Privacy Policy

Effective date: July 10, 2026 Last updated: 2026-10-20

This Privacy Policy explains how Titan Web Design, a sole proprietorship ("Titan Web Design", "Titan", "we", "us", or "our") collects, uses, shares, and protects information in connection with our automated web design service available at titanwebdesign.net (the "Service"). Titan Web Design is operated in the United States.

By using the Service, submitting an intake form, or subscribing to a plan, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with it, please do not use the Service.

This Policy should be read together with our Terms of Service and Acceptable Use Policy.

1. About our Service and who we are

Titan Web Design is an automated web design service. You choose a design, submit an intake form with information about your business, and our artificial intelligence ("AI") engine automatically generates a FREE demo website for you. If you subscribe to a paid plan, the demo becomes your live website on your own domain, and you can request edits by typing them into your dashboard.

Most of our Service - including site generation, edits, customer support, and refund handling - is operated end to end by automated systems and AI, with no guaranteed human review of any individual request. Please keep this in mind when deciding what information to submit.

Our typical customers are small United States businesses, including blue-collar service businesses such as plumbers, HVAC contractors, electricians, roofers, and landscapers. The Service is intended for business use by business owners and their authorized representatives.

Two kinds of websites, two different data roles. This Policy covers:

• The Titan Web Design marketing site at titanwebdesign.net and your customer account and dashboard ("Titan Properties"); and
• The data you submit to us so we can build and host your website.

For the websites we generate and host for you, you (the customer) are responsible for the content of your own site and for the privacy practices and any privacy policy of that site, including any data your site collects from your own visitors. We act as your service provider/processor for that purpose. This Policy does not govern how your generated website treats its visitors; that is your responsibility as the site owner.

2. Information we collect

We collect the following categories of information.

2.1 Information you provide through the intake form

When you request a demo or build a site, you submit business and content information, which may include:

• Business name, address, phone number, email address, and business hours.
• Your Google Business Profile link and information drawn from that profile (for example, business name, address, hours, categories, photos, and reviews you have made public).
• Your logo, brand colors, and other brand assets.
• Page content, headlines, descriptions, services, products, and pricing you want displayed.
• Photos and images you upload.
• Social media links.
• Any other content you choose to include in your website.

Some of this information may identify you or other individuals (for example, a personal phone number, a personal email address, or photos of people). You are responsible for ensuring you have the rights and any necessary consents to submit it (see Section 9).

2.2 Account credentials

If you create an account, we collect your email address, a password (stored only in hashed form by our authentication provider), and related authentication data needed to log you in and secure your account.

2.3 Payment information

When you subscribe or buy credits, payment is processed by Stripe. Stripe collects and processes your payment card or bank information directly. Titan does not receive or store your full card number. We receive limited billing details from Stripe, such as your name, billing email, the last four digits and brand of your card, billing ZIP/country, subscription status, and transaction history, so we can manage your subscription, credits, refunds, and receipts.

2.4 Support communications

When you contact us through chat, email (for example, support@titanwebdesign.net), or the dashboard, we collect the contents of your messages and any information you choose to include, along with metadata such as timestamps and your account identifiers. Our support is primarily handled by AI (see Section 4).

2.5 Usage, device, and analytics information

When you use the Titan Properties, we and our providers automatically collect technical information, such as:

• IP address, approximate location derived from IP, browser type, device type, and operating system.
• Pages viewed, links clicked, referring/exit pages, and timestamps.
• Where your visit came from (for example the advertisement, email, search engine or website whose link you followed, taken from the link's own tags and the referring page). On our marketing site we keep a random identifier in your browser's local storage (not a cookie, and never shared with anyone) so that we can remember where your first and most recent visits came from; if you later ask us for a free demo, that source is saved with your request. If you ask for more than one free demo with the same email address from different browsers or devices, we link those requests by that email address so we can tell which visit first brought you to us. If you turn ad measurement off, decline the banner, or your browser sends a Global Privacy Control or Do Not Track signal, from then on we stop linking your visits together: on your next visit we delete the record of where your earlier visits came from and remove the identifier from our visit records, we record only where each single visit came from, and we do not link a free demo request to your earlier visits or devices (the request still carries the source your own browser noted when you arrived).
• Log and diagnostic data, and information used for security, fraud prevention, rate limiting, and abuse protection (including bot-detection and demo build caps).

