptable Use Policy for what customers may not do with it). It is kept until the customer deletes it or closes the workspace, and deleted as section 9 describes.

If you believe your personal data was collected through the Service, write to privacy@designtech.ai with the page, post or workspace concerned. We will help you reach the organization responsible, and act on the request ourselves where the law requires us to. A site owner can stop our page reader importing its pages with robots.txt; the Copyright Policy explains which reads that does not cover.

4. How we use personal data, and our legal bases

• To provide the Service: creating and securing accounts, running the work you ask for, billing, and support. Basis: performing our contract with you.
• To keep the Service safe and working: preventing fraud and abuse, enforcing our terms, debugging, and measuring cost and performance. Basis: our legitimate interests in running a secure, reliable service.
• To communicate with you about your account, security, billing and changes to our terms. Basis: contract and legitimate interests.
• To understand how this website is used and improve it. Basis: legitimate interests, or your consent where the law requires it.
• To comply with law, such as tax records and lawful requests from authorities. Basis: legal obligation.

We do not use Your Content to train or fine-tune AI models, and we do not make decisions about you that have legal or similarly significant effects by automated means alone.

5. AI processing

When you run AI work, the content needed for that request is sent to the model provider that performs it. Text, voice and music requests, GPT Image and the other video models are routed through Cloudflare AI Gateway, which we configure to request zero data retention and not to log or cache prompts or outputs. FLUX image and video requests go directly to Black Forest Labs through its own API.

We use model providers only under commercial terms that do not allow them to train on the content we send. OpenAI keeps image inputs that its safety systems flag as possible child sexual abuse material for review, even under zero data retention.

6. Who processes personal data for us

We share personal data only with the providers that operate parts of the Service for us, under contracts that limit their use of it, and only as far as each one needs:

• Cloudflare: application hosting, databases, file storage, sign-in email delivery, bot protection, AI request routing, and models hosted on Cloudflare Workers AI.
• Stripe: payments, invoices, subscriptions and saved payment methods.
• AI model providers: Anthropic, OpenAI, Google, Black Forest Labs, ElevenLabs, MiniMax and PixVerse receive the prompts and inputs for the requests they perform, when you use a feature or model they power.
• Bright Data: receives the web addresses, search queries and company names used for research, and returns search results, page content and structured records from public web pages and public social and company pages. Those records can contain personal data, such as names, usernames and the text of public posts and comments.
• Composio: holds the access grants for accounts you connect and carries content between the Service and those accounts.
• Google: Google Tag Manager and Google Analytics, used to measure visits to designtech.ai.
• LinkedIn: the LinkedIn Insight Tag on designtech.ai, which lets LinkedIn measure how our LinkedIn advertising performs and can be used to show our LinkedIn advertising to people who have visited this site. LinkedIn uses what it collects under its own privacy policy.
• Microsoft (Clarity): records how visitors use designtech.ai pages (clicks, scrolling and mouse movement) so we can see where pages are confusing.
• Pulsetic: the service-status badge on designtech.ai, which receives your IP address and browser details but no customer content.

We also share personal data with other members of your workspace as its settings allow; with third-party services you connect, at your instruction; with professional advisers; with authorities where the law requires it or to protect people's safety or our rights; and with a successor if our business is sold or merged, subject to this policy.

We do not sell personal data for money. The LinkedIn Insight Tag on designtech.ai is advertising measurement and targeting, which some US state laws call "sharing" personal data or "targeted advertising"; section 12 explains how to opt out. The app at designtech.app and the content in your workspace are never used for advertising.

7. Cookies and similar technologies

The app at designtech.app uses cookies that are strictly necessary to keep you signed in and to protect the Service. It does not load advertising trackers.

designtech.ai loads Google Tag Manager, which loads Google Analytics, the LinkedIn Insight Tag and Microsoft Clarity. These set cookies that recognise a returning browser. The site also shows a status badge from Pulsetic. None of the tags load if your browser sends a Global Privacy Control signal, and none are served to visitors in the European Economic Area, the United Kingdom or Switzerland, where they would need your prior consent. You can also block them with your browser's settings or a content blocker without losing access to the site. The Pulsetic status badge loads for every visitor.

