Privacy Policy

Draft — July 2026

What we collect

Data	Why	Where it lives
Intake details (business info, content, images)	To build your website	Supabase (database + storage)
Account email & login	Portal access, build updates	Supabase Auth
Emails we send you (build updates, notifications)	Keeping you posted on your build	Resend (our email delivery provider)
Emails you send us	Support on your build	Microsoft 365 mailbox
Payment records	Billing (we never see card numbers)	Stripe
Sign-off records (IP, timestamp, draft version)	Evidence of your approval	Supabase
Basic site analytics (aggregate)	Improving our service	Cloudflare

What we don't do

We don't sell or rent your personal information.
We don't use your content for anything except building and hosting your site.
We don't run third-party advertising trackers on germini.ai or on the sites we build. We do embed a Google Map on client sites that show a location, which loads content from Google in the visitor's browser — see "Google Maps on the sites we build" below for exactly what that means.

Who we share with

Only the service providers we need to run the product. This is the complete list:

Supabase — database, login accounts, and file storage for your intake content and images.
Cloudflare — hosting for germini.ai and for the sites we build, plus aggregate analytics.
Stripe — payments. Card numbers go straight to Stripe; we never see them.
Resend — delivers every email we send: build updates, notifications, and every message relayed from a form on a site we built.
Microsoft 365 — the mailbox that receives email you send us.
GitHub — each site we build is kept in a private repository, which holds the site's code and the content you gave us.
Google — the Places API looks up your business details during intake (name, address, rating, reviews). On sites we build that show a map, the visitor's browser also contacts Google directly — see "Google Maps on the sites we build" below.
OpenAI — when you ask us to generate an image, your description of it is sent to OpenAI's image generator. Descriptions are screened before they are sent.
Pexels and Openverse — stock image libraries we search when sourcing licensed photos for your site.
UptimeRobot — checks that client sites are up. It stores the site's address and an alert email for us; no visitor or customer personal information is sent to it.

Each processes data under their own security terms. We disclose data if legally required.

Form relays on the sites we build

The websites we build for our clients can include two kinds of form. Both are relays, and both work the same way:

The contact form. A visitor enters their name, email address, an optional phone number, an optional topic, and a message. Submitting it sends one email to the business.
The appointment-request feature. A visitor picks a service, a preferred date and time, and enters contact details. Submitting it sends one email to the business. If the business accepts, declines, or suggests another time, one email goes back to the visitor.

Here is exactly how that data is handled, for both forms:

Transient relay, nothing stored. The message travels from the visitor's browser through our relay to the business's email inbox. Nothing is written to any database. Once the email is delivered, we hold no copy of the message and cannot retrieve, resend, or delete it — there is nothing to delete on our side.
The business is the data controller. The business that receives the email decides what happens to the visitor's information from then on. Visitors who want to know how their message is used, or want it corrected or deleted, should contact that business directly.
Germini is a processor and mere conduit. We transmit the message on the business's behalf and do nothing else with it. Our email delivery provider, Resend, processes the message solely to deliver it.
Direct communication afterward. After the first emails, the visitor and the business communicate directly by email; Germini is not part of that conversation and does not see it.

Google Maps on the sites we build

When a client gives us a business address, we embed a Google Map on their site so visitors can find them. You should know what that means for a visitor's privacy:

The visitor's browser contacts Google directly. The map is an embedded frame loaded from google.com. When it loads, the visitor's browser sends Google their IP address and whatever else Google's embed collects, and receives whatever Google sets, including cookies. This happens between the visitor and Google — the data does not pass through us, and we cannot see it or control it.
What Google does with it is governed by Google's policies, not ours. Google's privacy policy applies to that exchange.
The "Get directions" button opens Google Maps. It hands off to Google Maps, which may ask the visitor for their location to plot a route. That prompt comes from Google, not from us. The sites we build never ask for a visitor's location themselves and do not load Google's Maps JavaScript API.
We send Google nothing about the visitor. We put the business's address in the map; we do not send visitor data to Google.