2.6 Cookies, advertising tags, and similar technologies

We use cookies and similar technologies on the Titan Properties for authentication, security, preferences, and analytics. Our marketing site also carries four advertising measurement tags - the Meta (Facebook) pixel, the Google Ads tag, the Microsoft Advertising UET tag, and the OpenAI (ChatGPT ads) pixel - which tell us which advertisement brought us a customer. They do not all behave the same way, and where you are decides what loads: see Section 6, which sets out exactly what each one receives and how to turn them off.

2.7 Previews we build before you ask

Sometimes we build a sample website for a business that has not contacted us, to show that business what we could do. Everything in one of those previews comes from publicly listed business information - the business name, town, trade, published phone number, and the sort of details a business puts on its own public listing. We do not buy personal data for this, and we do not use anything a member of the public could not already look up. A preview like this is private: it sits at a web address that does not contain the business's name, it is served with instructions telling search engines not to index it, it carries a notice saying it is not affiliated with that business and is not published, and it is deleted on the date printed on it. If you are that business and you want the preview gone sooner, ask us (Section 14) and we will delete it and everything built with it, usually the same day; you do not have to give a reason and we will not ask for one.

2.8 Information from third parties

We may receive information about you from the providers listed in Section 5, such as Stripe (billing/fraud signals), Google (Business Profile data and analytics), and our hosting and email providers (delivery and security data).

We do not intentionally collect sensitive categories of personal information (such as Social Security numbers, government IDs, health, biometric, or precise geolocation data). Please do not submit sensitive information through the intake form or support channels.

3. How we use information

We use information for the following purposes:

1. To generate, build, and host your website, including running your intake content through our AI engine (see Section 4), creating and editing your site code, and deploying it. 2. To provide your demo and, if you subscribe, to convert it into your live site. 3. To register and connect your domain and provision SSL/security for your site. 4. To process payments, manage your subscription and credits, issue refunds, and send receipts, through Stripe. 5. To process and apply your edit requests, including metering credit usage. 6. To provide customer support, including AI-assisted chat and email support and account actions such as checking your credit balance or processing a refund. 7. To communicate with you, including transactional and account emails, onboarding emails, billing notices, and service updates. 8. To operate, secure, and improve the Service, including troubleshooting, analytics, abuse and fraud prevention, rate limiting, enforcing build caps, and maintaining backups. 9. To enforce our Terms and policies and to run content moderation, including automated screening of intake content before a site is generated or a domain is registered. 10. To advertise and measure marketing, including via the Meta pixel, the Google Ads tag, the Microsoft Advertising UET tag, and the OpenAI (ChatGPT ads) pixel, and via analytics. This includes sending the advertising platforms a one-way scrambled (hashed) version of your email address when you finish a free demo request and after a purchase, so they can match it to the advertisement you clicked; they cannot read it back as an email address. OpenAI is not sent your email address in any form. 11. To build a sample website for a business that has not contacted us, using only publicly listed business information (see Section 2.7). 12. To comply with law and to establish, exercise, or defend legal claims.

We do not sell your information for money. Sharing your scrambled email address with an advertising platform for measurement may count as "sharing" under some state laws; a Global Privacy Control signal and the banner control turn it off. Please also see Section 6 and the note on "sharing" and targeted advertising in Section 8.

4. AI processing disclosure

Our Service is powered by AI. To generate and edit your website, we send your intake content and edit requests to third-party AI providers, currently:

• Anthropic (Claude) - used to generate website text/code and to power AI support.
• Google (Gemini) - used to generate website text and images.

