1. Who We Are

ClientMint LLC [CITY, STATE/COUNTRY — TODO: fill in your legal entity and address]

2. What We Collect

Data	Why We Collect It	How Long We Keep It
Email address	Account creation and login	Until account deletion
Business name & description	To generate your website	Until site deletion
Generated website HTML	To publish and serve your site	Until site deletion
Contact form submissions	To show you leads in your dashboard	90 days
Payment information	Processed by Stripe — we never see your card number	Managed by Stripe
Usage logs	To enforce plan limits and prevent abuse	90 days
IP address	Rate limiting and security	24 hours

3. How We Use Your Data

• To create, store, and serve your AI-generated websites
• To manage your subscription and process payments
• To show you contact form submissions in your dashboard
• To enforce usage limits and prevent abuse
• To send important account and service notifications
• To improve our AI models and service quality (using anonymized, aggregated data only)

4. What We Never Do

• We never sell your personal data to third parties
• We never use your data for advertising targeting
• We never share your business description or website content with other users
• We never access your generated websites except for technical support you request

5. Third-Party Services We Use

To provide our service, we use these trusted third parties:

• Supabase — Database and authentication (SOC 2 compliant)
• Stripe — Payment processing (PCI DSS compliant)
• Anthropic — AI website generation (Claude API)
• Pexels — Stock photos and videos for generated sites
• Render — Server hosting

Each of these services has their own privacy policy. We only share the minimum data necessary with each provider.

6. Cookies

We use minimal cookies for authentication (keeping you logged in via Supabase) and session management. We do not use tracking cookies or advertising cookies. You can disable cookies in your browser, but some features may not work correctly.

7. Data Security

We take security seriously. Your data is:

• Encrypted in transit using TLS/SSL
• Stored in SOC 2 compliant infrastructure via Supabase
• Accessed only by systems that need it to provide the service
• Protected by row-level security policies in our database

No system is 100% secure. If you become aware of a security issue, please contact us at hello@clientmint.co immediately.

8. Your Rights

You have the right to:

• Access — Request a copy of the data we hold about you
• Correction — Request correction of inaccurate data
• Deletion — Request deletion of your account and all associated data
• Portability — Export your generated website HTML files at any time
• Opt-out — Unsubscribe from non-essential communications

To exercise any of these rights, email us at hello@clientmint.co. We'll respond within 30 days.

9. Children's Privacy

ClientMint is not intended for users under 18 years of age. We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us immediately.

10. International Users

Our servers are located in the United States. If you access our service from outside the US, your data will be transferred to and processed in the US. By using the service, you consent to this transfer.

If you are in the European Economic Area (EEA), you have additional rights under GDPR. Contact us at hello@clientmint.co to exercise these rights.

11. Changes to This Policy

We may update this privacy policy from time to time. We'll notify you of significant changes via email or a notice on our website. Continued use of the service after changes means you accept the updated policy.

12. Contact Us

Privacy questions, data requests, or concerns:

hello@clientmint.co