Privacy Policy

1. Introduction

Cozy Sites, operated by Cozy Empire ("we," "us," or "our"), respects your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website (cozysites.me) or use our services.

2. Information We Collect

Information you provide directly:

Data Type	When Collected
Full name	Contact form, onboarding, referral signup
Email address	Contact form, onboarding, referral signup
Phone number	Contact form, onboarding (optional)
Business name & details	Onboarding questionnaire
Business photos & logos	Onboarding questionnaire
Solana wallet address or CashApp $cashtag	Referral program — payout setup
Google account (name, email, profile photo)	Referral portal sign-in via Google OAuth
Payment information	Subscription checkout (processed by Stripe)

Information collected automatically:

When you visit our website, we may collect standard web analytics data such as your IP address, browser type, device type, referring URL, and pages visited. This information is collected through standard server logs provided by our hosting platform, Vercel.

We also operate our own first-party page-view analytics on the client websites we host. For visitors to those sites, we record the page path, referring URL, and browser user-agent, plus a one-way hashed, daily-rotating identifier derived from the visitor's IP address (used only to count unique visitors — the raw IP address is not stored). This data is used solely to show our clients how their own website is performing and is never used for advertising or cross-site tracking.

3. How We Use Your Information

We use your personal information to:

• Build and maintain your website as part of our subscription service.
• Process your subscription payments through Stripe.
• Communicate with you about your account, website, and service updates.
• Respond to your inquiries via our contact form.
• Administer the referral program and process referral payouts.
• Improve our website and services.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4. Third-Party Services

We use the following third-party services that may process your data:

• Stripe — Payment processing. Stripe collects and processes your payment card information securely. We do not store your card details. See Stripe's Privacy Policy.
• Vercel — Web hosting and serverless functions. Our website and client websites are hosted on Vercel's infrastructure, and server-side forms are processed by Vercel serverless functions. See Vercel's Privacy Policy.
• Supabase — Database. We use Supabase (PostgreSQL) to store client account data, onboarding/intake information, website content, site analytics, and referral program data. See Supabase's Privacy Policy.
• Anthropic (Claude) — AI website generation. The business information you provide during onboarding (business name, description, services, testimonials, etc.) is processed by Anthropic's Claude AI models to generate your website content and to review it for quality. See Anthropic's Privacy Policy.
• xAI (Grok) — AI logo and image generation. If your site build includes a generated logo or imagery, your business name and a short description are processed by xAI's image-generation models. See xAI's Privacy Policy.
• Resend — Transactional email delivery (account and service notifications). See Resend's Privacy Policy.
• Railway — Infrastructure hosting for our website build service, which processes your onboarding information when building your site. See Railway's Privacy Policy.
• GitHub — Code and content storage. Your website's published content is stored in a private code repository on GitHub as part of our deployment pipeline. See GitHub's Privacy Statement.
• OpenStreetMap (Nominatim) — Geocoding. Your business address may be sent to the OpenStreetMap Nominatim service to convert it to map coordinates for your website's local-business listing data. See the OSM Foundation's Privacy Policy.
• Web3Forms — Form submission relay. Contact form, onboarding, and referral form data is transmitted through Web3Forms and delivered to us via email. See Web3Forms' Privacy Policy.
• Cloudflare — Email routing for custom forwarding addresses (e.g. info@yourbusiness.com) on client domains we manage. Emails are forwarded in transit; Cloudflare does not store message content. See Cloudflare's Privacy Policy.
• Google Sign-In (OAuth) — Referral partners sign in to the referral dashboard using their Google account. We receive your name, email address, and profile photo from Google solely to create and identify your referrer account. See Google's Privacy Policy.
• Google Fonts — Typography. Google Fonts may collect usage data when fonts are loaded. See Google's Privacy Policy.

5. Data Storage & Security

We take reasonable measures to protect your personal information, including:

• HTTPS encryption on all pages.
• Secure payment processing through Stripe (PCI-DSS compliant).
• Limited access to personal data (only authorized team members).

However, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

6. Data Retention

We retain your personal information for as long as your subscription is active and for a reasonable period afterward for record-keeping, legal compliance, and dispute resolution. If you request deletion of your data, we will process the request within 30 days, subject to any legal obligations to retain certain information.

7. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate personal data.
• Deletion: Request deletion of your personal data.
• Opt-out: Unsubscribe from marketing communications at any time.

To exercise any of these rights, email us at cozyempire87@gmail.com.

8. Children's Privacy

Our services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have inadvertently collected data from a child under 13, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at cozyempire87@gmail.com.

9. Cookies & Similar Technologies

Our website does not use advertising, marketing, or cross-site tracking cookies. Our hosting platform (Vercel) may set a small number of functional first-party cookies used for basic session handling, deployment protection, and load balancing. These cookies are not used to identify individual users or track you across other websites. You may disable cookies in your browser settings; doing so should not affect core website functionality.

Referral signups and admin sessions may store a minimal token in your browser's local storage so you don't have to re-enter information on each visit. This data stays on your device and is not shared with third parties.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify subscribers of material changes via email. The "Effective Date" at the top of this page indicates when the policy was last revised.

11. Contact Us

If you have questions or concerns about this Privacy Policy or how we handle your data, contact us at:

• Email: cozyempire87@gmail.com
• Phone: 806-904-9434