This means the business information, brand details, page content, photos, and edit instructions you submit are transmitted to and processed by these AI providers so they can return generated text, images, or code for your site. We instruct our providers to process this data to deliver our Service. We do not control, and are not responsible for, the providers' independent practices beyond our contractual arrangements; you should review their terms if that is important to you.

Because the Service is automated, AI-generated output may occasionally be inaccurate, incomplete, or unexpected, and may be produced without human review. Please review your demo and live site, and do not submit confidential or sensitive information you would not want processed by automated systems.

5. Subprocessors and service providers

We rely on the following third-party providers ("subprocessors") to operate the Service. Each receives only the information needed to perform its function. This list may change; see Section 12 for how we communicate updates.

We may also use other infrastructure, security, logging, and operational vendors that process data on our behalf under appropriate confidentiality and data-protection terms.

6. Cookies and tracking technologies

We use the following types of cookies and similar technologies:

• Strictly necessary / functional - to keep you logged in, secure your session, remember preferences, and protect against abuse.
• Analytics - to understand how the Titan Properties are used so we can improve them.
• Advertising - four measurement tags on our marketing site: the Meta (Facebook) pixel, the Google Ads tag, the Microsoft Advertising UET tag, and the OpenAI (ChatGPT ads) pixel. They are used to measure ad performance and, for Meta, to build and target advertising audiences.

Advertising tags, in plain terms. On titanwebdesign.net we run four advertising measurement tags: the Meta (Facebook) pixel with Meta's Conversions API, the Google Ads tag, the Microsoft Advertising UET tag, and the OpenAI (ChatGPT ads) pixel with OpenAI's Conversions API. They tell us which ad brought us a customer, and nothing else. What they receive: the pages you view on our marketing site, whether you started the free demo form, whether you asked for a free demo, whether a purchase happened and its amount, the click identifier from the ad you arrived on (fbclid, gclid or msclkid, or OpenAI's click reference), each platform's own cookies, your IP address and your browser user agent. The OpenAI pixel receives less than this - see below.

Where you are decides what loads. If you are in the United States, all four tags load when the page does, and you can turn all four off at any time - from the cookie banner, from "Cookie choices" in the footer of every page, or with a Global Privacy Control signal (below). If you are outside the United States, the Google and Microsoft tags do not load at all, and the Meta pixel loads only if you accept the cookie banner, as does the OpenAI pixel. If we cannot tell where you are, we treat you as outside the United States. If your browser sends a Global Privacy Control signal we treat it as "off" everywhere: none of the four tags loads, no advertising cookie is created, no event is sent, and we do not ask you again.

The Meta pixel specifically. We run the Meta pixel in your browser and, alongside it, Meta's Conversions API, which sends the same events from our server. In the United States the pixel loads when the page does, unless you have turned it off; everywhere else, neither one loads or sends anything until you accept the cookie banner. The pixel tells Meta when you view a page, which of our trade pages you opened (for example, the page about websites for roofers), when you tap a button to start a free demo, when you finish a free demo request, and when a purchase happens. The events we send carry no name, email address, phone number or business name. When you finish a free demo request, and after a purchase, the Conversions API sends Meta a one-way scrambled (hashed) version of your email address so the event can be matched to the ad you clicked. Meta's pixel can also take a hashed copy of an email address or phone number typed into a form on our site, for the same matching. Meta also receives its own browser cookies (named _fbp and _fbc) as well as the categories listed above. The browser event and the server event carry the same event id so that Meta counts one action once. If you turn ad measurement off or decline the banner, the pixel stops sending events straight away, it does not load on your later visits, we stop reading Meta's cookies, and no Conversions API event is sent for you. You can also review and limit ad tracking in your Meta ad settings at facebook.com/adpreferences.

