Get Started

Privacy Policy

Effective date: July 10, 2026 Last updated: July 10, 2026

This Privacy Policy explains how Titan Web Design, a sole proprietorship ("Titan Web Design", "Titan", "we", "us", or "our") collects, uses, shares, and protects information in connection with our automated web design service available at titanwebdesign.net (the "Service"). Titan Web Design is operated in the United States.

By using the Service, submitting an intake form, or subscribing to a plan, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with it, please do not use the Service.

This Policy should be read together with our Terms of Service and Acceptable Use Policy.

1. About our Service and who we are

Titan Web Design is an automated web design service. You choose a template, submit an intake form with information about your business, and our artificial intelligence ("AI") engine automatically generates a FREE demo website for you. If you subscribe to a paid plan, the demo becomes your live website on your own domain, and you can request edits by typing them into your dashboard.

Most of our Service - including site generation, edits, customer support, and refund handling - is operated end to end by automated systems and AI, with no guaranteed human review of any individual request. Please keep this in mind when deciding what information to submit.

Our typical customers are small United States businesses, including blue-collar service businesses such as plumbers, HVAC contractors, electricians, roofers, and landscapers. The Service is intended for business use by business owners and their authorized representatives.

Two kinds of websites, two different data roles. This Policy covers:

  • The Titan Web Design marketing site at titanwebdesign.net and your customer account and dashboard ("Titan Properties"); and
  • The data you submit to us so we can build and host your website.

For the websites we generate and host for you, you (the customer) are responsible for the content of your own site and for the privacy practices and any privacy policy of that site, including any data your site collects from your own visitors. We act as your service provider/processor for that purpose. This Policy does not govern how your generated website treats its visitors; that is your responsibility as the site owner.

2. Information we collect

We collect the following categories of information.

2.1 Information you provide through the intake form

When you request a demo or build a site, you submit business and content information, which may include:

  • Business name, address, phone number, email address, and business hours.
  • Your Google Business Profile link and information drawn from that profile (for example, business name, address, hours, categories, photos, and reviews you have made public).
  • Your logo, brand colors, and other brand assets.
  • Page content, headlines, descriptions, services, products, and pricing you want displayed.
  • Photos and images you upload.
  • Social media links.
  • Any other content you choose to include in your website.

Some of this information may identify you or other individuals (for example, a personal phone number, a personal email address, or photos of people). You are responsible for ensuring you have the rights and any necessary consents to submit it (see Section 9).

2.2 Account credentials

If you create an account, we collect your email address, a password (stored only in hashed form by our authentication provider), and related authentication data needed to log you in and secure your account.

2.3 Payment information

When you subscribe or buy credits, payment is processed by Stripe. Stripe collects and processes your payment card or bank information directly. Titan does not receive or store your full card number. We receive limited billing details from Stripe, such as your name, billing email, the last four digits and brand of your card, billing ZIP/country, subscription status, and transaction history, so we can manage your subscription, credits, refunds, and receipts.

2.4 Support communications

When you contact us through chat, email (for example, [email protected]), or the dashboard, we collect the contents of your messages and any information you choose to include, along with metadata such as timestamps and your account identifiers. Our support is primarily handled by AI (see Section 4).

2.5 Usage, device, and analytics information

When you use the Titan Properties, we and our providers automatically collect technical information, such as:

  • IP address, approximate location derived from IP, browser type, device type, and operating system.
  • Pages viewed, links clicked, referring/exit pages, and timestamps.
  • Log and diagnostic data, and information used for security, fraud prevention, rate limiting, and abuse protection (including bot-detection and demo build caps).

2.6 Cookies, the Meta pixel, and similar technologies

We use cookies and similar technologies on the Titan Properties for authentication, security, preferences, and analytics. Our marketing site also includes the Meta (Facebook) advertising pixel, which helps us measure and optimize our advertising. See Section 6 for details and your choices.

2.7 Information from third parties

We may receive information about you from the providers listed in Section 5, such as Stripe (billing/fraud signals), Google (Business Profile data and analytics), and our hosting and email providers (delivery and security data).

We do not intentionally collect sensitive categories of personal information (such as Social Security numbers, government IDs, health, biometric, or precise geolocation data). Please do not submit sensitive information through the intake form or support channels.