Pages you publish from the Service set first-party cookies that identify a returning visitor, their session and the link they arrived by, so the publishing organization can measure its pages and attribute its leads. The publishing organization is responsible for any consent those cookies require.

8. International transfers

DesignTech AI is based in the United States, the Service runs on Cloudflare's global network, and our providers may process data in the United States and other countries. Where we transfer personal data out of the European Economic Area, the United Kingdom or Switzerland, we rely on the European Commission's Standard Contractual Clauses (and the UK addendum) or another lawful transfer mechanism. No choice of data region is offered on the standard service.

9. How long we keep it

• Your Content, outputs, run history and leads stay in your workspace until you delete them or close the workspace.
• Closing a workspace ends access and withdraws its published content at once. 30 days later the workspace is permanently deleted, including its content, files, run history, leads and memberships, and the former owner is emailed confirmation. Recovery copies of databases and stored files expire 30 days after that deletion.
• Accounts that belong to no other workspace are deleted with it, except that we keep the account record linked to billing and the credit ledger.
• Billing records, invoices and the credit ledger are kept for as long as tax and accounting law requires.
• Operational logs are kept for up to seven days. Security audit records of sign-ins, membership and account changes are kept for the life of the Service.
• Support correspondence is kept for as long as needed to resolve the matter and for our records.

10. Security

Each workspace has its own isolated database, files are stored privately and served only after authorization, sign-in uses single-use email codes, and access to a workspace requires membership of it. More detail is on the Trust page. If we confirm a security incident affecting your personal data, we will notify you without undue delay, and within 72 hours of confirming it where we are required to.

11. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal data, to object to or restrict how we use it, to withdraw consent, and to appeal our decision on a request. Workspace admins can export a workspace, including its content, brand system and leads, at any time from the Account panel, and a workspace owner can close it there.

To make a request, write to privacy@designtech.ai. We will verify your identity, reply within 30 days (or sooner where the law requires), and not treat you differently for exercising your rights. If the request concerns data a customer organization controls, we will pass it to them. You may also complain to your local data protection authority.

12. Notice for US state privacy laws

This section is our notice at collection and privacy notice under the California Consumer Privacy Act and the comparable laws of other US states. It covers the 12 months before the effective date above.

• Categories we collect: identifiers (name, email address, IP address, cookie and device identifiers); customer records and commercial information (billing details, purchases and the credit ledger); professional information (organization and role); internet activity (use of the Service, and visits and interactions on designtech.ai); approximate location derived from IP address; and the content of messages you send us. We do not collect sensitive personal information to infer characteristics about you.
• Sources: you, your organization and its members, your browser and device, our payment processor, and, for research customers run, public web pages (section 3).
• Purposes: those listed in section 4.
• Retention: as section 9 describes for each category. Website analytics and advertising data are kept for the period set in each provider's tool, and deleted by the provider when it ends.
• Sale and sharing: we do not sell personal information for money. Identifiers and internet activity from designtech.ai are made available to LinkedIn through the LinkedIn Insight Tag for advertising measurement and targeting, which these laws may treat as "sharing" or "targeted advertising". Nothing from the app at designtech.app, and none of the content in any workspace, is sold or shared. We do not knowingly sell or share the personal information of anyone under 16.

Opting out. These tags run in your browser, so the opt-out works there: designtech.ai does not load them when your browser sends a Global Privacy Control signal, and we treat that signal as your request to opt out of sale, sharing and targeted advertising. You can also block them with a content blocker.

Your rights. Depending on your state, you can ask to know and access the personal information we hold about you, to correct it, to delete it, to receive a portable copy, and to opt out as described above. Make a request, or have an authorized agent make one for you, by writing to privacy@designtech.ai. We will verify the request, respond within the time the law allows (45 days in California), and not discriminate against you for making it. If we decline a request you may appeal by replying to our decision, and we will answer the appeal within the time the law allows.

13. Children

The Service is not intended for anyone under 18, and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact privacy@designtech.ai and we will delete it.

14. Changes to this policy

We will update this policy when our practices or providers change. The effective date and version at the top show which version you are reading. We will tell account holders about material changes by email or in the Service before they take effect.

15. Contact

DesignTech AI, Inc.. Privacy questions and requests: privacy@designtech.ai. Other legal matters: legal@designtech.ai.