Your Privacy.
Our Commitment.

• Service operator: Creative813, LLC (Firearm Websites), 3104 N Armenia Ave, Tampa, FL 33607, USA
• Service: Firearm Websites website plans, built with an AI-powered website builder that analyzes a customer's existing site (if one exists), generates new pages with Claude AI models, and deploys the finished site to managed hosting
• Contact / Data Protection: [email protected]

2.1 Account & billing information

When you sign up or purchase a plan we collect: name, email address, phone number (optional), business name, billing address, and payment-card information. We do not store full card numbers — payment cards are tokenized by our payment processor (Authorize.net Customer Information Manager). We store only the tokenized profile reference, the card's last 4 digits, and the brand (Visa, Mastercard, etc.) for billing display.

2.2 Site content you provide

• Source URL. If you supply an existing website URL we fetch a copy of its public HTML, images, and metadata for the redesign. We store the fetched content on Amazon S3 and PostgreSQL.
• Uploads. Images, logos, documents and any other files you upload are stored on Amazon S3 in your project's private prefix and are accessible to you (and to us for support) through your account.
• Chat & prompts. Conversations you have with the AI editor (the AI chat that edits your pages) are stored in our database so we can show you your history, undo your edits, and improve the product.
• Generated pages. The HTML, CSS, and assets the AI produces for your site are stored on our servers and on the hosting account we provision for you.

2.3 Usage information

• Page activity. When you log in we record pages you visited inside the account dashboard, buttons you clicked, projects you opened, edits you made, and timestamps — this drives the dashboard, generation history, undo stack, and support tickets.
• Device & browser. Standard server logs: IP address, user-agent, referrer, viewport size, language. We use this to debug issues and to detect abusive traffic.

2.4 Communications

Emails you send to support, support-ticket replies, support-form attachments, voice-input transcripts (when you use the editor's microphone), and the metadata around them (subject, time, attachments).

Contact forms and call bookings. When you fill in a contact form on firearmwebsites.com we receive your name, email address, phone number, the option you pick and your message. If you book a call through our scheduling link, Calendly collects the booking details you enter and shares them with us.

2.5 What we do not collect

• We do not collect your visitors' personal information through the website builder itself. (Forms on your site collect visitor data on your behalf — that data lives in your hosting account; you control it.)
• We do not buy, rent, or sell user lists.
• We do not run third-party advertising trackers on firearmwebsites.com or inside the app. (We use Google Analytics to measure visits in aggregate; see §8.)

• Provide the service — analyze your source URL, generate pages, deploy your site, accept your payments, send transactional emails. Uses: account info, site content, generated pages, billing info.
• Operate the AI editor — send your prompts + the relevant page HTML to AI providers so they can return edits. Uses: chat content, page HTML, brand colors, uploaded images.
• Customer support & troubleshooting — server logs, your project state, support-ticket attachments, the captured page snapshot the "Get Help" button includes.
• Notify you of relevant product changes, billing events, scheduled maintenance — email address, account state.
• Re-engagement emails after sign-up when you haven't finished building (5-step cadence). Uses: account info, sign-up date, project progress; you can opt out from the footer of any of those emails.
• Reply to your inquiries — answer contact-form messages and the calls you book with us. Uses: the details you send us.
• Detect and prevent fraud, abuse, payment chargebacks — IP address, device info, account history.
• Improve the product (anonymized model-quality metrics, post-deploy QA results) — de-identified usage metrics, error logs.

We do not use your business content (your site copy, images, customer lists) to train AI models. The models we call are third-party APIs (see §4) operating under contracts that explicitly forbid them from training on your inputs.

We share the minimum necessary to operate the service. Each of these providers is under contract with us and is not allowed to use your information for their own purposes.

