Privacy Policy

What we collect

• Account data from Google sign-in: your name, email address and profile picture.
• Content you create: site text, images, product details and business information.
• Enquiries you send us, including the Agency enquiry form.
• Operational data: correlation identifiers, a salted hash of your IP address, and your country. We do not store raw IP addresses.

Why we use it

To operate your account and sites, to answer enquiries, to prevent abuse and fraud, to meet financial record-keeping obligations, and to keep the service reliable.

Who processes data for us

• Google Firebase — authentication, database and file storage.
• Vercel — website hosting and delivery.
• Stripe — payments and payouts, when commerce is enabled.
• OpenAI and Pinecone — the assistant on our public website.

How long we keep it

• Agency enquiries: 24 months from last activity, then anonymised. Enquiries marked spam are purged after 30 days.
• Financial records: retained as required for record-keeping obligations.
• Audit logs: retained and never modified or deleted.

Your choices

You can request a copy of your data or ask us to delete your account. Financial records that we are obliged to keep are retained with personal details removed.

How to contact us

Questions about this document can be sent to midcrowd.ai@gmail.com. We aim to respond within five business days.