US State Privacy Notice

Personal information we collect

In the last 12 months we have collected these categories of personal information:

• Identifiers: name, email address, account ID, IP address.
• Commercial information: plan, subscription and invoice history. Card data is collected by Stripe, not us.
• Internet or network activity: log data about how you use the website, free tools and app.
• Professional information: company name and website you provide.
• Inferences: none. We don't build profiles about individuals.

We do not collect sensitive personal information as defined by these laws, other than account log-in credentials handled by our authentication provider.

Sources and purposes

We collect this information directly from you, automatically when you use our services, and from Google if you connect Search Console or Analytics. We use it to provide and secure the service, bill you, communicate with you, comply with law and improve aeotime — the business purposes described in our Privacy Policy.

Disclosure, sale and sharing

We disclose personal information to service providers for business purposes only: hosting and database, authentication (Clerk), payments (Stripe), email delivery, and AI and search-data providers that process the prompts you track.

We do not sell personal information and do not share it for cross-context behavioral advertising, and have not done so in the last 12 months. We don't use personal information for targeted advertising or profiling that produces legal or similarly significant effects. We don't knowingly collect information from anyone under 16.

Retention

Account and workspace data are kept while your account is active and deleted within 30 days after you close it. Invoices are kept as long as tax law requires, and security logs for up to 90 days.

Your rights

Depending on your state, you have the right to:

• know and access the personal information we hold about you, and get a portable copy;
• correct inaccurate personal information;
• delete personal information we collected from you;
• opt out of the sale or sharing of personal information, targeted advertising and profiling (we don't do these);
• not be discriminated against for exercising any of these rights.

We honor Global Privacy Control (GPC) browser signals as an opt-out request.

How to exercise your rights

Email [email protected] from your account email, or from the email address the request concerns. We verify your identity by confirming control of that email address and respond within 45 days (extendable once by 45 days where the law allows).

You may use an authorized agent; we will ask for signed permission and may verify your identity directly.

Appeals

If we decline your request, you can appeal by replying to our decision email with "Appeal" in the subject. We'll respond within 60 days (45 days in some states). If you disagree with the outcome, you can contact your state attorney general.