Privacy policy

Effective October 16, 2026

Elementry builds websites and lets our clients change them by asking an AI app. This page explains what we collect to do that, why, who else handles it, how long we keep it, and how to ask us to see, correct, or delete it. Elementry is a small business in the United States, run by one person, and "we" on this page means that person.

The short version

We collect only what we need to run your site, keep your account secure, bill you, and improve the editor.
We don't sell your information, use it for advertising, or use it to train AI.
We never see your conversations with your AI app, only the changes it asks to make to your site.
We use no tracking cookies.

What we collect from clients

Your account: your name or your business's name, your email address, your site's addresses, and your password. We store the password only in a scrambled form that can't be turned back into the password.
Your site: its pages, text, photos, and fonts, and every change made to them. Photos are published as you upload them, so any location your phone or camera saved in a photo goes with it.
Billing: your plan, its price, whether it's paid, and when it renews. Stripe collects your card details directly. We never see or store them.
Messages: problems you report through your AI app and anything you send us by email or the contact form. A report from your AI app includes your account and site details, so we can help.
Sign-in records: which AI apps you've connected, so they stay signed in, and a count of recent failed sign-ins, so we can stop someone guessing your password. Any email address typed into a sign-in or password reset form is kept for up to an hour to limit repeated attempts, whether or not it belongs to a client.
Usage records: a record of each request your AI app makes to the editor, and of each sign-in, password reset, and upload, with when it happened, how long it took, whether it worked, and counts such as how many files changed. They hold no email or IP addresses and nothing you said to your AI app.

What we collect from visitors to our website

The contact form: your name, email address, website if you give one, and message. They're emailed to us and not stored on our website.
A spam check on the contact form confirms that a person is sending it. It receives your IP address and details about your browser.
Analytics count visits to our pages, such as how many people viewed a page and which site sent them. They use no cookies and don't collect personal information.

Visitors to our clients' sites

Each client's site belongs to the client, and the client is responsible for telling their visitors how it uses their information. Our part is small. Client sites are hosted by our hosting provider, and their forms are delivered by email. If a form can't be delivered, the site sends the submission to us by email instead, so we can fix the problem and make sure the client gets the message. We keep it only in our email.

How we use it

To make the changes you ask for, show you a preview, and publish your site.
To sign you in and keep your account secure.
To send account email, such as your welcome, password links, and replies to your messages.
To bill you, through Stripe.
To find and fix problems. Our service logs record requests to the editor and account pages, such as which page or change was requested and whether it worked, not what you said to your AI app.
To see how clients use the editor and where it falls short.

Who else handles it

We rely on a few services to run Elementry. Each handles your information only to provide its service to us, under its own privacy policy.

Our hosting provider runs our website, the editor, and client sites, stores account records, takes preview screenshots, and provides the spam check, analytics, and our service logs.
A code hosting service stores each client site's files and the history of its changes.
Stripe, our payment processor, takes payments and sends receipts and payment reminders.
An email delivery service sends our email.
Our email provider stores the email we receive, including contact form messages, problem reports, and form submissions passed on from client sites.

When you connect Claude, ChatGPT, or another AI app, it reads what it needs to make your changes: your site's files, previews of your pages, your name and email address, and your plan's status. What the app does with that is governed by its maker's privacy policy and your settings there, including whether your chats are used to train AI.

We may also share information when the law requires it.

Cookies

Our website sets no cookies of its own. Our sign-in pages, for your account and for connecting an AI app, set a cookie when you open them that protects the form for 10 minutes. Once you sign in to your account, a second cookie keeps you signed in for up to 24 hours. Neither tracks you.

How long we keep it

Your account and site: while you're a client. When your plan ends, editing stops, and we keep your account and site for 90 days in case you come back or want a copy of your site. After that, we delete your account and either hand your site's files over to you or delete them.
Sooner, if you ask: ask us to delete your information and we'll do it within 30 days, apart from billing records.
Billing records: as long as tax law requires, usually seven years. Stripe keeps its own records under its policy.
Messages: as long as we need them to help you and follow up.
Your site's history: every change is kept so it can be undone, until your site's files are deleted.
Connected AI apps: each sign-in lasts up to 30 days, or until you change your password.
Usage records: while you're a client, then deleted with your account.
Service logs: deleted automatically within 7 days.

Your choices

Wherever you live, you can ask us to show you the information we hold about you, correct it, delete it, or give you a copy of your site. Send the request through our contact form, from the email address on your account if you're a client, and we'll reply within 30 days. We may ask you to confirm the request came from you. Asking won't change how we treat you.

You can disconnect an AI app at any time in its settings. Changing your password signs out every connected app.

Keeping it safe

Everything travels over encrypted connections, passwords are stored scrambled, and repeated failed sign-ins lock the account for a while. Only we can reach the accounts that hold your information. No system is perfectly secure, so if a breach affects your information, we'll tell you promptly.

Where it's stored

Your information is stored in the United States and wherever our providers run their networks. Our hosting provider serves pages from data centers around the world.

Children

Elementry is for businesses and isn't meant for children under 13. We don't knowingly collect information from them. If you think we have, contact us and we'll delete it.

Changes to this policy

When we change this policy, we update the date at the top. If a change affects how we use clients' information, we email clients before it takes effect.

Questions

Ask us anything about this policy through our contact form.