The OpenAI (ChatGPT ads) pixel specifically. We advertise in ChatGPT, and we run OpenAI's ads pixel in your browser and, alongside it, OpenAI's Conversions API, which sends the same event from our server. It follows the same rules as the Meta pixel: in the United States it loads when the page does, unless you have turned it off; everywhere else, neither one loads or sends anything until you accept the cookie banner. It tells OpenAI that you arrived from one of our ChatGPT advertisements, when you start the free demo form, and when you finish a free demo request. Those are the only events we send it: no page-by-page browsing events and nothing about purchases. Along with those events OpenAI receives the click reference from the advertisement you arrived on, its own browser cookies (named __oppref and __obref), your IP address and your browser user agent. The events carry no name, email address, phone number or business name, and OpenAI is not sent your email address in any form, hashed or otherwise. The browser event and the server event carry the same event id so that OpenAI counts one action once. If you turn ad measurement off or decline the banner, the pixel stops sending events straight away, it does not load on your later visits, we stop reading its cookies, and no Conversions API event is sent for you.

Your email address, when you ask for a demo or buy. When you finish a free demo request, and after a purchase, we send the advertising platforms a one-way scrambled (hashed) version of your email address so they can match it to the ad click; they cannot read it back as an email address. We do not sell your information for money. Sharing your scrambled email address with an advertising platform for measurement may count as "sharing" under some state laws; the Global Privacy Control signal and the banner control turn it off. We never send it at all unless advertising measurement is on for you under the rules above.

Where we never load an advertising tag. No advertising tag loads on your account pages - the dashboard, the login and password-reset pages, or the admin area - or on any browser that opts out as described below.

Your choices:

• Turn all four tags off - the Meta pixel, the Google Ads tag, the Microsoft UET tag and the OpenAI pixel - from the cookie banner, or at any time from "Cookie choices" in the footer of every page. Your choice is remembered in that browser.
• Adding ?notrack=1 to the address of any page on our site (for example, titanwebdesign.net/?notrack=1) also turns all four tags off in that browser for a year; ?notrack=0 undoes it.
• You can control or block cookies through your browser settings. Blocking strictly necessary cookies may break parts of the Service.
• You can manage interest-based advertising through tools such as the Digital Advertising Alliance (optout.aboutads.info) and the Network Advertising Initiative (optout.networkadvertising.org), and through your Meta ad settings.
• Some browsers send a Global Privacy Control (GPC) signal. We treat a valid GPC signal as a request to opt out of "sale" or "sharing" of personal information for the browser/device that sends it, and we honour it whether or not the law requires us to: nothing advertising-related loads for that browser, and it is not asked again.

7. Data retention

We keep information for as long as needed to provide the Service and for legitimate business and legal purposes, then delete or anonymize it. In general:

• Unconverted demo sites and their associated build data. A free demo stays available for 30 days and, if it is not purchased, it and its associated build data are removed at the end of that period. A preview we built for a business that has not contacted us (Section 2.7) has the same 30-day life, and the date it comes down is printed on the preview itself; it, its hosting and every stored image of it are deleted on that date.
• Active customer account, site, and content data are retained for as long as your account/subscription is active and your site is live.
• After cancellation, we may retain certain data for a limited wind-down and dispute period, after which it is deleted or anonymized, except as noted below.
• Billing and transaction records are retained as required for tax, accounting, and legal compliance (typically several years).
• Backups (including daily backups of live sites) are retained on a rolling basis and may persist for a limited period after deletion from active systems before being overwritten.
• Support records are retained as needed to handle inquiries and disputes.
• Where your visits came from (the first and most recent source we keep for the random identifier described in Section 2.5) is deleted after 13 months without a visit, or on your next visit after you turn ad measurement off.

If you ask us to delete your data, we will honor the request as described in Section 8, subject to legal exceptions and to the practical limits of backups and logs.

8. Your privacy rights and choices

8.1 Choices available to everyone

• Access and update much of your account and site information through your dashboard.
• Opt out of marketing emails using the unsubscribe link (we will still send transactional/account messages).
• Manage cookies and ad tracking as described in Section 6.
• Close your account and request deletion by contacting us (see Section 13).