3. How we use information

We use information for the following purposes:

1. To generate, build, and host your website, including running your intake content through our AI engine (see Section 4), creating and editing your site code, and deploying it. 2. To provide your demo and, if you subscribe, to convert it into your live site. 3. To register and connect your domain and provision SSL/security for your site. 4. To process payments, manage your subscription and credits, issue refunds, and send receipts, through Stripe. 5. To process and apply your edit requests, including metering credit usage. 6. To provide customer support, including AI-assisted chat and email support and account actions such as checking your credit balance or processing a refund. 7. To communicate with you, including transactional and account emails, onboarding emails, billing notices, and service updates. 8. To operate, secure, and improve the Service, including troubleshooting, analytics, abuse and fraud prevention, rate limiting, enforcing build caps, and maintaining backups. 9. To enforce our Terms and policies and to run content moderation, including automated screening of intake content before a site is generated or a domain is registered. 10. To advertise and measure marketing, including via the Meta pixel and analytics. 11. To comply with law and to establish, exercise, or defend legal claims.

We do not sell your information for money. Please also see the note on "sharing" and targeted advertising in Section 8.

4. AI processing disclosure

Our Service is powered by AI. To generate and edit your website, we send your intake content and edit requests to third-party AI providers, currently:

  • Anthropic (Claude) - used to generate website text/code and to power AI support.
  • Google (Gemini) - used to generate website text and images.

This means the business information, brand details, page content, photos, and edit instructions you submit are transmitted to and processed by these AI providers so they can return generated text, images, or code for your site. We instruct our providers to process this data to deliver our Service. We do not control, and are not responsible for, the providers' independent practices beyond our contractual arrangements; you should review their terms if that is important to you.

Because the Service is automated, AI-generated output may occasionally be inaccurate, incomplete, or unexpected, and may be produced without human review. Please review your demo and live site, and do not submit confidential or sensitive information you would not want processed by automated systems.

5. Subprocessors and service providers

We rely on the following third-party providers ("subprocessors") to operate the Service. Each receives only the information needed to perform its function. This list may change; see Section 12 for how we communicate updates.

| Provider | Role | What it typically receives | | --- | --- | --- | | Stripe | Payments, subscriptions, credit purchases, refunds | Your name, billing email, payment card/bank details (collected by Stripe directly), transaction and subscription data. Titan does not store full card numbers. | | Supabase | Database, authentication, file/data storage | Account credentials (hashed password), intake form data, uploaded content, order and credit records, support records. | | Cloudflare | Hosting, CDN, SSL, security, deployment of your static site | Site files and assets, IP addresses and request metadata of visitors, security/anti-abuse data. | | Porkbun | Domain registration for your live site | Registrant details required to register your domain (for example, name, email, address). WHOIS privacy is applied where available. | | Resend | Outbound transactional and notification email | Your email address and the contents/metadata of emails we send you. | | Anthropic (Claude) | AI generation of site text/code; AI support | Intake content, edit requests, and support messages sent for processing. | | Google | Business Profile data, Gemini AI image/text generation, analytics | Your Google Business Profile link/data, intake content sent for AI generation, and usage/analytics data. | | Meta (Facebook) | Advertising pixel and ad measurement on the marketing site | Marketing-site activity and identifiers used for ad measurement and targeting. |

We may also use other infrastructure, security, logging, and operational vendors that process data on our behalf under appropriate confidentiality and data-protection terms.

6. Cookies and tracking technologies

We use the following types of cookies and similar technologies:

  • Strictly necessary / functional - to keep you logged in, secure your session, remember preferences, and protect against abuse.
  • Analytics - to understand how the Titan Properties are used so we can improve them.
  • Advertising - the Meta pixel on our marketing site, used to measure ad performance and to build and target advertising audiences.

Your choices:

  • You can control or block cookies through your browser settings. Blocking strictly necessary cookies may break parts of the Service.
  • You can manage interest-based advertising through tools such as the Digital Advertising Alliance (optout.aboutads.info) and the Network Advertising Initiative (optout.networkadvertising.org), and through your Meta ad settings.
  • Some browsers send a Global Privacy Control (GPC) signal. Where required by law, we treat a valid GPC signal as a request to opt out of "sale" or "sharing" of personal information for the browser/device that sends it.

7. Data retention

We keep information for as long as needed to provide the Service and for legitimate business and legal purposes, then delete or anonymize it. In general:

  • Unconverted demo sites and their associated build data are automatically expired and deleted approximately 14 days after creation (subject to change; see your dashboard or current settings for the exact window).
  • Active customer account, site, and content data are retained for as long as your account/subscription is active and your site is live.
  • After cancellation, we may retain certain data for a limited wind-down and dispute period, after which it is deleted or anonymized, except as noted below.
  • Billing and transaction records are retained as required for tax, accounting, and legal compliance (typically several years).
  • Backups (including daily backups of live sites) are retained on a rolling basis and may persist for a limited period after deletion from active systems before being overwritten.
  • Support records are retained as needed to handle inquiries and disputes.

