Privacy Policy
Last updated: July 9, 2026
This policy explains what information DoxtAI collects, how we use it, and the choices you have. The short version: we collect what we need to build and run your website, we never sell it, and you can ask us to delete it.
1. What we collect
Account information: your name, email address, and password (managed by our authentication provider, Supabase). If you sign in with Google, we receive your name and email from Google.
Business information: what you tell us about your business — name, location, services, phone number, content, photos, and anything you submit through the website brief or your dashboard. We use this to build and operate your website.
Payment information: payments are processed by Stripe. We never see or store your full card number — Stripe handles that. We store your subscription plan, billing period, and payment status.
Usage information: standard technical data such as pages visited, browser type, and approximate location, used to operate and improve the site.
2. How we use it
To provide the service: building, hosting, and maintaining your website, processing payments, and supporting your account.
To communicate with you: service updates, build progress, billing notices, and support replies. We do not sell your information to anyone.
3. Who we share it with
We use a small number of service providers to run DoxtAI: Stripe (payments), Supabase (authentication and database), and Vercel (hosting). Each receives only the information needed to do its job, and each has its own privacy and security obligations.
We do not sell or rent personal information. We disclose information only when required by law or to protect our legal rights.
4. Cookies
We use cookies that are necessary for the service to work — keeping you signed in and remembering your session. We may also use analytics to understand how the site is used. You can control cookies through your browser settings.
5. Data retention
We keep your account and business information for as long as your account is active. If you cancel and want your data deleted, email us at info@doxtai.com and we will delete it, except where we are required to keep records (for example, billing records for tax purposes).
6. Security
All traffic to DoxtAI is encrypted with SSL. Access to customer data is restricted to the team members who need it to provide the service, and our database enforces row-level access controls.
7. Your rights
You can ask us at any time to show you the personal information we hold about you, correct it, or delete it. Email info@doxtai.com and we will respond promptly. Depending on where you live, you may have additional rights under laws such as the CCPA.
8. Changes to this policy
If we make material changes to this policy, we will notify you by email or through your dashboard before they take effect.
9. Contact
Questions about privacy? Email us at info@doxtai.com.
See also our Terms of Service.