8.2 United States state privacy rights (including California)

Depending on your state of residence, you may have rights under laws such as the California Consumer Privacy Act, as amended (CCPA/CPRA), and similar laws in other states. These rights may include:

• The right to know/access the personal information we have collected about you and how we use and disclose it.
• The right to delete personal information, subject to exceptions.
• The right to correct inaccurate personal information.
• The right to opt out of the "sale" or "sharing" of personal information and of targeted advertising. We do not sell personal information for money. However, some advertising technologies - the Meta pixel, the Google Ads tag, the Microsoft Advertising UET tag, the OpenAI (ChatGPT ads) pixel, and the hashed email address we send the advertising platforms when you ask for a free demo or buy - may be considered a "sale" or "sharing" under certain state laws. You may opt out from "Cookie choices" in the footer of every page or from the cookie banner, by sending a Global Privacy Control signal, or by contacting us. To exercise a Do Not Sell or Share request, ask the Titan Assistant at /support or email a human at support@titanwebdesign.net.
• The right to limit the use of sensitive personal information (note: we do not seek to collect sensitive personal information).
• The right to non-discrimination for exercising your rights.

To exercise these rights, contact us using Section 13. We will verify your request, typically by confirming control of the account email or other identifying details, and respond within the time required by applicable law. You may use an authorized agent to submit a request on your behalf where the law allows, subject to verification.

Note: much of the data we handle is business information submitted by business owners, and the application of these laws can differ for business-to-business and employee/owner contexts.

8.3 EU/UK and other international visitors (GDPR/UK GDPR)

If you are located in the European Economic Area, the United Kingdom, or another region with comparable laws, you may have additional rights, including the rights to access, rectify, erase, restrict, or object to processing, and the right to data portability, as well as the right to lodge a complaint with your local data protection authority. Where we rely on consent, you may withdraw it at any time. Our primary audience is United States businesses, and the Service is not specifically directed to the EU/UK; if you nonetheless use it from those regions, contact us to exercise your rights.

9. Content you submit and your responsibilities

You represent that you have the rights and any necessary permissions and consents to submit the content you provide (including logos, photos, images of people, brand assets, and text), and to authorize us and our subprocessors and AI providers to process it to generate, host, and operate your website. You are responsible for the lawfulness of your content and for your own website's privacy practices toward its visitors. See our Terms of Service and Acceptable Use Policy for details, including our content-moderation rights.

10. Data security

We use reasonable administrative, technical, and organizational measures designed to protect information, including encryption in transit, access controls, hashed passwords, row-level data isolation between customers, and reputable infrastructure providers. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying us promptly if you suspect unauthorized access. If we become aware of a breach affecting your information, we will notify you and authorities as required by applicable law.

11. International data transfers

We are based in the United States, and our providers may process and store information in the United States and in other countries. If you access the Service from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States and other jurisdictions, which may have different data-protection laws than your own. Where required, we rely on appropriate safeguards for such transfers.

12. Children's privacy

The Service is intended for businesses and adults. It is not directed to children, and we do not knowingly collect personal information from anyone under 18 (or under 13 in any event). If you believe a child has provided us personal information, contact us and we will delete it as required by law.

13. Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide additional notice as appropriate (for example, by email or an in-Service notice). Your continued use of the Service after an update takes effect means you accept the revised Policy.

14. How to contact us and exercise your rights

For privacy questions or to exercise any of your rights, you can ask the Titan Assistant or email a human:

• Ask the Titan Assistant: /support
• Email a human: support@titanwebdesign.net
• Operator: Titan Web Design (a sole proprietorship)
• Governing law: This Policy and any related disputes are governed by the laws of Georgia, United States, without regard to conflict-of-laws rules, except where applicable privacy law requires otherwise.

If you have an unresolved privacy concern, you may also have the right to contact your state attorney general or, for EU/UK visitors, your local data protection authority.

Refund-related processing (including any thirty (30) day reversal period) is described in our Terms of Service; this Policy covers only how we handle the personal information involved in those processes.