Privacy Policy

1What this policy covers#

This policy covers AOS Sites at site.agency-os.ai: the chat where AOS designs your site, your free preview, the owner dashboard, and the emails and texts we send you. In it, “we” and “us” means Agency OS LLC, which runs AOS Sites, and “you” means a business owner or anyone else who uses it.

It doesn’t cover the people who visit a website built with AOS Sites. For them, the business that owns the site is responsible, and that site has its own privacy page. We handle their information only for that business (see section 8).

2What we collect#

What you give us

• Account details: your email address, your name, and a password if you set one. Passwords are stored by our sign-in provider as a one-way hash; we never see them.
• Your business: what you tell AOS in the chat, such as your business name, town, website and social links, what you’re known for, your best customers and what visitors should do, plus the logo and photos you upload and the brand choices you make.
• Conversations: your chats with AOS while it designs your site, and your messages to our support team.
• Feedback: the thumbs up or down you give a section of your site, and any reason you add.
• Phone number: only if you turn on lead-alert texts, with a record of the consent wording you agreed to and when.
• Billing: Stripe takes your card and billing address. We receive your plan, invoices, the card’s brand and last four digits, and payment status, never the full card number.

What we look up about your business

• Your Google listing (through Google Places): name, address, phone, hours, category, rating and photos, so you can confirm it’s you and so AOS knows your business.
• Your current website, if you give us its address: we read its public pages (through Firecrawl) for your services, wording and brand.

What we collect automatically

• Network and device: your IP address and browser details reach our hosting providers with every request. Where we use your IP address to limit abuse (for example, how many previews one network can start in a day), we store a one-way hash of it, not the address itself.
• Cookies: a few needed to run the service, such as keeping you signed in, and only with your OK in our consent banner, Meta’s pixel and a referral cookie. The Cookie Policy lists each one.
• Where you came from: when you arrive from an ad or a tagged link, we record its campaign tags (such as utm_source) and ad click ID, the website you came from, and the page you landed on, without the rest of the address. Your browser keeps a random ID for that visit in its session storage, not a cookie, so we can connect it to your account if you sign up.
• Referral links: when you arrive through someone’s referral link, we record the code, the time, the website you came from and a hash of your IP address (see the Royalty Program Terms).

3How we use it#

• To design, build and run your site: AOS uses your business details, uploads and answers to design your brand kit and pages, and to publish, host and connect your domain when you go live.
• To run your account: sign-in, security, billing, support and the alerts you choose.
• To email you: service emails (sign-in codes, receipts, renewal reminders, site alerts) and, after you build a preview, a few emails about taking it live. Every marketing email has a one-click unsubscribe.
• To prevent abuse: rate limits, spam checks and fraud checks, including on referrals.
• To improve AOS Sites: we look at how the service is used and at section feedback. When an owner gives a section a thumbs up, our team may add its layout to a library of design examples AOS learns from. AOS is instructed to learn from the design, never to copy a business’s words, facts or photos.
• To follow up with you: your contact details and preview status go into our own customer system, Agency OS, run by the same company, so our team can help you. If you opt in, your site’s leads can be sent there too.
• To show off designs, only with your permission: the “Fresh from AOS” gallery shows a home page only when its owner tapped “Yes, feature it”. You can change your mind at any time.
• To meet legal duties: tax, accounting and responses to valid legal requests.

We don’t sell your personal information. If you accept ad measurement in our consent banner, we share limited information with Meta to measure our own ads: the pages you visit on site.agency-os.ai and, when you take a step such as verifying your email or booking a call, a one-way hash of your email and phone number. Some state laws call this “sharing”. You can say no, or change your mind any time with “Your privacy choices” at the bottom of our pages, and a Global Privacy Control signal counts as no.

4AI processing#

AOS, our AI designer, runs on models from OpenAI (the chat that gets to know your business), Google Gemini and Anthropic (designing and writing your site, and the AOS assistant that answers your visitors). To do that, we send those providers the business details, uploads and messages the task needs.

We use their business APIs, not their consumer apps, and we don’t give them permission to train their models on your content. Each provider may keep what we send for a short time to operate and secure its service, under its own terms.

AI output can be wrong. AOS is built not to invent facts about your business, such as licences, years, ratings or prices, but please review your site before you publish it. The Terms of Service say more.

5Information from Google#

Signing in with Google. If you choose “Continue with Google”, Google tells us your name, email address and profile picture. We use them only to create your account and sign you in. We don’t ask for access to your Gmail, Calendar, Drive or any other Google data. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Google Maps Platform. We use Google Places to find your business listing. Google’s handling of that request is covered by the Google Privacy Policy. We keep listing details only as long as Google’s terms allow, and we don’t copy Google’s photos or review text onto your published site.

6Who helps us run AOS Sites#

These providers process personal information for us, only to provide their service and under contracts that limit what they may do with it:

When you book a Launch call, Calendly holds the booking for us; your name, email, phone number, business name and preview link go to it. We also share information when the law requires it, to protect people or our service from harm or fraud, with your permission, or as part of a merger or sale of our business, in which case this policy keeps applying to it.

7Where your information is processed#

AOS Sites is for businesses in the United States, and we and our providers process information mainly in the United States. Some providers, including AI providers, may process it in other countries, with safeguards set out in their contracts with us.

8Visitors to sites we host#

When someone fills in a form, chats with AOS or texts a business on a site built with AOS Sites, the business is responsible for that information. We process it only on the business’s behalf and instructions, as its service provider (a “processor”): to deliver leads to the owner, run the chat and keep the site free of spam. We never sell it or use it for our own marketing.

Every site we host has its own privacy page naming the business. If a visitor contacts us about their information, we pass the request to the business within 5 business days and help the business answer it.

9How long we keep it#

When you delete your account, we delete your information within 30 days, and from backups as they cycle out, except what the law requires us to keep or what we must hold for a legal claim.

10Your choices and rights#

You can ask us to:

• tell you what personal information we hold about you and give you a copy;
• correct it;
• delete it, or delete your whole account;
• stop marketing emails (use the unsubscribe link) or texts (reply STOP).

Email support@site.agency-os.ai from the address on your account. We confirm it’s you with a sign-in code and answer within 30 days. You can also ask someone to act for you (an authorized agent); we’ll ask them for proof and may need to confirm with you. If we say no, we’ll explain why, and you can reply to appeal; we’ll answer the appeal within 45 days.

Depending on where you live, including California and other US states, you may have further rights, such as to opt out of the sale or sharing of personal information. We don’t sell it, and we share it with Meta for ad measurement only if you accept. Opt out any time with “Your privacy choices” at the bottom of our pages; we treat a Global Privacy Control signal from your browser as an opt-out. We won’t treat you differently for using any of these rights.

11Security#

We encrypt information in transit, keep each business’s data separate with database access rules, keep provider keys on our servers only, store network addresses and draft keys as one-way hashes, and keep an audit log of account and staff actions. No system is perfectly secure. If you find a security problem, please tell us at support@site.agency-os.ai.

12Children#

You must be 18 or older to create an AOS Sites account. AOS Sites and the sites we build aren’t directed to children under 13, and we don’t knowingly collect their personal information. If you think a child has given us information, tell us and we’ll delete it.

13Changes to this policy#

If we change this policy, we’ll post the new version here with a new date. If a change is significant, we’ll email account holders before it takes effect.

14Contact#

Questions or requests: support@site.agency-os.ai, or write to Agency OS LLC, 4131 N. Central Expressway, Suite 900, Dallas, TX 75204.