Privacy policy.
The short version: we collect what we need to run your site and bill you. We never sell or share your data. You can delete your account and we'll wipe everything within 30 days.
1. Who we are
“Hands Free Sites” is operated by Fireproof Studio LLC, a Texas limited liability company.
2. What we collect
Information you give us: name, email, password, business description, billing details (Stripe handles cards; we never see them), domain info, content you publish, support emails. Automatic data: usage stats, device info (browser, OS, IP, screen), cookies (see section 5).
3. How we use it
To build, host, and operate your website. To bill you. To respond to support. To detect fraud and abuse. To send transactional emails (preview ready, payment failed) — these you can't opt out of. To send marketing emails only if you opted in.
We do not use your business description, content, or customer data to train AI models. AWS Bedrock is our AI provider; data sent there is not retained per their data protection terms.
4. Who we share it with
Sub-processors: AWS (hosting), Stripe (payments), Postmark (email), Cloudflare (DNS, if you opt in), Sentry (errors). Legal requirements: if subpoenaed. Business transfer: if we sell, the buyer is bound by this policy. We never sell your data. Never share with advertisers. Never share with data brokers.
5. Cookies
Essential cookies (login/preferences — required). First-party analytics (opt-out via banner). No Facebook pixel, no Google Ads, no LinkedIn Insight, no third-party retargeting on our marketing site.
6. Your rights
GDPR / CCPA / equivalent: access, correction, deletion, export, opt-out, withdraw consent. We extend these to all customers regardless of location. Email privacy@handsfreesites.com; we respond within 30 days, usually within 48 hours.
7. Data retention
Active accounts: as long as you exist. Cancelled: 30 days then deleted (billing records 7 years for tax). Site backups: 30 days. Server logs: 90 days. Support emails: 3 years.
8. Security
TLS in transit, AES-256 at rest. Passwords hashed with bcrypt. Cards tokenized by Stripe. Employee data access logged. Data breach notification within 72 hours.
9. International transfers
We're US-based. Servers in US-East-2 and US-West-2. EU/UK data transferred under the EU-US Data Privacy Framework.
10. Kids
Not for children. We don't knowingly collect data from under-13 (under-16 in EU). If you think we have data from a child, email privacy@handsfreesites.com.
11. Changes
Material changes: 30 days' email notice. Minor changes (typos, clarifications) update with new “last updated” date.
12. Contact us
Privacy: privacy@handsfreesites.com
Everything else: hello@handsfreesites.com
Mail: Fireproof Studio LLC, Attn: Privacy, Austin, TX USA
If anything is confusing, email us — we'd rather rewrite it than have you confused.