Reviews on the sites we build

When a client asks us to show their reviews, we take a copy of their Google reviews at the time we build the site and lay them out as part of the design. This means:

Real reviewers' names, ratings, review text, and dates are republished on the client's site, exactly as they appear on Google. We never reword or invent a review; a long one may be shortened with an ellipsis. Google requires us to link back, so each reviews section includes a "Read more reviews on Google" link.
It is a snapshot from build time, not a live feed. The reviews shown are the ones that existed when the site was built. They do not refresh. If a reviewer later edits or deletes their review on Google, the copy on the client's site does not change.
Reviewers who want their review taken down from a client's site should contact the business whose site it appears on, or ask us through that business. Changing or deleting the review on Google will not remove the copy on the site by itself.
Yelp is a link only. Where a client has a Yelp page, we add a button linking to it. We do not copy Yelp review text, ratings, or counts onto the site.

Retention

Active accounts: kept while your account or site is active.
Unapproved drafts and expired intakes: deleted or anonymized within 12 months.
Sign-off and payment records: kept as long as legally required for business records.

Your choices

Access, correct, or delete your data: email us from your account address.
Region-specific rights: see "Your rights by region" below for what applies where you live.
Marketing email: every marketing message has an unsubscribe link; build-related emails are transactional.

Your rights by region

We are a US-based business serving US customers, but visitors and customers may be located elsewhere. Depending on where you live, the laws below may give you specific rights over your personal information. [REGIONAL APPLICABILITY AND TRANSFER MECHANISMS TO BE CONFIRMED BY COUNSEL]

European Union / EEA — GDPR

If you are in the EU or EEA, we process your personal data on these lawful bases: performance of a contract (building and hosting your website, running your portal account), legitimate interests (service improvement, security, preventing fraud and abuse), consent (marketing email, which you can withdraw at any time), and legal obligation (tax and payment records).

You have the right to access your data, correct it, have it erased, restrict or object to its processing, receive it in a portable format, and withdraw consent where processing is based on consent. You may also lodge a complaint with your local supervisory authority. Because we operate from the United States, your data is transferred to and processed in the US; we rely on appropriate safeguards such as standard contractual clauses with our service providers.

Brazil — LGPD

If you are in Brazil, the Lei Geral de Proteção de Dados gives you the right to confirm whether we process your data, access it, correct incomplete or outdated data, request anonymization or deletion of unnecessary or excessive data, request portability, delete data processed with your consent, learn who we share your data with, and revoke consent. We process personal data under legal bases equivalent to those listed for the GDPR above. You may also file a complaint with the ANPD (Autoridade Nacional de Proteção de Dados).

California — CCPA/CPRA

If you are a California resident, you have the right to know what personal information we collect and how we use it (this policy is that disclosure), to access it, to correct it, to delete it, and not to be discriminated against for exercising these rights. We do not sell your personal information and we do not share it for cross-context behavioral advertising, so there is nothing to opt out of. We do not collect sensitive personal information beyond what is needed to deliver the service, and we use it only for that purpose. You may use an authorized agent to submit a request on your behalf; we will verify the request before acting on it.

Canada — PIPEDA

If you are in Canada, we collect, use, and disclose your personal information with your consent and only for the purposes described in this policy. You have the right to access the personal information we hold about you, to challenge its accuracy and have it corrected, and to withdraw consent (subject to contractual limits, such as data we need to host your active site). You may also file a complaint with the Office of the Privacy Commissioner of Canada.

How to exercise these rights

Email us from the address on your account, or use the contact details in your client portal, and tell us which right you are exercising. We verify every request (normally by confirming control of the account email) and respond within the window the applicable law sets. If we deny a request, we will explain why and how to appeal. Note that messages and appointment requests relayed through client websites are not stored by us — for those, contact the business you sent the message to (see "Form relays on the sites we build" above).

Contact

Privacy questions: reply to any Germini email or use the contact details in your client portal.