• Anthropic — Claude AI models used for generation, analysis, editing. We send: your prompts, page HTML, source-site content excerpts, brand brief.
• Microsoft Azure OpenAI — GPT models used as a secondary AI route. We send: same as Anthropic, when Anthropic is unavailable or admin policy routes to Azure.
• OpenAI — DALL-E for AI-generated images; sometimes GPT as a tertiary fallback. We send: image prompts; rarely, text prompts.
• Amazon Web Services (S3, Bedrock) — storage of your uploads, generated HTML, source-image cache; AI calls (when routed through Bedrock). We send: files, image bytes, page HTML, text prompts.
• 20i (Stack Internet) — managed hosting where your finished site is published. We send: your site's HTML/CSS/JS, your domain configuration, FTP credentials we generate on your behalf.
• Cloudflare — DNS, SSL and content delivery for firearmwebsites.com and white-label reseller domains. We send: domain configuration, request metadata.
• Authorize.net — payment processing (CIM tokenization, subscription billing). We send: card details (directly to Authorize.net; never stored by us), billing address, charge amounts.
• SendGrid — transactional + marketing email delivery. We send: recipient email, subject, body, attachments.
• Outscraper — optional enrichment of your business info from public Google-Maps / Facebook listings during onboarding. We send: your domain or social URL.
• Pexels & Unsplash — stock photography APIs for generated pages. We send: search terms only (e.g. "modern apartment exterior").
• Browserbase — headless Chrome service used when your source site blocks our normal fetch. We send: source URL only; we don't send your account info.
• Slack — internal admin notifications (e.g. a new signup, a payment failure). We send: aggregated event metadata, never card numbers.

Our website also uses two services under their own privacy policies: Google (Google Analytics, to measure visits in aggregate, and the embedded Google Map) and Calendly (if you book a call). Google receives standard page-visit data such as IP address, device and pages viewed; Calendly receives the booking details you enter.

We do not sell or rent your personal information to anyone.

• Account data: while your account is active and for 24 months after closure (for billing reconciliation, refunds, legal compliance). After that, it is deleted or anonymized.
• Generated content & uploads: while your project exists. If you delete a project, the files are removed from our database and from S3 within 7 days. (You can also use the "Reset project" admin action which is immediate.)
• Server logs: 90 days.
• Payment records: 7 years (US tax law).
• Support tickets: 3 years.
• Re-engagement email send log: indefinitely, suppressed from new sends once you unsubscribe.

Depending on where you live (GDPR / UK GDPR / CCPA / CPRA / state laws) you may have the right to: access the data we hold on you, correct it, delete it, restrict our processing, port it to another service, object to processing, and (for EU/UK) lodge a complaint with a supervisory authority. To exercise any of these write to [email protected]. We verify identity (typically by emailing the address on file) and respond within 30 days.

You can also:

• Edit / download your account profile from your account dashboard.
• Delete a project from the project's manage page.
• Cancel your subscription from Settings → Subscription (your data follows §5 retention).
• Unsubscribe from marketing emails from the footer of any marketing email; transactional emails (receipts, security alerts) you cannot opt out of as long as you have an active account.

Firearm Websites is operated from the United States and uses providers in the United States and the European Union. If you're in the EU/UK and your data crosses borders, we rely on EU-approved Standard Contractual Clauses (SCCs) with our providers. If you'd like a copy of the relevant SCCs, write to [email protected].

• Strictly necessary: a session cookie (accessToken JWT in localStorage and an optional refresh cookie) so the app knows you're logged in. Cannot be disabled while you're using the app.
• Functionality: localStorage entries that remember your editor's undo history, tab preferences, and last-viewed project — never shared.
• Analytics: we do not use Google Analytics, Facebook Pixel, or any third-party advertising pixel on the account dashboard. Our website, firearmwebsites.com, uses Google Analytics, which sets first-party cookies (such as _ga) to measure visits in aggregate, and the embedded Google Map may set Google's own cookies. You can block them with a browser privacy extension or Google's Analytics opt-out add-on, with no loss of functionality.

• All traffic to firearmwebsites.com and the account dashboard is HTTPS only.
• Passwords are hashed with bcrypt; we never store cleartext passwords.
• Payment cards are tokenized by Authorize.net — we hold a token, never the card number.
• Production database access is restricted to the on-call engineering team; SSH is key-only with fail2ban.
• Our admins can impersonate your account for support purposes; every impersonation session is logged with the admin's identity (impersonatedBy field) so we can audit it.

No system is perfectly secure. If you suspect your account has been compromised email [email protected] and we will lock the account, force a password reset, and walk you through restoring access.

Firearm Websites is not intended for use by anyone under 16. We do not knowingly collect information from children. If you believe a child has signed up, contact [email protected] and we will delete the account.

We'll update this page when our practices change. Material changes will be flagged in the app and sent to the email on file at least 30 days before they take effect.

• Privacy questions & general support: [email protected]
• Mail: Creative813, LLC (Firearm Websites), 3104 N Armenia Ave, Tampa, FL 33607, USA