Legal
Privacy Policy
Last updated 18 October 2026
The short version
- We collect what you give us (questions to our assistant, enquiries, email, and what you put in your client account) and what is needed to run the site safely.
- We use it to answer you, quote and deliver your project, bill you, and keep the service secure. Questions to the assistant are kept to improve its answers.
- We do not sell your personal information, and deleoneai.com runs no advertising or analytics trackers.
- A small number of providers process data for us: Cloudflare, Supabase, Resend, Stripe and Groq.
- You can ask us to see, correct or delete your information at hello@deleoneai.com.
1. Who we are
De Leone (“De Leone”, “we”, “us”) designs and builds websites and the software that runs behind them. This policy explains how we handle personal information when you visit deleoneai.com, use the assistant on it, send us an enquiry, email us, or use a De Leone client account. We are the party responsible for that information.
Questions about this policy: hello@deleoneai.com.
2. What we collect
Information you give us
- The assistant. The questions you type and the answers it gives. Please do not type passwords, payment details or other sensitive information into it.
- Enquiries and quote requests. Your name, a way to reach you (email or phone), and what you tell us about your business and what you need, including a website address if you give one.
- Email. Messages you send to an @deleoneai.com address, with the sender’s details and any attachments.
- Client accounts. Your name, email address, optional phone number and company details; the projects, requests, approvals, messages and files in your account; and your sign-in details (your password is stored only as a secure hash by our sign-in provider; two-step sign-in is optional).
- Payments. Card payments and invoices are handled by Stripe. We receive payment status, amounts, plan and invoice records; we never see or store your full card number.
Information collected automatically
- Technical data. Like any website, our hosting provider processes your IP address, browser type and request details to deliver pages and protect the site from abuse. We use IP addresses briefly to limit how fast the assistant can be used.
- If you ask us to look at a website. When you name a site in the assistant, we read that site’s public pages once and report what we saw. We do not store anything about you from that site.
3. How we use it
- To answer your questions, respond to enquiries and prepare quotes.
- To deliver projects: build, review and launch your work, and run your client account.
- To bill you and keep accounting records.
- To improve the assistant’s answers, using the questions people ask it.
- To keep the site and accounts secure, prevent abuse, and fix problems.
- To meet legal, tax and accounting obligations.
If you are in the European Economic Area or the UK, our legal bases are: taking steps at your request before a contract and performing it (enquiries, quotes, client work, billing); our legitimate interests in running, securing and improving our service (security, assistant improvement); and compliance with legal obligations (accounting and tax).
We do not sell your personal information, and we do not share it for cross-context behavioural advertising.
5. How long we keep it
We keep personal information only as long as we need it for the purposes above: enquiries for as long as a conversation about your project may continue; client account records for the length of our relationship and afterwards as needed for warranty, support and records; billing records for as long as tax and accounting law requires; assistant questions for as long as they help improve the answers. You can ask us to delete information sooner, and we will unless the law requires us to keep it.
6. Your rights
Depending on where you live, you may have the right to:
- know what personal information we hold about you and get a copy;
- correct information that is wrong;
- ask us to delete it;
- object to or restrict some uses, or withdraw consent where we rely on it;
- receive your information in a portable format.
California residents have the rights above under the CCPA, as amended by the CPRA, including the right to know, delete and correct, and the right not to be discriminated against for using them. We do not sell or share personal information as those laws define it.
EEA and UK residents may also complain to their local data protection authority.
To use any of these rights, email hello@deleoneai.com. We will confirm the request comes from you, and we will respond within the time the law allows (normally within 30 days).
7. Security
Everything between your browser and deleoneai.com is encrypted (HTTPS). Client accounts are protected by sign-in, optional two-step sign-in, and database rules that let each client see only their own records. No system is perfectly secure, but we work to protect your information and will tell you if a breach affects you as the law requires.
9. Children
Our services are for businesses and are not directed to children under 16. We do not knowingly collect their information; if you believe a child has given us information, contact us and we will delete it.
10. Changes and contact
We may update this policy as our service changes. The date at the top shows the latest version; if a change is significant, we will say so on the site or tell our clients directly.
De Leone · hello@deleoneai.com · deleoneai.com