If you ask us to delete your data, we will honor the request as described in Section 8, subject to legal exceptions and to the practical limits of backups and logs.

8. Your privacy rights and choices

8.1 Choices available to everyone

  • Access and update much of your account and site information through your dashboard.
  • Opt out of marketing emails using the unsubscribe link (we will still send transactional/account messages).
  • Manage cookies and ad tracking as described in Section 6.
  • Close your account and request deletion by contacting us (see Section 13).

8.2 United States state privacy rights (including California)

Depending on your state of residence, you may have rights under laws such as the California Consumer Privacy Act, as amended (CCPA/CPRA), and similar laws in other states. These rights may include:

  • The right to know/access the personal information we have collected about you and how we use and disclose it.
  • The right to delete personal information, subject to exceptions.
  • The right to correct inaccurate personal information.
  • The right to opt out of the "sale" or "sharing" of personal information and of targeted advertising. We do not sell personal information for money. However, some advertising technologies (such as the Meta pixel) may be considered a "sale" or "sharing" under certain state laws. You may opt out by adjusting cookie/ad settings, using a Global Privacy Control signal, or contacting us. To exercise a Do Not Sell or Share request, contact us at [email protected].
  • The right to limit the use of sensitive personal information (note: we do not seek to collect sensitive personal information).
  • The right to non-discrimination for exercising your rights.

To exercise these rights, contact us using Section 13. We will verify your request, typically by confirming control of the account email or other identifying details, and respond within the time required by applicable law. You may use an authorized agent to submit a request on your behalf where the law allows, subject to verification.

Note: much of the data we handle is business information submitted by business owners, and the application of these laws can differ for business-to-business and employee/owner contexts.

8.3 EU/UK and other international visitors (GDPR/UK GDPR)

If you are located in the European Economic Area, the United Kingdom, or another region with comparable laws, you may have additional rights, including the rights to access, rectify, erase, restrict, or object to processing, and the right to data portability, as well as the right to lodge a complaint with your local data protection authority. Where we rely on consent, you may withdraw it at any time. Our primary audience is United States businesses, and the Service is not specifically directed to the EU/UK; if you nonetheless use it from those regions, contact us to exercise your rights.

9. Content you submit and your responsibilities

You represent that you have the rights and any necessary permissions and consents to submit the content you provide (including logos, photos, images of people, brand assets, and text), and to authorize us and our subprocessors and AI providers to process it to generate, host, and operate your website. You are responsible for the lawfulness of your content and for your own website's privacy practices toward its visitors. See our Terms of Service and Acceptable Use Policy for details, including our content-moderation rights.

10. Data security

We use reasonable administrative, technical, and organizational measures designed to protect information, including encryption in transit, access controls, hashed passwords, row-level data isolation between customers, and reputable infrastructure providers. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying us promptly if you suspect unauthorized access. If we become aware of a breach affecting your information, we will notify you and authorities as required by applicable law.

11. International data transfers

We are based in the United States, and our providers may process and store information in the United States and in other countries. If you access the Service from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States and other jurisdictions, which may have different data-protection laws than your own. Where required, we rely on appropriate safeguards for such transfers.

12. Children's privacy

The Service is intended for businesses and adults. It is not directed to children, and we do not knowingly collect personal information from anyone under 18 (or under 13 in any event). If you believe a child has provided us personal information, contact us and we will delete it as required by law.

13. Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide additional notice as appropriate (for example, by email or an in-Service notice). Your continued use of the Service after an update takes effect means you accept the revised Policy.

14. How to contact us and exercise your rights

For privacy questions or to exercise any of your rights, contact us:

  • Email: [email protected]
  • Operator: Titan Web Design (a sole proprietorship)
  • Mailing address: Mailing address available on written request.
  • Governing law: This Policy and any related disputes are governed by the laws of Georgia, United States, without regard to conflict-of-laws rules, except where applicable privacy law requires otherwise.

If you have an unresolved privacy concern, you may also have the right to contact your state attorney general or, for EU/UK visitors, your local data protection authority.

Refund-related processing (including any thirty (30) day reversal period) is described in our Terms of Service; this Policy covers only how we handle the personal information involved in those processes.