Privacy Notice

LUXE BUILDS AI (“we,” “us,” “our”) operates luxeaibuild.com and provides custom AI-integrated websites for local businesses. For questions about this notice or your data, contact us at ahollins@luxeaibuild.com.

• Account & profile: name, email, business name, phone (optional).
• Authentication: login credentials, session tokens, sign-in provider (e.g. Google).
• Consultation & project data: answers to our intake questionnaire, project briefs, messages you send in your dashboard inbox, files or content you upload.
• Support communications: emails and form submissions you send us.
• Usage & technical: log data, device and browser info, IP address, pages viewed, referring pages, and diagnostic telemetry.
• Payment metadata: transaction identifiers, subscription status, invoice status, and billing period. Card and bank details are collected and stored directly by our payment processor — we do not receive or store full payment credentials.

• Provide the service — create your account, deliver your project, run your dashboard, send transactional emails (contract).
• Payments & invoicing — issue invoices and process orders and Care Plan billing (contract, legal obligation).
• Support — respond to your questions and requests (contract, legitimate interests).
• Security & fraud prevention — protect the service and detect abuse (legitimate interests, legal obligation).
• Product improvement & analytics — understand aggregated usage to improve the site (legitimate interests).
• Marketing — occasional updates about our services where you have opted in or as permitted by law (consent or legitimate interests). You can opt out at any time.

We share personal data only with the categories of recipients needed to run the service:

• Payment processor: handles card processing and payment confirmation for invoices we issue.
• Hosting & backend infrastructure: Lovable Cloud (Supabase) for authentication, database, and storage.
• Email delivery: our transactional email provider for auth emails and notifications.
• AI providers: the Lovable AI Gateway is used to power AI features; prompts and outputs may be processed by the underlying model provider under their terms.
• Professional advisers: lawyers, accountants, and auditors when required.
• Authorities: where required by law, court order, or to protect rights and safety.

We do not sell your personal data.

Some of our subprocessors may process data outside your country of residence (including in the United States). Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms.

We keep personal data only as long as needed to provide the service and to meet legal, tax, and accounting obligations. Account and project data is generally retained while your account is active and for a reasonable period afterwards (typically up to 7 years for financial records). Support messages and marketing preferences are retained until you ask us to delete them or you unsubscribe. Data is deleted or anonymised when no longer needed.

Depending on where you live, you may have the right to access, correct, delete, restrict, or port your personal data; to object to certain processing; and to withdraw consent. You may also have the right to lodge a complaint with your local data protection authority. To exercise any of these rights, contact us at ahollins@luxeaibuild.com. We respond within the timeframes required by applicable law (typically within one month under the UK/EU GDPR).

We apply appropriate technical and organizational measures to protect personal data, including encrypted transport (HTTPS), access controls, authenticated APIs, and row-level security in our database. No system is perfectly secure; please use a strong unique password and enable any additional protections available to you.

We use a minimal set of cookies and similar technologies. Essential cookies are required for authentication and to keep you signed in. Where we use analytics or marketing cookies, we do so only with consent where required by law, and you can manage preferences through your browser settings.

Our services are intended for businesses and adults. We do not knowingly collect personal data from children under 16. If you believe a child has provided us data, please contact us and we will delete it.

We may update this notice from time to time. Material changes will be reflected here with a new “last updated” date.